0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:54:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:54:23 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, 0x0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:54:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:54:36 executing program 6: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:54:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:54:36 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:54:36 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:54:36 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, 0x0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:54:36 executing program 4: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:54:36 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 562.055321] cgroup: fork rejected by pids controller in /syz0 14:54:36 executing program 6: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:54:36 executing program 4: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:54:36 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, 0x0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:54:36 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:54:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:54:36 executing program 2: unshare(0x28020600) semget$private(0x0, 0x4, 0x100) unshare(0x18010000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000008000000000076de76c4e4f082c1048dcc22006b31f3c8f0cb3949f8e9ccfd62c5cd5a3d35294729dea673951fd9f47eef68869bd87eb9f92a2e3dbfd87e33bfa61489c7740f139df0e8ab708cb3c4ff274f3a3934ef8e4ccc48"]) unshare(0x48020200) 14:54:49 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:54:49 executing program 2: statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x10, &(0x7f0000000000), 0x2) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x0, 0x2, 0x6a, 0x101, 0x10, @private1, @private2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xc15}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x7f, 0x0}, 0x80000001) r3 = io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) 14:54:49 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:54:49 executing program 4: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:54:49 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x4000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5327, &(0x7f0000000440)=@disckey={0x2, 0x0, "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"}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x2, '\x00', @d}) write$hidraw(r1, &(0x7f0000000240), 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r2}, &(0x7f0000000340)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r3, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)=ANY=[@ANYBLOB="010600000900000000000000758e99e8c58ac13a548deab865aecfe823e8d5545b6cf57aa85897db1b3350b8ed2547496c1442547a5d26cd5d80bbb6b4", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:54:49 executing program 6: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:54:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:54:49 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:54:49 executing program 6: epoll_create(0x8000) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:02 executing program 7: ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x10a, &(0x7f0000000000)=ANY=[@ANYBLOB="2d1655764840bbbbbbbbbbbb0800472300fc00640000002e9078ac14143effffffff8907137f000001007ea6cb15348c76190c44757905ae18cb9a169505672475c99f3321050700000067b99cb64fb18bc3b176a73b478d81f51a295a2f7dfc427afcdc53517f1f44eeb477e57e7f7e76e661bd00078e7d7c220b40678a9491dc6f8b72a2c3ca7a54bb1b15059690094c450e904b871ef08c77e4533a18d767032aeed4ad2ae9fea5d0f73b129fbb4207b41c99cdbdc9cd0f21dd0a333d14b157039c62119047b4f8f0dc5d0df15b16b0391d84072fe56bb327fe0dd26ea5351cf88bcd8d139098a2288ccea584090002af66d84e43d8e7675d20fd8b2ba9b8b1e6354d9f8e73f17bbda48402022e1825f95d05cf7d4a137395db19bc9d0c26b18b702e72"], 0x0) syz_emit_ethernet(0xf0, &(0x7f0000000180)={@remote, @local, @val={@void, {0x8100, 0x5}}, {@generic={0x88e7, "ab2f2d7495ba1d9294d4fc3145055db42e315d537fc399cc0c331803ac6698b1d873d847e8d665cd3697031fba230feffb547525da7d340fe466cc235010a028f762e24d9e9827b120844428b425ed20cf31064fee09155f2acbe078fdb6104b6f5e7402b46b28312f1fe4757385547fde3a8a5d1d4ffb21091463d4ff2472155bd4debc7f0245c919af4f7f22391b325ecc0bf30bb0dd316c013877e3ca7e4be721e305486a7b01f6ddf39464063bd7e58b19e22303188c3b35a851c2939441261c42cd9f7568be1eca9a0fda8d3ab00546080d8bca18cd6a96a7a1f438"}}}, &(0x7f0000000280)={0x1, 0x2, [0x327, 0xe98, 0x3ff, 0x621]}) 14:55:02 executing program 6: epoll_create(0x8000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:02 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:55:02 executing program 4: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:02 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5e, 0x0, 0x3, 0x18, 0x0, 0x5e, 0x3037a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000ac, 0x2, @perf_config_ext={0x8}, 0x11810, 0xfffffffffffffffe, 0xfffffffc, 0x9, 0x1, 0x9, 0xff, 0x0, 0xc3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4104c0, 0x201) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) get_mempolicy(&(0x7f0000000100), &(0x7f0000000300), 0x8, &(0x7f0000ffd000/0x3000)=nil, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_free(r0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 14:55:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:02 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:55:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) read(r0, &(0x7f0000000080)=""/18, 0xfffffffffffffffb) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000002c0)) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000400)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, &(0x7f0000000100)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x7, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="1d23de7449ee513d0fbbb59dcf0b1bbac60fe6674c12730f11d2e4a1e5f805fa4b51984ac5bc8ca2939f684ddf22e6602e5bd13a291e12eb168fd3a24106088d1c278eafb335beb6", 0x48, 0x101}], 0x14041, &(0x7f00000005c0)=ANY=[@ANYBLOB="6d61703d61636f726e2c646d6f64653d3078303030303030303030303030313030322c6d61703d6e6f726d616c2c736d61636b6673666c6f6f723d5e263a5e2f287b255c232d212c0089252e412b88a4a4ed26140697b3e925987996caca2528c64b59dc0f7de80b3589c9ec72549e8f3d0f40fed5fcc4aefc9ceb56881ded4bbe0ea665fea58c640112e91a3ebed675b4620f7e24c8eb12a0bf8f9a368c0ff81f663bb3e7607bcd5d4b109e880bcae55e5c4769b1a121b09c555614c741fecfb44aeeb5a7484f591e695919b7caa63f32362cc1ccaa8cce72674fa1ccae6b7aa9ab5a212d34b5ff39b9d439"]) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getflags(0xffffffffffffffff, 0x401) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)=0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x308c0, 0x0) pidfd_getfd(r1, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 14:55:02 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:02 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:55:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000)='1', 0x1}]) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0]) r3 = epoll_create(0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x20000000}) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r5, 0x0, 0x0) dup(r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './cgroup.cpu/cpuset.cpus\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x401, 0x0) accept$inet(r0, &(0x7f0000000880)={0x2, 0x0, @loopback}, &(0x7f0000000ac0)=0x10) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r6, 0x0, 0x0) io_submit(r2, 0x0, &(0x7f0000000bc0)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0xff, 0x8, 0x4, 0x1000, 0x1d}) 14:55:02 executing program 4: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 588.251364] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.7'. 14:55:02 executing program 6: socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:15 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, 0x0) 14:55:15 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x89, @private=0xa010100, 0x4e22, 0x3, 'lc\x00', 0x3, 0x2, 0x51}, 0x2c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = signalfd(r0, &(0x7f0000000040)={[0x401]}, 0x8) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000080)={'caif0\x00', 0x7}) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 14:55:15 executing program 6: socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:15 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:55:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x80) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x181000, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r3, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x16, 0x5, @scatter={0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/134, 0x86}]}, &(0x7f0000000280)="b1565231f1f1dccca047de7aaf6af7d5e1274cd6d589", &(0x7f00000002c0)=""/192, 0x1, 0x0, 0x0, &(0x7f0000000380)}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0) dup3(r4, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f074c99cadd03f42f2e401"]) preadv(r2, &(0x7f0000001540)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/89, 0x59}], 0x2, 0x0, 0x2) 14:55:15 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:15 executing program 4: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:15 executing program 6: socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:15 executing program 7: socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:15 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aa00aaaaa20086dd297b153f00082c0020010000000000000000000000f6fe0200000000000000000000000000118f0090780000000000009f8a054cbb9300443a0b4533ce8b0700000000000000341686a6dcb6eab8001116cdef87c54f90c18fbbcb89ad2eaeae37cfecd55ed4184e1b75d6395c07573616b9bfbbe54664ccee5ef50dddf66b2255b7df66ae312a82d0a34229b0674a0000fca52d348bad95f89447c2916e7c082635a347a54f91caeb0ff2bfb6a22fd390951ec1a428c70e395709e98e4501310ff9f764076f4bc78d8045248b0d00000000000065e6b08176430b"], 0x0) fork() fork() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = fcntl$getown(r0, 0x9) wait4(r1, &(0x7f0000000280), 0x20000000, &(0x7f00000001c0)) fork() 14:55:15 executing program 4: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:15 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5e, 0x60046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f00000002c0), 0xc}, 0x0, 0x0, 0x4, 0x3, 0x1, 0x40}, 0x0, 0x5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2200, 0x145) openat(r3, &(0x7f0000000140)='./file0\x00', 0x101002, 0x62) getdents(r3, &(0x7f0000000380)=""/78, 0x4e) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @short}, 0xb) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'L+', 0x7fffffff}, 0x16, 0x2) getdents64(0xffffffffffffffff, &(0x7f00000014c0)=""/188, 0xfffffffffffffc73) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) write$binfmt_elf64(r4, &(0x7f0000001e00)=ANY=[@ANYBLOB="7f454c46057e093f000004000000000000003e0004000000dd00000000000000400000000000000004020000000000000000800008003800010001009e0001000a000070050000001ccd000000000000feb5000000000008000000000000000042ffffffffffffff0900000000000000fdffffffffffffffcbd4d85b2dd07f2949b14c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/2167], 0x883) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) unshare(0x48020200) 14:55:15 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, 0x0) 14:55:15 executing program 4: epoll_create(0x8000) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:28 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:28 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aa00aaaaa20086dd297b153f00082c0020010000000000000000000000f6fe0200000000000000000000000000118f0090780000000000009f8a054cbb9300443a0b4533ce8b0700000000000000341686a6dcb6eab8001116cdef87c54f90c18fbbcb89ad2eaeae37cfecd55ed4184e1b75d6395c07573616b9bfbbe54664ccee5ef50dddf66b2255b7df66ae312a82d0a34229b0674a0000fca52d348bad95f89447c2916e7c082635a347a54f91caeb0ff2bfb6a22fd390951ec1a428c70e395709e98e4501310ff9f764076f4bc78d8045248b0d00000000000065e6b08176430b"], 0x0) fork() fork() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = fcntl$getown(r0, 0x9) wait4(r1, &(0x7f0000000280), 0x20000000, &(0x7f00000001c0)) fork() 14:55:28 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:28 executing program 4: epoll_create(0x8000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:28 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:28 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:55:28 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x80000) pread64(0xffffffffffffffff, 0x0, 0xfffffffffffffdda, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x38, 0x2c, 0x8, 0x9, 0xa, 0xc, 0x2, 0x95, 0x1}) mq_open(&(0x7f0000000600)='\x01*+\x0e\xaa\xdc\x84\x97\xa72\xb9v\x93\b5\x84\x83\x86\xce\x9c\x00\xcb\x0f\x87f\x90\x06\xf9{\xa6\xa6VK\xe9\x1c\xdb?*>/\x04\xe9C\xd6\xbd\x1e\x11\v%\xdbB\xaf\xc7\x81\xb8\xa2\x00p\\\x9c\xe5\x9a>\x8d\x9c\xc7\xee\x9c\xe6\x9f\xe3<\xa6\xfb\xbe\x914\xe0\x99\xfa\xef\xea\xbf\x1aH>\x83\xe3\x88G\xc7\xfe\x16\xe9!w\xfa\xc4\x1e\xfaN\xfdc[\xc7\xaf_\xc1\xba\xc0\xf8\xf7\xe4\xbf\xd7\x18\t\xec\xa2C\xd9\r\x83\x19\xb9\x85\xa7\r\xd0\r\xa3v\x97\x910\xdc\v%n\x97.g=\xd0oYF\xfa\x0e\x0f\xf7\xfe\xa2', 0x80, 0x24, &(0x7f0000000340)={0x2, 0x1000000, 0x0, 0xffff}) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000180)={0x1000, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000000c0)="c123", 0x2, 0x7fffffff, &(0x7f0000000300)={r1, r2+60000000}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0xfe, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r5) fcntl$dupfd(r5, 0x0, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd, 0x81, &(0x7f0000000580)=[{&(0x7f00000004c0)="ba3aa8bb17ad2db452d7806d21c6cd930997db4975d5e8da59b93bab32d4b02536a2866a2b09658ae8c3368fd3614cd138bc160499077d", 0x37}, {&(0x7f0000000500)="f3a10025ac9988739d16afdf189219aa1b5ba4661fed8fba8227414ede4a566badbd11bda4b626d1554f7b9d7cc03803b3520d61f9002528017252d4a6efe50ee636ed", 0x43}], 0x2, 0x1, 0x1, {0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000000)) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x201) 14:55:28 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, 0x0) 14:55:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:29 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:29 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:29 executing program 7: ptrace$cont(0x7, 0x0, 0x7ff, 0x81) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) clone3(&(0x7f0000000440)={0x1000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000300), {0x11}, &(0x7f0000000d40)=""/4096, 0x1000, &(0x7f0000000340)=""/61, &(0x7f0000000400)=[r1], 0x1}, 0x58) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000500)='z', 0x1}, {&(0x7f0000000040)='Z', 0x1}], 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x74}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) dup(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000940)) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x4000804) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000004c0)) 14:55:29 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:29 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 14:55:29 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x0, 0x93de, 0x6}) 14:55:29 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:29 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000001140)={0x8, 0x0, 0xcf06}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8800}, 0x0, 0xffffffffffffffff, r0, 0x9) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000001240)=ANY=[@ANYBLOB="5800000002030500000000000000006613000005080005400000003408000340000000050800034000000000092455848a79ef3f31e34dbc505d000200ffffffff0100000008e4034000000020080004400000000008000100b3e2a92980320100000808000540000000319b9a935f45b5ed11fc84bfab2ec98d394800cceb972ca652cfb71dc7cd405fca"], 0x58}, 0x1, 0x0, 0x0, 0x5f23c62362e7c10b}, 0xc804) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000001180)='trusted\x00', &(0x7f00000011c0)={'syz', 0x2}, &(0x7f0000001200)='syz', r2) add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c047313", @ANYRES16=0x0, @ANYBLOB="000100000000fedbdf251b00000006002100610000000800010011000000060021006100000008000100410000000700210062620000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) getsockopt(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000880)=""/237, &(0x7f00000006c0)=0x88) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/28}) keyctl$revoke(0x3, 0x0) unshare(0x48020200) 14:55:42 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00", 0x0, 0x8}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_vlan\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r2 = getpgrp(0x0) r3 = pidfd_open(r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r4 = dup(r3) setns(r4, 0x2020000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x169302, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DVD_READ_STRUCT(r5, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "00bc95e1d7c7526002994560cca3cb55b66678e5eaea2741345629a1cec02f007569e0842af897601b10179ce9c733b49449827210b73d70a774f7e48cea1c35a571cf104a8db9faf6c7f7a86647a7a3a4a1740d6e9722cbf84f0d9ec33b9bab22d97351d38686158264793722ee3b2516645cf01a1a9ae08aa9192b0aa2d521be5340caa28d3e9aca95d6c911bf19b56b60b59d718961708152c187c5ec50437a3df5039deb78aa1ff0d0c1dce7ff26bb1fbbd65861e3bd8db8c3eabd654b68db5d517f3cad2b86c70d81f32e2a06e473b6ca25df162c2c9c07bc413dca11294ad0405edf9d6960235bf04a490a886388edae8fe3dc39031f5cf8d64613ce9bd37486c957324e5f11cb734692496a2ea9f4a345751bc9c2fe871e70c7b6611549350cde91af83ff7b1c57a2b3fa51cb7019e32b4a56fc4a3f0f78c41e923aed5cb89ab79fb2b1d7d2264638ec688486438cb5bfcda5bd3336c0eca5c4eb49ec0284e9b1356de8e47797300221dae6b2dc5998e5616720ffc947ec2810b3c85b606781abf15f61154565f58d2492cc6a2c56dffa9ba7ab98278ed6ee13653b779b893d8494c76cebde9bc51ed405e27e8daf3d6a9c0e3a09f155d92887781b7e1d1bdca9c0618f5ed7e0c97917b349b694a3d9005f9a672cd522aee5946b70b962128c7702b069399bf489ddb076c5ea02fe2b9030823c4247a6d22cd8c59b4290c56d47ccfa5167f94e9bf5e66bf4fb99c0585598f1113e111eb23cff6482c3060b77f79a77f71e9a6d8fdf8a7311ef5c2eaf7b102e638b3cd28644c29855f14b30e9c0631ead0c314870a30615de4c1bda467575f75edaf7569a77ba047b8443d96d8c862006bfcc7c21b848904100527b69d39c5caf1c3aa038fec350da5c1cbcdec3def9c83b0fe0e3d5f044685ca4e3da91622fcf098a3d4a827740c771dcfc67298754a2a1601e363c35ba09e0191097ac1cb793653beb39885a70b00457010111f12223bc6d6b8dfc16c29e31e27a0bf6c35b421907f10cd41cedd40709d56d7b8e9e3531c1acebc0a5ad21dc1a18affe006320ea8b5d7c4fca00ba4028f802c97ca82c5b321867ae14d8ec57614c9bc5a8b0b7df20bc38585a32d3cf58ea3f9402c478d84c9312e1660648f67ad131560dc6a4932657afcda99b9d5cbf9c8d8e19798f86e62c1dcf4e4bfcdedefac0cd9d9d21cc692a1eb6b7d5b1b2c1a1a49ea7c3566fa56a9d2cc025332479e61fe3a750e20446ebece96faaa58a355e59fb83205c2b389243ecf8141c4a75ffe7281adb43074b88a501682b32c5153f9b79441306a130d17536eafbc70bfe91bb34cf4488d8624cc4fa287fa60b6502c2cc1a049b0afc6bee5a6240238d5ef0e762791121ed045a939dafdf1dfe996325fd552570887ffc7f3066e857015ee8cf082339375cc0989afe26e125bd66579d44c56c4ffe86507b5155ac7f47ef66629ed7b6b11db00c40ef262f5609733ef55b27370e8fbfea36500ba3e9687232eb9f2f6af04dfbfa79a64cd7bfab080648330776ff4088b0345f436f869f5aea2dbd1155bcd62cb858f694ea8e8ca34c418dc7ee051a1a041f0521abd04a7319f73d8fb902688e58a69c9043e8392ff1ddb95a9f6f7c72d5ca765c809901b9e4da6929e6ab98fdbed606854e05677b5fc04b46c7e77550bb2cac1747774d9f5bb41071a2edfdf7ca48303b65800ae56b1d4254d504555484040c8a6a7ff987cfd65e29c921d6aa356ab1ab3c9c3f493cb3c55b414d31cde83084e2183bc2e173f5872c252ffbc5c97ff6712d5934fdc512575dc5db977bf7d5d0b92fc13fcdfd04bafb59d28aeac0d8d5c105b1d648f07753c1fb731f883d0957b1c56138847f34b9b669511580ccbe523de0abf33ee0ae793d659cb2fae7bb1e546eb3d9c4b805499627618b9d0400ff60fdafaf975cb3a9663eb1efef94676dce8042f0d93f11e93d7fcd25d7535c7a37f57b2835b2aefa0108924efba0390da2d939630b6047eb7fff3395d421a27412fadd589e4673f4e3b86d92c51b8d2451812ce4623b2c5de86894519f6e72e381c8fa39ef43f95bd4c812936794f709556e89f9f1044fc59237da4b40406d74b630f4b558e0ca5a7e85f45968ee2162c5c787123f3165cea19f4998ba73ea99af14de50017ced399b32c65fcc3b0069f2393958c5b8fae29ce59e3de43ff2fe4f603b264190ca1ebf9763cef6d81b3b16e59210c72f53f064e3e877791cdbb836cfc3fa9ca97c8adf27f1d012fffc243a95e10adb0de9d1b375c15d4b94e6e1ff7a2b1a3162fccab6e526e8db185555acdf449e15f9fb8b60185c61fc2f838e9c258ab52ece9a38214b0e8d100da3681e215eee5a2052de65f2568d49744786e56185416a53934f627f3fbb460880e5e399993743cc048549a08f9a4a1e11210fdf0ed031a3c8f44cee83af55bf74948f51126d53e6808915d630a0ec0e31884c3ea8b9eacfbda96501b44c200bb7caf55032ae99324af341291df2183ef4a6b0cb2f0272007dac9589149953e61f01e027627dacb58d5edc892fbe29146b3bce72431ec4e2fb4fb7a03af2c2e94c7d68cf59c2f618eff3e7e06d0e03608ac678b325dc4c7bf5af32b215b65fa9a1bed17292a56e9131a8af0e22b79a91f66e5294c9dfd0ee6546978e0d3d5420649f10c1b9f917351cf824887011a8b4ed165b5db68d8f8d4dbd87d337e49f05873553fe5d0e34638851a273618f59ce5fe148ca149cce089a8f4301a5507404939cf4993b4afa6f9d2a76c40adcbf4607e0e293483194f7756ac3fa8f7e2eb28be0a251d0e70f428d06731a135a02b239ab8a0a79472002e08291a7242c41251cd36185a1b31a32ba3da99897886dc37fc9c4d2a8d1"}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) dup3(r1, r0, 0x0) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x7, 'geneve0\x00', {0x3}, 0x6}) 14:55:42 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:42 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 14:55:42 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:55:42 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:42 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:42 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x0, 0x93de, 0x6}) [ 628.191888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6089 comm=syz-executor.7 14:55:42 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 14:55:42 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:42 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x0, 0x93de, 0x6}) [ 628.323542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6089 comm=syz-executor.7 14:55:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:55:55 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x0, 0x6}) 14:55:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/157, 0x9d}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x2356, &(0x7f0000000680)={0x0, 0x4560}, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = epoll_create(0x8000) r6 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000000c0)={0x20000000}) recvmmsg(r6, &(0x7f0000004780)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/145, 0x91}, {&(0x7f0000000540)=""/239, 0xef}], 0x2, &(0x7f0000000180)=""/18, 0x12}}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, &(0x7f0000000700)=""/201, 0xc9}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000000800)=""/179, 0xb3}, {&(0x7f0000001900)=""/175, 0xaf}, {&(0x7f0000000640)=""/61, 0x3d}, {&(0x7f00000019c0)=""/124, 0x7c}, {&(0x7f0000001a40)=""/227, 0xe3}, {&(0x7f0000001b40)=""/150, 0x96}, {&(0x7f0000001c00)=""/158, 0x9e}, {&(0x7f0000001cc0)=""/103, 0x67}, {&(0x7f0000001e00)=""/252, 0xfc}], 0xa, &(0x7f0000001fc0)=""/205, 0xcd}, 0x400}, {{&(0x7f00000020c0)=@generic, 0x80, &(0x7f0000004600)=[{&(0x7f0000002140)=""/167, 0xa7}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/184, 0xb8}, {&(0x7f00000032c0)=""/238, 0xee}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/221, 0xdd}, {&(0x7f00000044c0)=""/101, 0x65}, {&(0x7f0000004540)=""/167, 0xa7}], 0x8, &(0x7f0000004680)=""/224, 0xe0}, 0xff}], 0x4, 0x10121, &(0x7f0000001d40)={0x0, 0x989680}) syz_io_uring_setup(0x6c6a, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) syz_io_uring_setup(0x751, &(0x7f0000004880)={0x0, 0x1c19, 0x4, 0x2, 0x29a, 0x0, r3}, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fed000/0x1000)=nil, &(0x7f0000004900)=0x0, &(0x7f0000004940)) syz_io_uring_submit(r7, 0x0, &(0x7f0000004980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0xff) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f00000049c0)={0x3, 0x80, 0x9, 0x6, 0x2, 0x81, 0x0, 0x1c, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffeff, 0x4, @perf_config_ext={0x800, 0x4}, 0x20, 0xfffe0, 0x4, 0x2, 0x101, 0x1b, 0x4, 0x0, 0x1, 0x0, 0x9a2a}, 0xffffffffffffffff, 0x10, r4, 0x8) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x1f93, 0x0, 0x0, 0x0) 14:55:55 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:55:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:55 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:55 executing program 7: unshare(0x8000000) unshare(0x16000500) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0x34) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="b80100001700000426bd7000fedbdf25ffffffff000000000000000000000000000000003221b3bbbdd8eb000000bb000000000000000000000000e00000010000000000000000000000004e2100004e2400000a0000803c000000a704cb08e332fb3723bbd61de2e545fd51e2bab25530b8ab12120d944f6c1717f76ae4bd37582f47113e34588c5f30db6721f68d918c433bc6783bd1194f09e1826cd38a9991579f131bb1e2b1abe40c3f3a7766d2b385d34ab1299bf98b6908b7a79452af0fd3b8ccd11c6d04aaa25fef5ae53c7ad6223368c7067f2c2900"/230, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000024cb5b256ffffffffffac1414340000000000000000000000004e200007320a00000a00802084000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0xc001) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, 0x0, 0x0) semget$private(0x0, 0x2, 0x693) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 14:55:55 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) (fail_nth: 1) 14:55:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 641.004811] FAULT_INJECTION: forcing a failure. [ 641.004811] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 641.006451] CPU: 1 PID: 6226 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 641.007354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 641.008472] Call Trace: [ 641.008834] dump_stack+0x107/0x167 [ 641.009328] should_fail.cold+0x5/0xa [ 641.009850] __alloc_pages_nodemask+0x182/0x600 [ 641.010475] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 641.011281] ? tun_build_skb+0x181/0xfe0 [ 641.011838] alloc_pages_current+0x187/0x280 [ 641.012468] skb_page_frag_refill+0x27c/0x490 [ 641.013067] tun_build_skb+0x1fa/0xfe0 [ 641.013603] ? tun_xdp_act+0x6f0/0x6f0 [ 641.014114] ? __lock_acquire+0xbb1/0x5b00 [ 641.014727] tun_get_user+0x6c1/0x32f0 [ 641.015241] ? usage_accumulate+0x100/0x110 [ 641.015859] ? tun_build_skb+0xfe0/0xfe0 [ 641.016441] ? tun_xdp+0x90/0x440 [ 641.016914] ? lock_downgrade+0x6d0/0x6d0 [ 641.017481] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 641.018185] ? SOFTIRQ_verbose+0x10/0x10 [ 641.018752] tun_chr_write_iter+0xe1/0x1e0 [ 641.019326] new_sync_write+0x42c/0x660 [ 641.019885] ? new_sync_read+0x6f0/0x6f0 [ 641.020446] ? avc_policy_seqno+0x9/0x70 [ 641.021001] ? selinux_file_permission+0x92/0x520 [ 641.021657] ? security_file_permission+0xb1/0xe0 [ 641.022322] vfs_write+0x7c0/0xb10 [ 641.022806] ksys_write+0x12d/0x260 [ 641.023298] ? __ia32_sys_read+0xb0/0xb0 [ 641.023866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 641.024654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 641.025387] do_syscall_64+0x33/0x40 [ 641.025896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 641.026595] RIP: 0033:0x7fe7894e95ff [ 641.027109] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 641.029676] RSP: 002b:00007fe786aac150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 641.030712] RAX: ffffffffffffffda RBX: 00007fe789649f60 RCX: 00007fe7894e95ff [ 641.031668] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 641.032638] RBP: 00007fe786aac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 641.033589] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 641.034561] R13: 00007ffcb57389df R14: 00007fe786aac300 R15: 0000000000022000 14:55:55 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) (fail_nth: 2) 14:55:55 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x0, 0x6}) 14:55:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:55:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002080100047000f801", 0x15}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xe) fallocate(r0, 0x0, 0x0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') creat(&(0x7f0000000100)='./file2\x00', 0x2) chroot(&(0x7f0000000280)='./file2\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x509441, 0x18e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r2, &(0x7f00000003c0)="0289819eecd945439d8a8b16bf2bf2b67eefb591f4cf4db9ead300c6ac8ba94f7d4a804292338b2abd8472d8beffa0ce3669f0087fe6e41dd4cf60d158da85532ae8", 0x42) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x4, 0x0, &(0x7f0000000340)) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x4, 0x0, &(0x7f0000000340)) fcntl$dupfd(r4, 0x0, r4) sendfile(r1, r3, 0x0, 0x100000001) [ 641.156313] FAULT_INJECTION: forcing a failure. [ 641.156313] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 641.159984] CPU: 1 PID: 6239 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 641.160876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 641.161942] Call Trace: [ 641.162293] dump_stack+0x107/0x167 [ 641.162771] should_fail.cold+0x5/0xa [ 641.163276] copy_page_from_iter+0x40a/0x900 [ 641.163875] tun_build_skb+0x2d3/0xfe0 [ 641.164401] ? tun_xdp_act+0x6f0/0x6f0 [ 641.164929] ? __lock_acquire+0xbb1/0x5b00 [ 641.165490] tun_get_user+0x6c1/0x32f0 [ 641.166006] ? usage_accumulate+0x100/0x110 [ 641.166578] ? tun_build_skb+0xfe0/0xfe0 [ 641.167116] ? tun_xdp+0x90/0x440 [ 641.167574] ? lock_downgrade+0x6d0/0x6d0 [ 641.168122] ? _raw_spin_unlock_irq+0x1f/0x30 [ 641.168708] ? finish_task_switch+0x126/0x5d0 [ 641.169298] ? __switch_to+0x572/0xf70 [ 641.169808] ? __switch_to_asm+0x34/0x60 [ 641.170347] tun_chr_write_iter+0xe1/0x1e0 [ 641.170910] new_sync_write+0x42c/0x660 [ 641.171434] ? new_sync_read+0x6f0/0x6f0 [ 641.172311] ? avc_policy_seqno+0x9/0x70 [ 641.173698] ? selinux_file_permission+0x92/0x520 [ 641.175310] ? security_file_permission+0xb1/0xe0 [ 641.176987] vfs_write+0x7c0/0xb10 [ 641.178191] ksys_write+0x12d/0x260 [ 641.179465] ? __ia32_sys_read+0xb0/0xb0 [ 641.180921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 641.182680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 641.184477] do_syscall_64+0x33/0x40 [ 641.185764] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 641.187554] RIP: 0033:0x7fe7894e95ff [ 641.188847] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 641.195279] RSP: 002b:00007fe786aac150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 641.197870] RAX: ffffffffffffffda RBX: 00007fe789649f60 RCX: 00007fe7894e95ff [ 641.200369] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 641.202854] RBP: 00007fe786aac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 641.205363] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 641.207834] R13: 00007ffcb57389df R14: 00007fe786aac300 R15: 0000000000022000 14:55:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 14:55:55 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 641.234715] FAT-fs (loop7): invalid media value (0x00) [ 641.236615] FAT-fs (loop7): Can't find a valid FAT filesystem 14:55:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 14:55:55 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:55:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 641.693331] FAT-fs (loop7): Unrecognized mount option "./file2" or missing value 14:56:08 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:08 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x234d, &(0x7f0000000040)={0x0, 0x71d8, 0x1a, 0x2, 0x25e, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000400)=0x0) r4 = epoll_create(0x8000) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f00000000c0)={0x20000000}) syz_io_uring_submit(r1, r3, &(0x7f00000005c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r5, &(0x7f0000000500)=0x80, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x800}, 0x4573) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x8880, 0x2) fsmount(r6, 0x0, 0x7) syz_io_uring_setup(0x513, &(0x7f0000000480)={0x0, 0x6134, 0x1, 0x0, 0x296, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xacf4ac9b71142229}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:08 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r2 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x7, 0x0, 0x80, 0x0, 0x0, 0x9, 0x28000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x3}, 0x80, 0x4bd, 0x2, 0x3, 0x7d0e9dee, 0x6, 0x200, 0x0, 0x6, 0x0, 0x10000000008}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x13) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r4, &(0x7f0000000340)=""/34, 0x22) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='\r\x00\x00\x00\x00']) keyctl$revoke(0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0xa, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)=@chain) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x6000, 0x202, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r5, r6, 0x1000) keyctl$chown(0x4, 0x0, r5, 0xffffffffffffffff) r7 = request_key(&(0x7f0000000440)='ceph\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)='key_or_keyring:', r4) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) dup2(r0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200000000", 0xc7, 0xb800}], 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}]}) 14:56:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 14:56:08 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) (fail_nth: 3) 14:56:08 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x0, 0x6}) 14:56:08 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:56:08 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 654.456130] FAULT_INJECTION: forcing a failure. [ 654.456130] name failslab, interval 1, probability 0, space 0, times 1 [ 654.457711] CPU: 1 PID: 6380 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 654.458587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 654.459675] Call Trace: [ 654.460004] dump_stack+0x107/0x167 [ 654.460564] should_fail.cold+0x5/0xa [ 654.461031] ? __build_skb+0x21/0x60 [ 654.461533] should_failslab+0x5/0x20 [ 654.462013] kmem_cache_alloc+0x5b/0x310 [ 654.462567] __build_skb+0x21/0x60 [ 654.463751] build_skb+0x1a/0x220 [ 654.464179] __tun_build_skb+0x2c/0x260 [ 654.464899] tun_build_skb+0x62c/0xfe0 [ 654.465380] ? tun_xdp_act+0x6f0/0x6f0 [ 654.465914] ? __lock_acquire+0xbb1/0x5b00 [ 654.466445] tun_get_user+0x6c1/0x32f0 [ 654.466984] ? tun_build_skb+0xfe0/0xfe0 [ 654.467557] ? tun_xdp+0x90/0x440 [ 654.467993] ? lock_downgrade+0x6d0/0x6d0 [ 654.468578] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 654.469222] tun_chr_write_iter+0xe1/0x1e0 [ 654.469796] new_sync_write+0x42c/0x660 [ 654.470280] ? new_sync_read+0x6f0/0x6f0 [ 654.470835] ? avc_policy_seqno+0x9/0x70 [ 654.471350] ? selinux_file_permission+0x92/0x520 [ 654.472020] ? security_file_permission+0xb1/0xe0 [ 654.473756] vfs_write+0x7c0/0xb10 [ 654.474194] ksys_write+0x12d/0x260 [ 654.474695] ? __ia32_sys_read+0xb0/0xb0 [ 654.475202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 654.475924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 654.480695] do_syscall_64+0x33/0x40 [ 654.481150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 654.481826] RIP: 0033:0x7fe7894e95ff [ 654.482280] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 654.484700] RSP: 002b:00007fe786aac150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 654.485679] RAX: ffffffffffffffda RBX: 00007fe789649f60 RCX: 00007fe7894e95ff [ 654.486597] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 654.487462] RBP: 00007fe786aac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 654.488805] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 654.489722] R13: 00007ffcb57389df R14: 00007fe786aac300 R15: 0000000000022000 [ 654.522923] FAULT_INJECTION: forcing a failure. 14:56:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) (fail_nth: 1) [ 654.522923] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 654.524502] CPU: 0 PID: 6402 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 654.525337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 654.526351] Call Trace: [ 654.526681] dump_stack+0x107/0x167 [ 654.527130] should_fail.cold+0x5/0xa [ 654.527602] __alloc_pages_nodemask+0x182/0x600 [ 654.528177] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 654.528941] ? tun_build_skb+0x181/0xfe0 [ 654.529443] alloc_pages_current+0x187/0x280 [ 654.529984] skb_page_frag_refill+0x27c/0x490 [ 654.530534] tun_build_skb+0x1fa/0xfe0 [ 654.531014] ? tun_xdp_act+0x6f0/0x6f0 [ 654.531494] ? __lock_acquire+0xbb1/0x5b00 [ 654.532018] tun_get_user+0x6c1/0x32f0 [ 654.532546] ? tun_build_skb+0xfe0/0xfe0 [ 654.533049] ? tun_xdp+0x90/0x440 [ 654.533473] ? lock_downgrade+0x6d0/0x6d0 [ 654.533980] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 654.534629] tun_chr_write_iter+0xe1/0x1e0 [ 654.535204] new_sync_write+0x42c/0x660 [ 654.535694] ? new_sync_read+0x6f0/0x6f0 [ 654.536195] ? avc_policy_seqno+0x9/0x70 [ 654.536714] ? selinux_file_permission+0x92/0x520 [ 654.537303] ? security_file_permission+0xb1/0xe0 [ 654.537895] vfs_write+0x7c0/0xb10 [ 654.538333] ksys_write+0x12d/0x260 [ 654.538777] ? __ia32_sys_read+0xb0/0xb0 [ 654.539274] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 654.539914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 654.540588] do_syscall_64+0x33/0x40 [ 654.541043] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 654.541673] RIP: 0033:0x7f7039a375ff [ 654.542133] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 654.544408] RSP: 002b:00007f7036ffa150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 654.545338] RAX: ffffffffffffffda RBX: 00007f7039b97f60 RCX: 00007f7039a375ff [ 654.560438] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 654.561308] RBP: 00007f7036ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 654.562175] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 654.563040] R13: 00007ffe37b9dfef R14: 00007f7036ffa300 R15: 0000000000022000 14:56:08 executing program 2: unshare(0x48020200) unshare(0x48000000) unshare(0x6000b80) 14:56:09 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de}) 14:56:09 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:09 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) (fail_nth: 4) 14:56:09 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:09 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 654.761353] FAULT_INJECTION: forcing a failure. [ 654.761353] name failslab, interval 1, probability 0, space 0, times 0 [ 654.762876] CPU: 0 PID: 6531 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 654.763768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 654.765571] Call Trace: [ 654.765929] dump_stack+0x107/0x167 [ 654.766414] should_fail.cold+0x5/0xa [ 654.766918] ? create_object.isra.0+0x3a/0xa20 [ 654.767524] should_failslab+0x5/0x20 [ 654.768029] kmem_cache_alloc+0x5b/0x310 [ 654.768578] create_object.isra.0+0x3a/0xa20 [ 654.769156] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 654.769827] kmem_cache_alloc+0x159/0x310 [ 654.770380] __build_skb+0x21/0x60 [ 654.770850] build_skb+0x1a/0x220 [ 654.771313] __tun_build_skb+0x2c/0x260 [ 654.771840] tun_build_skb+0x62c/0xfe0 [ 654.772399] ? tun_xdp_act+0x6f0/0x6f0 [ 654.773720] ? __lock_acquire+0xbb1/0x5b00 [ 654.775147] tun_get_user+0x6c1/0x32f0 [ 654.776473] ? tun_build_skb+0xfe0/0xfe0 [ 654.777833] ? tun_xdp+0x90/0x440 [ 654.778990] ? lock_downgrade+0x6d0/0x6d0 [ 654.780388] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 654.782156] tun_chr_write_iter+0xe1/0x1e0 [ 654.783574] new_sync_write+0x42c/0x660 [ 654.784922] ? new_sync_read+0x6f0/0x6f0 [ 654.786191] ? avc_policy_seqno+0x9/0x70 [ 654.787445] ? selinux_file_permission+0x92/0x520 [ 654.788952] ? security_file_permission+0xb1/0xe0 [ 654.790451] vfs_write+0x7c0/0xb10 [ 654.791553] ksys_write+0x12d/0x260 [ 654.792694] ? __ia32_sys_read+0xb0/0xb0 [ 654.793948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 654.795572] ? syscall_enter_from_user_mode+0x1d/0x50 [ 654.797184] do_syscall_64+0x33/0x40 [ 654.798336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 654.799923] RIP: 0033:0x7fe7894e95ff [ 654.801084] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 654.806826] RSP: 002b:00007fe786aac150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 654.809197] RAX: ffffffffffffffda RBX: 00007fe789649f60 RCX: 00007fe7894e95ff [ 654.811412] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 654.813634] RBP: 00007fe786aac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 654.815833] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 654.818058] R13: 00007ffcb57389df R14: 00007fe786aac300 R15: 0000000000022000 [ 654.843677] FAULT_INJECTION: forcing a failure. [ 654.843677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.845385] CPU: 1 PID: 6546 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 654.846349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 654.847523] Call Trace: [ 654.847900] dump_stack+0x107/0x167 [ 654.848423] should_fail.cold+0x5/0xa [ 654.848895] copy_page_from_iter+0x40a/0x900 [ 654.849440] tun_build_skb+0x2d3/0xfe0 [ 654.849927] ? tun_xdp_act+0x6f0/0x6f0 [ 654.850408] ? __lock_acquire+0xbb1/0x5b00 [ 654.850936] tun_get_user+0x6c1/0x32f0 [ 654.851421] ? tun_build_skb+0xfe0/0xfe0 [ 654.851927] ? tun_xdp+0x90/0x440 [ 654.852356] ? lock_downgrade+0x6d0/0x6d0 [ 654.852939] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 654.853687] tun_chr_write_iter+0xe1/0x1e0 [ 654.854288] new_sync_write+0x42c/0x660 [ 654.854850] ? new_sync_read+0x6f0/0x6f0 [ 654.855435] ? avc_policy_seqno+0x9/0x70 [ 654.856011] ? selinux_file_permission+0x92/0x520 [ 654.856703] ? security_file_permission+0xb1/0xe0 [ 654.857388] vfs_write+0x7c0/0xb10 [ 654.857893] ksys_write+0x12d/0x260 [ 654.858407] ? __ia32_sys_read+0xb0/0xb0 [ 654.858984] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 654.859724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 654.860452] do_syscall_64+0x33/0x40 [ 654.860979] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 654.861703] RIP: 0033:0x7f7039a375ff [ 654.862225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 654.864852] RSP: 002b:00007f7036ffa150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 654.865922] RAX: ffffffffffffffda RBX: 00007f7039b97f60 RCX: 00007f7039a375ff [ 654.866927] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 654.867935] RBP: 00007f7036ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 654.868938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 654.869964] R13: 00007ffe37b9dfef R14: 00007f7036ffa300 R15: 0000000000022000 14:56:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) (fail_nth: 2) 14:56:09 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:09 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:09 executing program 7: unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x248803, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001e00)={0x0, 0xe95c}) close(r2) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff810013a0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x0, 0x1, [0x1, 0x9, 0x100000000, 0x1, 0x8], [0xfffffffffffffff7, 0x884, 0x8001, 0x5, 0xffffffffffffffdf, 0x7fff, 0x200, 0x2, 0x7, 0x6, 0x8, 0x20, 0x2, 0x1f, 0x3, 0x2252, 0x1, 0x6, 0x81, 0x3, 0x8000000000000000, 0x80, 0xe49, 0x4, 0x6, 0x100000000, 0x20, 0x101, 0x7ff, 0x101, 0x1, 0x0, 0x8, 0xffffffffffffff54, 0x8a, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x7, 0x9, 0x7, 0x100, 0x3, 0x3, 0x8, 0x97e1, 0x5e49, 0x2, 0x5, 0x2, 0x200, 0x99a, 0xfffffffffffffffd, 0x3, 0x1, 0x5, 0x2, 0x401, 0xffff, 0x10001, 0x0, 0x5, 0x800, 0xfff, 0x6, 0x10000, 0x5, 0x8001, 0x1000, 0x401, 0x81, 0x7, 0x10001, 0x9, 0x1, 0x8, 0x800, 0xf0d, 0x2, 0x8, 0xd22, 0x6, 0xffffffff, 0x101, 0x9, 0x9, 0x101, 0x80000000, 0x31, 0x5, 0x0, 0x3, 0x8, 0x8, 0x2, 0xf83, 0x200, 0x3, 0xfff, 0x1, 0xffffffffffffffff, 0x3ff, 0x4, 0x6, 0x1f, 0x1, 0x7f, 0x1, 0xffffffffffffffff, 0x7ff, 0x7, 0x8, 0x2, 0x3, 0x7ef, 0x4, 0x6, 0x7, 0x4]}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/65, &(0x7f00000005c0)=0x41) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000040)=0x401) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000940)={r3, "9158991f63894aa463f9c60aee2e7056"}) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r4, 0x0, 0x0) execveat(r4, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000640)=[&(0x7f0000000600)='/\x00'], &(0x7f0000000840)=[&(0x7f0000000680)='[%}&\x9f\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='!.,(%\x00', &(0x7f0000000780)=',/\xec\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='^\x00'], 0x100) 14:56:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) (fail_nth: 3) 14:56:09 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de}) [ 655.062877] FAULT_INJECTION: forcing a failure. [ 655.062877] name failslab, interval 1, probability 0, space 0, times 0 [ 655.064395] CPU: 0 PID: 6624 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 655.065227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 655.066236] Call Trace: [ 655.066564] dump_stack+0x107/0x167 [ 655.067010] should_fail.cold+0x5/0xa [ 655.067480] ? __build_skb+0x21/0x60 [ 655.067940] should_failslab+0x5/0x20 [ 655.068423] kmem_cache_alloc+0x5b/0x310 [ 655.068927] __build_skb+0x21/0x60 [ 655.069362] build_skb+0x1a/0x220 [ 655.069790] __tun_build_skb+0x2c/0x260 [ 655.070283] tun_build_skb+0x62c/0xfe0 [ 655.070764] ? tun_xdp_act+0x6f0/0x6f0 [ 655.071245] ? __lock_acquire+0xbb1/0x5b00 [ 655.071768] tun_get_user+0x6c1/0x32f0 [ 655.072254] ? tun_build_skb+0xfe0/0xfe0 [ 655.088788] ? tun_xdp+0x90/0x440 [ 655.089213] ? lock_downgrade+0x6d0/0x6d0 [ 655.089718] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 655.090361] tun_chr_write_iter+0xe1/0x1e0 [ 655.090879] new_sync_write+0x42c/0x660 [ 655.091363] ? new_sync_read+0x6f0/0x6f0 [ 655.091865] ? avc_policy_seqno+0x9/0x70 [ 655.092373] ? selinux_file_permission+0x92/0x520 [ 655.092968] ? security_file_permission+0xb1/0xe0 [ 655.093559] vfs_write+0x7c0/0xb10 [ 655.093995] ksys_write+0x12d/0x260 [ 655.094439] ? __ia32_sys_read+0xb0/0xb0 [ 655.094934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 655.095573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 655.096202] do_syscall_64+0x33/0x40 [ 655.096669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 655.097293] RIP: 0033:0x7f7039a375ff [ 655.097747] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 655.099992] RSP: 002b:00007f7036ffa150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 655.100936] RAX: ffffffffffffffda RBX: 00007f7039b97f60 RCX: 00007f7039a375ff [ 655.101810] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 655.102679] RBP: 00007f7036ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 655.103548] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 655.120453] R13: 00007ffe37b9dfef R14: 00007f7036ffa300 R15: 0000000000022000 14:56:22 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) (fail_nth: 5) 14:56:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) (fail_nth: 4) 14:56:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:22 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='securityfs\x00', 0x800, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/4096, 0x1000) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='.\x00') r1 = fspick(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0), 0x8a0030, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@version_L}, {@mmap}, {@access_any}], [{@subj_role={'subj_role', 0x3d, 'utf8=1'}}, {@uid_eq={'uid', 0x3d, r2}}]}}) syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', 0x5, 0x8, &(0x7f0000000680)=[{&(0x7f00000001c0)="ece48fea044ded87841f1a4dc84feb7ecb5d6db73e4bcf9a41c4522fd9192ae953b9edd7c5254d1d0c978047e8d8bedbc0c7", 0x32, 0x53dce407}, {&(0x7f0000000200)="9a9359032a84ae036b1c1eca7299a8643d758ea8b9f33bca30441d5303027699b731a2b2a111fc3d61cc98e08c0b1a53f9c0f80d6dea2d8eb529ad4b7a0a2de3652fca914a6a7e11efde8b1ceacebe23fc97c6440adc8bcdc7508800f3be7bf853a7ec7801c7d38878907681a173fcbe931ce5215300dd18626a3da172eb0b65bd8887c507495af9a9d40a414b08ef85bf07d8c5da0c1694e8b23591896871da5fb242b9b062842f3ab8b979d1dbfa908f5132a8c51a4e3c5998bb98ee1049d33f524df4b0a16ba8afb03c9606ba8b65f808780a7bb587f5b5a5f1af2c0408eb9b5341151c749bd8e5", 0xe9, 0x100000001}, {&(0x7f00000003c0)="4d05d8ff33e9956d5cd880a26448dc43780c5c63b070a7f0fcd83368f677b3f4ff02b6a918e1ed53437f755936223f067cc231ab3aab28fc073e2ba100d47edff0c3c5e0351cfdfda6104b7cd623d4b327cfad7500dee2e2fa9e65ff7ffebd62c8cc8f27c11383e6ce1436ff0602b708f281428fa97d2cccde37d40bce6749f0774dfd7776c3e5a83f84e3556bb70357907bf7102ce0f7aed468a0cd84fee9f18af1f830c47b8e", 0xa7, 0x2}, {&(0x7f0000000300), 0x0, 0x9}, {&(0x7f0000000340)="43ea172a50cac9490580f1af", 0xc}, {&(0x7f0000000480)="7b963c9c7881a1fc7b5110bef2cefc11f576222acaeee5bd3842c61d3c3c7c8485c55121c805edb7ba75619cf288964f6c420112b88fa0f3a43eac806526fe916dc65d3b7e8c978647bf978e881d7faf35a5783bca1f2ed5ad05d3aa264c8056103e015bb2d85fe5e1e392a0ae65cf75d86299c321860ebed1d92fe8e9867bc23ecb915a7a1afe6832aab09ca65b691a0a3e909264aee1af73ef70998da26bd271b18000e81a921666f3513d2a2c30a1b040addf63447745b1ab757d5adac24a20e23a4ba48599eba2195ef9b4d78f7d89cc90fea86477fb64fe66249fe209a5fa4f73cdb1ea2eb483d55b7742b35a", 0xef, 0xff}, {&(0x7f0000000580)="af9c3930cdd49373171e0f45c19cad6c69b1e7087506bc57711d0a385a0b9d87", 0x20, 0x81}, {&(0x7f00000005c0)="68612e8f88776c82408c2017e61087c5d0cd40a6880cc57c95827831da3acbe1f6aa73ec1842e2ac55a031af9fdeb80b3ea157cb0eddca2f0cdae6cbe1b63b4823b6c10e0a717cc95ea73e52d6fdbdec17f88cc1abe1d8ef5c991995630bc1240567a2afbdd94fd4ee4ecbc0cf09c740a365d1fc49c24b6d0baae4863bc8c5f38be1f4db40f25abbd052200a349367aaa41a76779c0e91181d9c691f187f7321269ae302a34af307e256af2982d6ca894b843b", 0xb3, 0x6}], 0x61, &(0x7f0000000740)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\xf2L\x12:,@['}}, {@fowner_gt={'fowner>', r2}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x9}}]}) 14:56:22 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:22 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:56:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:22 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de}) [ 667.720917] FAULT_INJECTION: forcing a failure. [ 667.720917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.722672] CPU: 1 PID: 6642 Comm: syz-executor.6 Not tainted 5.10.230 #1 [ 667.723557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 667.724647] Call Trace: [ 667.724990] dump_stack+0x107/0x167 [ 667.725433] should_fail.cold+0x5/0xa [ 667.725953] _copy_to_user+0x2e/0x180 [ 667.726427] simple_read_from_buffer+0xcc/0x160 [ 667.727058] proc_fail_nth_read+0x198/0x230 [ 667.727638] ? proc_sessionid_read+0x230/0x230 [ 667.728194] ? security_file_permission+0xb1/0xe0 [ 667.728880] ? proc_sessionid_read+0x230/0x230 [ 667.729436] vfs_read+0x228/0x620 [ 667.729523] FAULT_INJECTION: forcing a failure. [ 667.729523] name failslab, interval 1, probability 0, space 0, times 0 [ 667.729918] ksys_read+0x12d/0x260 [ 667.731764] ? vfs_write+0xb10/0xb10 [ 667.732221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 667.732960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 667.733643] do_syscall_64+0x33/0x40 [ 667.734097] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 667.734811] RIP: 0033:0x7fe7894e969c [ 667.735263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 667.737690] RSP: 002b:00007fe786aac170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.738677] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 00007fe7894e969c [ 667.739595] RDX: 000000000000000f RSI: 00007fe786aac1e0 RDI: 0000000000000004 [ 667.740458] RBP: 00007fe786aac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 667.741422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.742332] R13: 00007ffcb57389df R14: 00007fe786aac300 R15: 0000000000022000 [ 667.743280] CPU: 0 PID: 6636 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 667.744117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 667.745147] Call Trace: [ 667.745480] dump_stack+0x107/0x167 [ 667.745924] should_fail.cold+0x5/0xa [ 667.746389] ? create_object.isra.0+0x3a/0xa20 [ 667.746946] should_failslab+0x5/0x20 [ 667.747409] kmem_cache_alloc+0x5b/0x310 [ 667.747905] create_object.isra.0+0x3a/0xa20 [ 667.748438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 667.749083] kmem_cache_alloc+0x159/0x310 [ 667.749597] __build_skb+0x21/0x60 [ 667.750031] build_skb+0x1a/0x220 [ 667.750456] __tun_build_skb+0x2c/0x260 [ 667.750938] tun_build_skb+0x62c/0xfe0 [ 667.751415] ? tun_xdp_act+0x6f0/0x6f0 [ 667.751891] ? __lock_acquire+0xbb1/0x5b00 [ 667.752412] tun_get_user+0x6c1/0x32f0 [ 667.752911] ? tun_build_skb+0xfe0/0xfe0 [ 667.753408] ? tun_xdp+0x90/0x440 [ 667.753830] ? lock_downgrade+0x6d0/0x6d0 [ 667.754337] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 667.754982] tun_chr_write_iter+0xe1/0x1e0 [ 667.755498] new_sync_write+0x42c/0x660 [ 667.755981] ? new_sync_read+0x6f0/0x6f0 [ 667.756480] ? avc_policy_seqno+0x9/0x70 [ 667.756984] ? selinux_file_permission+0x92/0x520 [ 667.757568] ? security_file_permission+0xb1/0xe0 [ 667.758154] vfs_write+0x7c0/0xb10 [ 667.758589] ksys_write+0x12d/0x260 [ 667.759028] ? __ia32_sys_read+0xb0/0xb0 [ 667.759523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 667.760155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 667.760814] do_syscall_64+0x33/0x40 [ 667.761273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 667.761893] RIP: 0033:0x7f7039a375ff [ 667.762342] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 667.764563] RSP: 002b:00007f7036ffa150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 667.765498] RAX: ffffffffffffffda RBX: 00007f7039b97f60 RCX: 00007f7039a375ff [ 667.766358] RDX: 000000000000003e RSI: 00000000200000c0 RDI: 00000000000000f0 [ 667.767218] RBP: 00007f7036ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 667.768076] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 667.768961] R13: 00007ffe37b9dfef R14: 00007f7036ffa300 R15: 0000000000022000 14:56:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:22 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:22 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:22 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0xd, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:22 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pata_sch', 0x80000, 0x23) syz_open_dev$vcsn(&(0x7f0000000140), 0x100, 0x4000) openat(r3, &(0x7f0000000100)='./file1\x00', 0x36400, 0xe375d1901a7fcc3b) readv(0xffffffffffffffff, &(0x7f0000001600), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) syz_io_uring_setup(0x4ae2, &(0x7f00000002c0)={0x0, 0x7e3d, 0x4, 0x1, 0x27d}, &(0x7f00001b4000/0x4000)=nil, &(0x7f0000671000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000340)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$inet(0x2, 0xa, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') faccessat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x1000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000200), 0x3}, 0x3844, 0x0, 0x0, 0x5, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0) [ 667.993316] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 667.994593] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 667.995439] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 667.996218] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 667.997187] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 667.999122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.000390] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.001776] Buffer I/O error on dev sr0, logical block 0, async page read [ 668.003071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.003760] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.005388] Buffer I/O error on dev sr0, logical block 1, async page read [ 668.006440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.007097] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.008798] Buffer I/O error on dev sr0, logical block 2, async page read [ 668.010002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.010728] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.011942] Buffer I/O error on dev sr0, logical block 3, async page read [ 668.012971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.013664] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.014888] Buffer I/O error on dev sr0, logical block 4, async page read [ 668.015921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.016610] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.017845] Buffer I/O error on dev sr0, logical block 5, async page read [ 668.018873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.019561] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.020794] Buffer I/O error on dev sr0, logical block 6, async page read [ 668.021810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.022497] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.023729] Buffer I/O error on dev sr0, logical block 7, async page read [ 668.025235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.025937] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 668.027165] Buffer I/O error on dev sr0, logical block 0, async page read [ 668.029748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.030445] Buffer I/O error on dev sr0, logical block 1, async page read [ 668.034487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.036084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.036838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.037602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.038320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.039660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.041236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.044539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.045285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.046219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.047653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.048376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.049154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.050247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.051774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.052650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.053518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.054354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.057633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.058811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.060659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.061651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.062527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.064700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.066717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.067486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.068245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.069015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.069771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.070512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.071387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.072277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.073213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.074055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.074939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.076368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.077328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.078236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.080292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.082855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.083604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.084356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.085150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.086004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.086752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.087512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.088282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.089126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.089870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.090627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.091345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.092132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.093688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.094510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.095330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.096165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.096942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.097692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.098662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.099380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.102560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.105468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.106337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.107219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.108073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.109659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.110598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.111560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.112382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.113279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.114138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.114980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.115796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.116606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.117358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.118109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.118882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.119695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.120585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.121320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.122094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.122869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.123639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.124349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.125136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.125930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.127286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.128307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.129087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.129847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.130589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.131331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.132067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.132824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.133950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.134838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.135763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.136612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.137984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.138835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.139705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.140641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.141497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.142238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.143538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.144260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.145044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.146184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.146945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.147802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.148706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.149823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.150686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.151888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.152785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.153690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.154624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.155563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.156570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.157894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.158836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.159721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.160599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.161486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.162335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.163205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.163986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.164795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.165582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.166297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.167049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.167811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.168562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.169294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.170110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.170901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.171672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.172390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.173182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.175267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.176934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.179141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.180673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.181487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.182198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.182949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.185117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.185902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.186676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.187426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.188221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.189234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.190010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.190795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.191567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.192288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.193140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.193949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.194774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.195551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.196280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.197102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.197877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.198648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.199373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.200148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.201044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.201851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.202611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.203332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.204105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.204920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.205695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.206468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.207369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.208564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.213509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.214487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.215249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.216042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.216790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.217531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.218245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.218997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.219760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.220587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.221319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.222059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.222798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.223549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.224266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.225043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.225852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.226694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.227557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.228274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.229118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.229922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.230683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.231460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.232176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.232974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.233710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.234456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.235173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.235904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.236635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.237384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.238160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.239103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.241959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.242793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.243629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.244437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.245312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.246370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.247211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.248242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.249153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.249940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.250707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.251505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.252298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.253812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.254670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.255590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.256342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.257181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.258043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.258980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.259839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.260689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.261538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.262585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.263504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.264353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.265443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.266279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.267315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.268174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.269157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.270005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.270820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.271716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.272736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.277634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.278353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.279149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.279940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.280835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.282548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.283391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.284501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.285359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.286280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.287189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.288142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.288991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.290075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.290856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.291978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.292756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.293644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.294359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.295215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.296116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.296996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.297844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.298677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.299497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.300323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.301462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.302302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.303332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.304122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.304909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.305783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.306835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.307616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.308332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.309134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.310055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.311165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.312018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.312855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.313680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.314527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.315329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.316165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.316970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.317778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.318549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.319262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.320188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.320972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.321764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.322577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.323563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.324430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.325249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.326071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.326886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.327723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.328540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.329577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.330433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.331165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.331975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.332809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.333566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.334276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.335038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.335798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.336589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.337331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.338102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.338866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.339637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.340346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.341122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.341885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.342975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.343719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.344461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.345203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.345973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.346733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.347550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.348284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.353131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.353884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.354661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.355374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.356152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.356931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.357707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.358460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.359246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.360008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.360755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.361530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.362240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.363030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.363791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.364532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.365679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.366625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.367437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.368250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.369112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.369979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.370829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.371682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.372825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.373601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.374314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.375071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.375803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.376562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.377308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.378327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.379160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.379916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.380655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.381635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.382362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.383130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.383870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.384629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.389079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.389974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.390812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.391665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.392704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.393586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.394460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.395304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.396151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.397146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.401054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.401912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.402750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.403592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.404490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.405317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.406173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.407052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.407895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.408640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.409432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.410157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.410912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.411672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.412478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.413235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.414122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.414890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.415644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.416355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.417134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.417887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.418641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.419354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.420181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.421098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.421892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.422631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.423372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.424108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.424893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.425653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.426538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.427368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.428238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.429115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.429965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.430786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.431638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.432531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.433323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.434077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.434834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.435570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.436311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.437078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.437831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.438571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.439381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.440120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.440895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.441641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.442381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.443119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.443872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.444829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.445757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.446530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.447276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.448179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.449252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.450040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.450822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.451586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.452699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.455381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.457459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.458289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.459212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.460494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.461853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.463809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 681.089316] FAULT_INJECTION: forcing a failure. [ 681.089316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.092525] CPU: 1 PID: 6779 Comm: syz-executor.4 Not tainted 5.10.230 #1 [ 681.094375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 681.096430] Call Trace: [ 681.097069] dump_stack+0x107/0x167 [ 681.098099] should_fail.cold+0x5/0xa [ 681.099009] _copy_to_user+0x2e/0x180 [ 681.099920] simple_read_from_buffer+0xcc/0x160 [ 681.101075] proc_fail_nth_read+0x198/0x230 [ 681.102322] ? proc_sessionid_read+0x230/0x230 [ 681.103431] ? security_file_permission+0xb1/0xe0 [ 681.104602] ? proc_sessionid_read+0x230/0x230 [ 681.105815] vfs_read+0x228/0x620 [ 681.106672] ksys_read+0x12d/0x260 [ 681.107507] ? vfs_write+0xb10/0xb10 [ 681.108388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 681.109731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 681.110990] do_syscall_64+0x33/0x40 [ 681.111887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 681.113133] RIP: 0033:0x7f7039a3769c [ 681.114192] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 681.118943] RSP: 002b:00007f7036ffa170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 681.120801] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 00007f7039a3769c [ 681.122849] RDX: 000000000000000f RSI: 00007f7036ffa1e0 RDI: 0000000000000004 [ 681.124615] RBP: 00007f7036ffa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.126561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.128305] R13: 00007ffe37b9dfef R14: 00007f7036ffa300 R15: 0000000000022000 14:56:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) (fail_nth: 5) 14:56:35 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) r1 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) r2 = epoll_create(0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0x40002004}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xde64, 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="bab1eb7e9a8cb4af8ed90412d4b8487a03f2f80ecd6b13fb5fd2e3750758b3bb02e4474e8dd560b592f520b981172c64f0490687349808740273bb06038b334cf787242c3feac16404a2ec435c4c670197b2fc6bf44c3d68638d42acc8df75bfc4250cf839559a65812d1aebf1391bcf08d944f0c2c78c8d14a964a30047bbfd986f373a9331d7f6056da28aeb6c70577aad57270fc4187cc728f8a5823160ffd914bcdcbd76cd732d5eea971df150f256d79fc3ff98d722bf5c69255dbea3a0d79150ac2d1ddd0af84102d6790689918f35ff563364f3ced29ff9cebf3e1c034c9ff5bb0c39dda0a9ad", 0xea, 0x5}], 0x4, &(0x7f0000000400)={[{@shortname_mixed}, {@utf8no}, {@utf8}], [{@pcr={'pcr', 0x3d, 0x28}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x39}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, 'sysfs\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, 'sysfs\x00'}}]}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x20000000}) dup2(r1, r3) 14:56:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x3, 0xb5e46223464a3991) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:35 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:56:35 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:35 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:35 executing program 7: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) 14:56:35 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) (fail_nth: 1) 14:56:35 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:35 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x2000) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9a1c2, 0x2) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1) syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x60001) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r5, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x71aaf) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x42808, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@cache_mmap}]}}) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) [ 681.215425] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 681.216905] EXT4-fs (loop7): group descriptors corrupted! [ 681.238198] FAULT_INJECTION: forcing a failure. [ 681.238198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.239659] CPU: 1 PID: 6791 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 681.240485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 681.241519] Call Trace: [ 681.241857] dump_stack+0x107/0x167 [ 681.242314] should_fail.cold+0x5/0xa [ 681.242797] _copy_to_user+0x2e/0x180 [ 681.243282] simple_read_from_buffer+0xcc/0x160 [ 681.243869] proc_fail_nth_read+0x198/0x230 [ 681.244401] ? proc_sessionid_read+0x230/0x230 [ 681.244956] ? security_file_permission+0xb1/0xe0 [ 681.245561] ? proc_sessionid_read+0x230/0x230 [ 681.246116] vfs_read+0x228/0x620 [ 681.246542] ksys_read+0x12d/0x260 [ 681.246974] ? vfs_write+0xb10/0xb10 [ 681.247432] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 681.248068] ? syscall_enter_from_user_mode+0x1d/0x50 [ 681.248694] do_syscall_64+0x33/0x40 [ 681.249146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 681.249782] RIP: 0033:0x7f332a2b869c [ 681.250234] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 681.252458] RSP: 002b:00007f332787b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 681.253392] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f332a2b869c [ 681.254256] RDX: 000000000000000f RSI: 00007f332787b1e0 RDI: 0000000000000003 [ 681.255121] RBP: 00007f332787b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.255985] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 681.256849] R13: 00007ffd5c04dbef R14: 00007f332787b300 R15: 0000000000022000 14:56:35 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x3, 0xb5e46223464a3991) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 681.285529] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 681.286662] EXT4-fs (loop7): group descriptors corrupted! 14:56:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r0, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:56:35 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x200000fe, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0xd, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:35 executing program 7: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) fchmod(r1, 0x184) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001200ff0100009b5727000000000000000000000c0000", @ANYRES32, @ANYBLOB='\b\x005\x00\x00\x00\x00\x00'], 0x28}}, 0x0) [ 681.436850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 681.442996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 14:56:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:54 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x9, 0x222000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r5, 0x8000000) r10 = syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0x121241) getsockopt$WPAN_WANTLQI(r10, 0x0, 0x3, &(0x7f0000000340), &(0x7f00000003c0)=0x4) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r7, 0x10000000) syz_io_uring_submit(r9, r11, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x9, 0x0, @fd_index=0x1, 0x948, 0x0, 0x400, 0x3, 0x0, {0x0, r6}}, 0xd8b) 14:56:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r0, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:56:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:54 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0xfffffdef, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:54 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:56:54 executing program 7: ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xb052) 14:56:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x3, 0xb5e46223464a3991) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:56:54 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:56:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x200000fe, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4050}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x3b, 0x9, 0x6, 0x1f, 0x0, 0x65, 0x90000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x80, 0xfed}, 0x20, 0x7, 0x6d, 0x1, 0x2839, 0x481c, 0x0, 0x0, 0xfffffe01, 0x0, 0x6}) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0xd7, 0x4, 0x3, 0x0, 0x3f0d, 0x22010, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10800, 0x5, 0x1ff, 0x8, 0x0, 0x0, 0x7, 0x0, 0x46d}, 0x0, 0xc, r0, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000300)='./file0/file0\x00', 0x1810c1, 0x40) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) openat$null(0xffffffffffffff9c, 0x0, 0xc000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time\x00') sendfile(r3, r4, &(0x7f00000001c0)=0x6, 0x5) epoll_pwait(r2, &(0x7f0000000240)=[{}, {}], 0x2, 0x5e41, &(0x7f0000000280)={[0x8]}, 0x8) 14:57:07 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:07 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r0, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:57:07 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x0}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:07 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() r1 = fork() r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) pidfd_open(r2, 0x0) ptrace(0x11, r2) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace(0x10, r1) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x3, 0x81, 0x4}) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000040)={0xfe, 0x1d, &(0x7f0000000340)="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"}) 14:57:07 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:07 executing program 7: r0 = open(&(0x7f0000000000)='./file1\x00', 0x600000, 0x1b2) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}}, 0x0, 0xffffffffffffffff, r0, 0x0) lseek(r1, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @loopback={0x0, 0x7}, 0xc3a}, 0x1c) fallocate(r1, 0x3, 0x52, 0x6) fstat(0xffffffffffffffff, &(0x7f00000003c0)) openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x3, 0xfc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400032}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x950) syz_open_dev$vcsa(&(0x7f0000000840), 0x0, 0x28180) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r3, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0x8, @remote, 0x6}, 0x1c) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) pwrite64(r4, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2435235dcb0b3434020d0f4d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0xff69, 0x3ff03) 14:57:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0xfffffdef, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:07 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:07 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0x1043, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2180, 0x0) 14:57:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:08 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:08 executing program 7: ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)={0x91, 0x2, &(0x7f0000000380)="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"}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000080)='./file0\x00', r0, r1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000600010000000200000000000000001000000100", @ANYRES32=0x0, @ANYBLOB="10000400000000002000000000000000"], 0x2c, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 14:57:08 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() r1 = fork() syz_open_procfs(r1, &(0x7f0000000000)='net/connector\x00') ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:57:08 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:57:08 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:20 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:57:20 executing program 2: r0 = inotify_init1(0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x10) r3 = memfd_create(&(0x7f0000000440)='\"\xff\xff\xff\x7f\x00\x00\x00\x00\xcf]?L\ay\x17\x80\xda\x03F\xcfg)\x9d!z\xdf\xc6\x1d\xb0\xa5\xc7%]GP\xc7\xb0@%\xe4p]\xd9q\\\x1f\xa5\x89N\xac]\xa6zZ\xda\xb0\xfd\xcb\x86\xfb\xc3=X\x1c\x82\x05\xc0\x9c\x82:k\xff]\x1c\x1f\x90\xa5&\x7f|=m\xa5\xfa\xbd\xf2R\x94TG\xdcK\xd5\x06\xab)\xc7\xd0\aH\'kE\xf5UH\x88by.\xc6\xf2\xae\xfa^4,\xc5\xd1\x85\xacoV:\x11\x04\x9f\x1c\xd4e3\xacI\x83\xf0Fv\xb6&I\x16\x93\x9c\xe7(;\xd893o\x03+Q\x97\xd3r\xb4G\xd0\x040x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:57:20 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x9, &(0x7f00000002c0)={0x34, 0x1f, 0x6}) r1 = epoll_create(0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20000000}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000340)=""/130, 0x82}], 0x5, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000680)=""/13, 0xd}, {&(0x7f00000006c0)=""/150, 0x96}], 0x3, &(0x7f0000003580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1800000000000000000000ac46000000a716e8608045a61fb979d8c91193ebe334573e7c09ead1e6a241694a8dacdc1dc76cdd6d6bfa5a4ce41c9de1f7f89b6b38f0137e9faaceabd626b14e6854638451ac43dc3e", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x138}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000900)=""/56, 0x38}, {&(0x7f0000000940)=""/32, 0x20}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x3, &(0x7f00000019c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001a80)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000001b00)=""/67, 0x43}, {&(0x7f0000001b80)=""/12, 0xc}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/9, 0x9}, {&(0x7f0000002c00)=""/96, 0x60}, {&(0x7f0000002c80)=""/201, 0xc9}], 0x6}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002e00)=""/211, 0xd3}, {&(0x7f0000002f00)=""/41, 0x29}, {&(0x7f0000002f40)=""/213, 0xd5}, {&(0x7f0000003040)=""/30, 0x1e}, {&(0x7f0000003080)=""/219, 0xdb}], 0x5, &(0x7f0000003200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x5, 0x10040, &(0x7f00000033c0)) ptrace(0x11, 0x0) 14:57:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x0}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:20 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x4}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:20 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 726.445523] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 726.446858] sr 1:0:0:0: [sr0] tag#0 CDB: Xdread, Read track info [ 726.447701] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 52 55 00 69 fe 25 6a 45 f9 74 ab ac 2c 16 29 47 [ 726.448831] sr 1:0:0:0: [sr0] tag#0 CDB[10]: fd 5b df 83 a0 55 da 65 8d fd 60 d7 12 fd 2f f1 [ 726.449973] sr 1:0:0:0: [sr0] tag#0 CDB[20]: 2c 7a 02 d6 18 f4 d6 6d 2b 17 21 6f ff 12 69 5f [ 726.451142] sr 1:0:0:0: [sr0] tag#0 CDB[30]: 72 26 60 1e e5 dd b7 45 18 0c 81 ab 54 7d b0 38 [ 726.452280] sr 1:0:0:0: [sr0] tag#0 CDB[40]: 80 d1 3e e3 75 c0 80 f9 df 34 e6 14:57:20 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 726.502457] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 726.505574] sr 1:0:0:0: [sr0] tag#0 CDB: Xdread, Read track info [ 726.507029] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 52 55 00 69 fe 25 6a 45 f9 74 ab ac 2c 16 29 47 [ 726.508140] sr 1:0:0:0: [sr0] tag#0 CDB[10]: fd 5b df 83 a0 55 da 65 8d fd 60 d7 12 fd 2f f1 [ 726.509269] sr 1:0:0:0: [sr0] tag#0 CDB[20]: 2c 7a 02 d6 18 f4 d6 6d 2b 17 21 6f ff 12 69 5f [ 726.510405] sr 1:0:0:0: [sr0] tag#0 CDB[30]: 72 26 60 1e e5 dd b7 45 18 0c 81 ab 54 7d b0 38 [ 726.511572] sr 1:0:0:0: [sr0] tag#0 CDB[40]: 80 d1 3e e3 75 c0 80 f9 df 34 e6 14:57:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:20 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x6}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x8}, 0x5) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r5, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="b3c874eda9fb8908dad57cfd89d789bc24a6113a16eefa745a0eb3458efe1fc8ee450483e6f6ebbf8a", 0x29}, {&(0x7f0000000200)="3ba48e53754108f7a59cdc4818e8f452cc646b826514c0af4e9c6f03641c29e10bb8d4cdd83bd769756247a12be98d8bfe808c43ba9b624b91f557639137098d00d6ca8761c15bc0698b00edb6bbde08664669790542ad6f772794c00ea39ce102fe660f5a1a1987e7fae892bc7640776e220f733311cc5ffe1b7b971545e9722ca11ba3fb4520a5e84e6126d5fbab465fc868ddccef31a0727ff0c651cae918eb8c4c863059bd20ba079c8444dc97c5f5554f8c15dc3b11dd5c6e82a610579e16277fdf235b6c2b9943346481c314f7c5a0a68ecf151fd331", 0xd9}], 0x2, &(0x7f0000000300)=[{0x10, 0x10b, 0x100}, {0x110, 0x10a, 0x800, "96cffd97eef4999629fa1768dbc8fe08ac859b6f34c4d44df2e990f0958c74a2cc7fd891666edcab7f616d4cd736791b435c5278f4fbdae32ff5d46dd75e7409a439e8c8d0ca5828ab3856f9fce689767ec19bbb567606eb6d1182215e673409f4559e5f7145c51015b12bc96a47aeb192c74959c333a91bf0befdf22de381cda70f0a41172a40da3798700e35ed290931962b4b5afa82675e229051e43242bd6ac5c936ee68b8be9e38f3a6a1eebb5fab84bf47990cc26472f4ebf8465e9b936e1f38ac9ce08e45b332012f14a8ea29ac65b4383a038c85861d91f09b2f648b7090b37e01b3242c1aaa344229e2d58eeacfa63e6c85dca257ad888f"}, {0xa8, 0x117, 0x8, "ee734c50d52b08d8105cc13ca719f0844097d095312f4dfdf0046aedb085184f7b07e63f0b854a8cc3d753896249b7788c92ac37a96290da602ce3b74afc737e04b4b8abf35e44611b98afb673ffb6cb3eb2375e7de4f81cae78bc834481b2413690bfbeebbec5ecbba94afd4c43fb4d8dddf80903f72ed6c914c5537698f633370d371aa009ab01b15a087f797fa35ecb"}, {0xa8, 0x10c, 0xfffffffb, "e1bc41b15d149e68b09127afbaa37ec68532c2ef566f797c415aec0a68c0a158f3366e2ecdd1080ed5edf7ac6df5ae88a720a785734abcf3a97052241c1e3b79c5b254b69ba2cb7090be91b7d35fd091359ccc63daf927c6f1940b91bfa17e1c6f19bd5d4b2d6c40c6741c3d09165256bc500bda15324fe416ca8058652538fd4e85765f06e6a827334856cddd1360d61949c8"}, {0x30, 0x1, 0x9, "92ed725c9400165d9ad7176f6860d7b365d8ea251322f1fc21ef"}, {0x108, 0xff, 0x1f, "506167ad4fc758adf6245bfe57f27946868e287a4fae814a3a8f8828228eb3b1d7f80d3e6656db2da7f10c7118cc6b93d01667030b8778681f0a5593f1474a49fc8776a31abf21551838afa43f4f3833479dcb2521890ef85bb8aff81d25f67887ff6b20a546aca19bbcfb88ebb2b76a184abd8f050102d178791505b8c9be4ae760abe32c02de5e7b2d4db466c41fadd61dfac45bc175f1d4743d249ac72404852279311b6c9283c6f06a253d63092680c2be2258390cd2b7d177358b0359309a20c96551142b736b82118bed36898902e48d043917cf78ba584da313541bfded78cea8ff3d60b3fa7f056193b0c91adcb9b5"}, {0x28, 0x103, 0x8000, "644972c501a1fb9c081fee10c53ee633e7"}, {0x60, 0x10b, 0x8, "aedc0ac9c18e756885d5f90d0d11e2128b6c462c3e6aa445e8c8e7b68ed4d4c4bb143fe99884cf12f769cbd983b8b90b07f0fe1587aebfd520ffb73d0391f432e9c1017a69d85c8a11"}], 0x430}, 0x0, 0x1, 0x1}, 0xcd6) r8 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r8, 0x0, 0x0, 0x1000002) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x4000, 0x1c4) 14:57:20 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) waitid(0x1, r0, &(0x7f00000000c0), 0x80000000, &(0x7f0000000140)) ptrace$cont(0xe, r2, 0x1000, 0xdfc) 14:57:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x4}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:33 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x11}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x8}, 0x5) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r5, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="b3c874eda9fb8908dad57cfd89d789bc24a6113a16eefa745a0eb3458efe1fc8ee450483e6f6ebbf8a", 0x29}, {&(0x7f0000000200)="3ba48e53754108f7a59cdc4818e8f452cc646b826514c0af4e9c6f03641c29e10bb8d4cdd83bd769756247a12be98d8bfe808c43ba9b624b91f557639137098d00d6ca8761c15bc0698b00edb6bbde08664669790542ad6f772794c00ea39ce102fe660f5a1a1987e7fae892bc7640776e220f733311cc5ffe1b7b971545e9722ca11ba3fb4520a5e84e6126d5fbab465fc868ddccef31a0727ff0c651cae918eb8c4c863059bd20ba079c8444dc97c5f5554f8c15dc3b11dd5c6e82a610579e16277fdf235b6c2b9943346481c314f7c5a0a68ecf151fd331", 0xd9}], 0x2, &(0x7f0000000300)=[{0x10, 0x10b, 0x100}, {0x110, 0x10a, 0x800, "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"}, {0xa8, 0x117, 0x8, "ee734c50d52b08d8105cc13ca719f0844097d095312f4dfdf0046aedb085184f7b07e63f0b854a8cc3d753896249b7788c92ac37a96290da602ce3b74afc737e04b4b8abf35e44611b98afb673ffb6cb3eb2375e7de4f81cae78bc834481b2413690bfbeebbec5ecbba94afd4c43fb4d8dddf80903f72ed6c914c5537698f633370d371aa009ab01b15a087f797fa35ecb"}, {0xa8, 0x10c, 0xfffffffb, "e1bc41b15d149e68b09127afbaa37ec68532c2ef566f797c415aec0a68c0a158f3366e2ecdd1080ed5edf7ac6df5ae88a720a785734abcf3a97052241c1e3b79c5b254b69ba2cb7090be91b7d35fd091359ccc63daf927c6f1940b91bfa17e1c6f19bd5d4b2d6c40c6741c3d09165256bc500bda15324fe416ca8058652538fd4e85765f06e6a827334856cddd1360d61949c8"}, {0x30, 0x1, 0x9, "92ed725c9400165d9ad7176f6860d7b365d8ea251322f1fc21ef"}, {0x108, 0xff, 0x1f, "506167ad4fc758adf6245bfe57f27946868e287a4fae814a3a8f8828228eb3b1d7f80d3e6656db2da7f10c7118cc6b93d01667030b8778681f0a5593f1474a49fc8776a31abf21551838afa43f4f3833479dcb2521890ef85bb8aff81d25f67887ff6b20a546aca19bbcfb88ebb2b76a184abd8f050102d178791505b8c9be4ae760abe32c02de5e7b2d4db466c41fadd61dfac45bc175f1d4743d249ac72404852279311b6c9283c6f06a253d63092680c2be2258390cd2b7d177358b0359309a20c96551142b736b82118bed36898902e48d043917cf78ba584da313541bfded78cea8ff3d60b3fa7f056193b0c91adcb9b5"}, {0x28, 0x103, 0x8000, "644972c501a1fb9c081fee10c53ee633e7"}, {0x60, 0x10b, 0x8, "aedc0ac9c18e756885d5f90d0d11e2128b6c462c3e6aa445e8c8e7b68ed4d4c4bb143fe99884cf12f769cbd983b8b90b07f0fe1587aebfd520ffb73d0391f432e9c1017a69d85c8a11"}], 0x430}, 0x0, 0x1, 0x1}, 0xcd6) r8 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r8, 0x0, 0x0, 0x1000002) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x4000, 0x1c4) 14:57:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:33 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x7}, [@NFQA_PAYLOAD={0x2a, 0xa, "127109f39d02970888df813973f646c44aae2396b464debbc8f538279f8d82ee9de4177e597e"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x12f3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000010}, 0x4000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x13, 0x12, 0x501, 0x0, 0x0, {0x7}}, 0x4c}}, 0x0) 14:57:33 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:57:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:33 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x7) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:57:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x80000) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x38, 0x22, 0x0, 0x0, 0x8, 0xc, 0x2, 0x95, 0x1}) mq_open(&(0x7f0000000600)='\x01*+\x0e\xaa\xdc\x84\x97\xa72\xb9v\x93\b5\x84\x83\x86\xce\x9c\x00\xcb\x0f\x87f\x90\x06\xf9{\xa6\xa6VK\xe9\x1c\xdb?*>/\x04\xe9C\xd6\xbd\x1e\x11\v%\xdbB\xaf\xc7\x81\xb8\xa2\x00p\\\x9c\xe5\x9a>\x8d\x9c\xc7\xee\x9c\xe6\x9f\xe3<\xa6\xfb\xbe\x914\xe0\x99\xfa\xef\xea\xbf\x1aH>\x83\xe3\x88G\xc7\xfe\x16\xe9!w\xfa\xc4\x1e\xfaN\xfdc[\xc7\xaf_\xc1\xba\xc0\xf8\xf7\xe4\xbf\xd7\x18\t\xec\xa2C\xd9\r\x83\x19\xb9\x85\xa7\r\xd0\r\xa3v\x97\x910\xdc\v%n\x97.g=\xd0oYF\xfa\x0e\x0f\xf7\xfe\xa2', 0x80, 0x24, &(0x7f0000000340)={0x2, 0x1000000, 0x0, 0xffff}) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000180)={0x1000, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000000c0)="c123", 0x2, 0x7fffffff, &(0x7f0000000300)={r1, r2+60000000}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0xfe, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0}) r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r5) fcntl$dupfd(r5, 0x0, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd, 0x81, &(0x7f0000000580)=[{&(0x7f00000004c0)="ba3aa8bb17ad2db452d7806d21c6cd930997db4975d5e8da59b93bab32d4b02536a2866a2b09658ae8c3368fd3614cd138bc160499077d", 0x37}, {&(0x7f0000000500)="f3a10025ac9988739d16afdf189219aa1b5ba4661fed8fba8227414ede4a566badbd11bda4b626d1554f7b9d7cc03803b3520d61f9002528017252d4a6efe50ee636ed", 0x43}], 0x2, 0x1, 0x1, {0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000000)) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x201) 14:57:34 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x29}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:34 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x6}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 739.707152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.708180] print_req_error: 452 callbacks suppressed [ 739.708193] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 739.720043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.721046] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 739.734007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 14:57:34 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace$getsig(0x4202, r2, 0x7e05, &(0x7f00000000c0)) [ 739.734944] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 14:57:34 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x2b}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 739.747778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.748739] blk_update_request: I/O error, dev sr0, sector 775 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 739.762086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.763040] blk_update_request: I/O error, dev sr0, sector 1031 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 739.775145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.776170] blk_update_request: I/O error, dev sr0, sector 1287 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 739.777784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.778719] blk_update_request: I/O error, dev sr0, sector 1543 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 739.791996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.793854] blk_update_request: I/O error, dev sr0, sector 1799 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 739.799894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.800981] blk_update_request: I/O error, dev sr0, sector 2055 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 739.803654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.804707] blk_update_request: I/O error, dev sr0, sector 2311 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 14:57:34 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:57:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x11}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 739.833965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.835675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.850046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.856633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.857757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.867241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.871235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.875616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.884659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.891917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.897669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.902354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.903745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.910710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.914696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.918344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.922683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.926755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.928368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.932851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.933883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.940941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.942849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.944766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.947138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.948904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.950199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.951942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.953754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.956048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.958062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.961204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.963324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.965372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.967954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.970065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.971709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.975297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.978980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.980646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.981764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.983118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.988351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.990834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.992082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.004781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.007035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.010973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.012831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.025089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.028136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.037015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.038722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.043759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.044852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.046707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.049253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.051349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.053865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.055072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.056688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.057913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.060367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.062645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.065171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.067114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.068658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.069752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.070845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.073293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.074712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.075826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.076918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.078665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.079908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.081023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.082108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.084319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.085786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.086891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.087988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.089078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.090675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.091893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.092958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.094132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.095242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.096855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.098091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.099162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.100780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.101987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.103053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.104240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.105343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.106662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.107757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.108906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.110017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.111094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.112207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.114041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.115163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.116271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.117358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.118683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.119771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.120858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.121936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.123093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.124217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.126659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.127858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.128946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.130044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.131140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.132227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.133615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.134716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.135856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.136949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.138035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.139127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.140221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.141296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.142670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.143759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.144864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.145971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.147336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.149068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.150147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.151234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.152615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.153736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.154820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.155912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.157004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.158092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.159178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.160252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.161655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.162766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.164031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.165125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.166246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.167362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.168891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.169977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.171167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.172194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.173194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.174177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.175169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.176185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.177178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.178191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.179701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.181680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.184170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.185171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.186157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.187149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.188160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.189139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.190208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.191234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.192870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.194695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.195990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.196998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.197995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.198997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.200134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.201148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.202143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.203141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.204170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.205166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.206158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.207138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.208235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.209244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.210242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.211266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.212275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.213280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.214287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.215287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.216363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.217369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.218368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.219405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.220618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.221605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.222402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.223358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.224672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.225682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.226680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.228898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.229930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.230924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.231932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.232917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.233981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.234984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.235996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.236992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.237988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.238983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.240034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.241025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.242088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.243099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.244112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.245108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.246107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.247101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.248134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.249140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.250692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.252827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.253808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.254794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.256669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.257687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.258668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.259669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.260734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.261744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.262735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.263748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.264747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.265737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.266733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.267722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.268802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.269801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.270792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.271805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.272792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.273783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.274783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.275783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.276844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.277847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.278838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.279845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.280840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.281832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.282827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.283819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.284886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.285902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.286882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.287893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.288884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.289875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.290870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.291869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.292933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.293940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.294936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.295951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.296947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.297943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.298932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.299941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.301004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.302009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.303001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.304005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.308038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.311122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.312137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.313230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.314292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.315308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.316312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.317301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.318297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.323872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.324987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.325979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.328333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.330658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.332030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.333370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.335096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.339714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.341994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.343809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.345611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.346720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.348033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.349326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.350765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.355792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.356893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.357888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.359219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.364776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.365975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.369147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.370138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.373748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.377719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.378796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.381860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.382867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.386731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.387918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.392720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.393900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.396771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.397754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.401835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.404732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.405904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.410722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.412017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.414809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.415818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.416821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.418140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.419244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.422170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.424112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.425106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.426920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.428019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.429021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.430674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.433709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.436069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.438253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.440366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.442295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.444194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.445223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.446976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.448165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.449679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.451292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.453947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.456149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.457146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.458149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.459961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.461089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.462352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.463369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.464954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.466002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.467310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.468931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.471014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.473212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.475675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.477960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.480171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.482361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.484943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.486717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.488986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.490716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.492939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.494488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.495768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.496618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.497484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.498237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.499046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 740.499940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 14:57:48 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:48 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:57:48 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:48 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x8}, 0x5) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r5, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="b3c874eda9fb8908dad57cfd89d789bc24a6113a16eefa745a0eb3458efe1fc8ee450483e6f6ebbf8a", 0x29}, {&(0x7f0000000200)="3ba48e53754108f7a59cdc4818e8f452cc646b826514c0af4e9c6f03641c29e10bb8d4cdd83bd769756247a12be98d8bfe808c43ba9b624b91f557639137098d00d6ca8761c15bc0698b00edb6bbde08664669790542ad6f772794c00ea39ce102fe660f5a1a1987e7fae892bc7640776e220f733311cc5ffe1b7b971545e9722ca11ba3fb4520a5e84e6126d5fbab465fc868ddccef31a0727ff0c651cae918eb8c4c863059bd20ba079c8444dc97c5f5554f8c15dc3b11dd5c6e82a610579e16277fdf235b6c2b9943346481c314f7c5a0a68ecf151fd331", 0xd9}], 0x2, &(0x7f0000000300)=[{0x10, 0x10b, 0x100}, {0x110, 0x10a, 0x800, "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"}, {0xa8, 0x117, 0x8, "ee734c50d52b08d8105cc13ca719f0844097d095312f4dfdf0046aedb085184f7b07e63f0b854a8cc3d753896249b7788c92ac37a96290da602ce3b74afc737e04b4b8abf35e44611b98afb673ffb6cb3eb2375e7de4f81cae78bc834481b2413690bfbeebbec5ecbba94afd4c43fb4d8dddf80903f72ed6c914c5537698f633370d371aa009ab01b15a087f797fa35ecb"}, {0xa8, 0x10c, 0xfffffffb, "e1bc41b15d149e68b09127afbaa37ec68532c2ef566f797c415aec0a68c0a158f3366e2ecdd1080ed5edf7ac6df5ae88a720a785734abcf3a97052241c1e3b79c5b254b69ba2cb7090be91b7d35fd091359ccc63daf927c6f1940b91bfa17e1c6f19bd5d4b2d6c40c6741c3d09165256bc500bda15324fe416ca8058652538fd4e85765f06e6a827334856cddd1360d61949c8"}, {0x30, 0x1, 0x9, "92ed725c9400165d9ad7176f6860d7b365d8ea251322f1fc21ef"}, {0x108, 0xff, 0x1f, "506167ad4fc758adf6245bfe57f27946868e287a4fae814a3a8f8828228eb3b1d7f80d3e6656db2da7f10c7118cc6b93d01667030b8778681f0a5593f1474a49fc8776a31abf21551838afa43f4f3833479dcb2521890ef85bb8aff81d25f67887ff6b20a546aca19bbcfb88ebb2b76a184abd8f050102d178791505b8c9be4ae760abe32c02de5e7b2d4db466c41fadd61dfac45bc175f1d4743d249ac72404852279311b6c9283c6f06a253d63092680c2be2258390cd2b7d177358b0359309a20c96551142b736b82118bed36898902e48d043917cf78ba584da313541bfded78cea8ff3d60b3fa7f056193b0c91adcb9b5"}, {0x28, 0x103, 0x8000, "644972c501a1fb9c081fee10c53ee633e7"}, {0x60, 0x10b, 0x8, "aedc0ac9c18e756885d5f90d0d11e2128b6c462c3e6aa445e8c8e7b68ed4d4c4bb143fe99884cf12f769cbd983b8b90b07f0fe1587aebfd520ffb73d0391f432e9c1017a69d85c8a11"}], 0x430}, 0x0, 0x1, 0x1}, 0xcd6) r8 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r8, 0x0, 0x0, 0x1000002) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x4000, 0x1c4) 14:57:48 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x2c}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:48 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x14, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:57:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x29}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:48 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:57:48 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x2f}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:48 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x2b}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:48 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:57:48 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x3a}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x2c}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:57:48 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:57:48 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:57:48 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:01 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:01 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x13, 0xffffffffffffffff, 0x1969b000) r0 = syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x4008001}, 0x0) io_uring_enter(r0, 0x2271, 0x0, 0x0, 0x0, 0x0) 14:58:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002cbd7000fedbdf2d0100000008000700", @ANYRES32, @ANYBLOB="060006000000000008000700", @ANYRES32, @ANYBLOB="0800020000000000080004007f00000108000800020000000c0003000100000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="700000001900250c00000000000000000200000008000000bb20420dfd9172a9db186a00742d12b372c53b3e174ec3139774f9653b767d678463600f88c4d0dd8ea2d0", @ANYRES32=0x0, @ANYBLOB="14000f00ff020000000000000000000000000001"], 0x30}}, 0x0) fork() fork() fcntl$getflags(r0, 0x3) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:58:01 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x3c}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x2f}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e000040000000000000000000"], 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)=""/270, 0x10e}], 0x1, 0x0, 0x2) fcntl$setownex(r0, 0xf, &(0x7f0000000540)={0x2, 0xffffffffffffffff}) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r4 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r3}) keyctl$chown(0x4, r3, 0xee01, r4) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x9, 0x80, 0x1, 0x3, 0x0, 0xfff, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x2}, 0x2000, 0x100000000, 0xfffffffc, 0x0, 0xb9, 0xfffffff9, 0x4, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0xb) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x5, @none}}}, 0xb) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) epoll_create(0x8000) r5 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02f6eba6e4398fca2e000564a9bcf7c21f2ba2de4e29d0d2b3e9da663f6af69ecba751a50c582f43b4f0ba4567d1d49c6e3fc671d79ac97d8bcc426b440c8563e71fc77db552c254f41ffc1ab48f21f58497e3b95e7e2bb286b619534a9c370330570e4efd1adc63927321c5d0cc59f144497b3db6d9ed58380dba98033cfe999a4577040cf417e4f7514ffaa169b3492eb7a5cc284dcfb2b99c258937f75ac5", @ANYRES32=r2, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB="040006000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYRESDEC=r5, @ANYRES32, @ANYBLOB="6679d9b400000004200207006c499ab704000000da92640590"], 0x4c, 0x2) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='logon\x00', r6) unshare(0x48020200) 14:58:01 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:01 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 767.338113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8016 comm=syz-executor.0 14:58:01 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3f74, 0xffffffff}, 0x41024, 0x1, 0xfffffffe, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f646973636172644600a4ad7f00dcabaadea4e4dcbd0ec1664f8f89bd8b"]) 14:58:01 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x7e}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x3a}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 767.516216] perf: interrupt took too long (134745 > 12382), lowering kernel.perf_event_max_sample_rate to 1000 14:58:01 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xb) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1c, 0x0, &(0x7f00000001c0)) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736661e36600080820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010200)='\x00\x00\x00\x00rrAa', 0x8, 0x9e0}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) mkdirat(r2, &(0x7f0000000080)='./file1\x00', 0x0) 14:58:01 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x3c}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:14 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:14 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002140)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x2, @private2, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)="e9f4bb14422c76bd81982a3f1f573b43f2c2c7084679f15209cf62d5e4f2961a5b3ae312c8fb07d100d7428802dc76e9276cc95f40ce027ccca634182416636cbbb9332ef44553c4a9b1717f013dd900fc9251f6ab6beaea8bc1e254201dda169d9aec541a2a7e32f3c19d342f359ab95a838120294346dff3d1ed291851c92e302b6f5f5ea28770af759833dc87b19382fa21abb845b63ec9a9071a1bcb35a79f5b9079faea76e6d9901659353a67eabedea19e39a7cd1549f627287c165793", 0xc0}], 0x1, &(0x7f0000000500)=[@dstopts={{0x58, 0x29, 0x37, {0x2f, 0x7, '\x00', [@pad1, @calipso={0x7, 0x38, {0x1, 0xc, 0x0, 0x0, [0x80000001, 0x7, 0xf022, 0xfc00000000000000, 0x1, 0x9]}}]}}}], 0x58}}, {{&(0x7f0000000480)={0xa, 0x4e21, 0xc3, @private0}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000580)="cdc96fec5048f27c1d5a2e0cfeeca25dc8a33840ccabe8f060036b2e3cf6b10e1b825f01f3eb67481793ad7eb001864e9ff4f7aa8db27b49c2b13714dfc19002e743cb1137769033d7471128474f57", 0x4f}, {&(0x7f0000000740)="f46331aec9ebb8e5818f30acfc5a1d52a043b063fd2ddbb062d81377505d79e4cef3e8c7f1d4deb05c4141fd16d8464d4dfaa6eed90cd1e0307c6f435ca01a8b9146bcb3f8c12114f042ed32974f4c7322058f838d08ba61a1b44070cb33cb93e48709333d52b39cd93e5e66f9755fa6149c31716497407d826bbab364a3515e58c24ffb0f7bbcd8bcbe38cd89f8807075f28a4ecd3cfc5bbfd5113192e00305f45deed39f0d50609b820b59c2926ee087d270828bb3c111aa208cd1afe5b14d3f7610b669f33747615f6034e6177c107e2e04a79ba07f843747ebb8ff3e34fb0e0fc4720700d6325284b5e68d150e88e9b3becfdff207434a6253fe18cb45da06931a7eef8285e01774fd2b41eeabdfa2d775f9a9d0bdb8bcc4183388724344be6aa3f131ffa9a85797f0388eb3ca359e0121dc0c44998862cec1433aefd942e09ff15159c4f75ca212d08f6036b7b8267e9bd7de76f314d58e771d683209a6f6a325b9c6d4e7ae328fdd58c29561fbbf53e768d6c5c3631271723aeeab08e2a13547e9b61ad60a278985d67e9a4bf0b9e93c4ae585619669d2186d07f0e33f4f1691c3f69a514551e6fd8d48ea747cca799090c4cdeec33eac97bfd4e7bb8f61d0866687f1be4f171cdb0c4007a338fb5de25d3e634309baf4dc4ff6aa5a6bdefd0c3efdb56b0f71e3b4878977fde2ac9e5fbf894df8e9cbb6adc79e5f5fb1532252aae1fadfd760c6490f4ee695b5c656db0cfb0cddb4ed1560a0890a92e4206f835eea09d428e7f9bac942a4f5a345b1560a3948935726079977872ea8c2df2bb49d26cff6d09c418f51452233a45418158284300c0984e9622821e49eac1b582c64c2965c75a4063a73788584aaeaa70623e6a2844a8646072eb63c7a2feea71bd83cb4761fa5546e881335f956dc472321f687fb078697cce1779925dd37769c340c069952d95705b0bd53640544df991fcbb0fcf3f99257c9c1147e5804d4accde3786ac7019d139135338ecf2b9342ebfec86f40bad2d03fb09166fbfb4b58f1d9fb3cffc8f2c16648771bcf5e684bd97af9102ae5821547688d7df23f9a71ffccdaad946bd70f6f590c40e783c4a4dd5ea30c89f8ed98f8f40033d52cd70c450033533e144d4a47b7061b101324161efe698e0b70d2b1b908769f03b20a235e0a0f7ae5dbdcee268d95b691759efb938f2d124033f040a81d8bfc39386e9704040a11237d8215a417cdc340839151d534804f1939bc39c3e6bcc942148e9938228f4adbe2777e96e2807118301083281cd53cd8ee6697a977ec78daf5cd987de5ede49d1957272d182e524b5bd24d7aab001b6fe050746de3c7fa5ba96a9860f3b35f2e83d7eb1a5e220f3eaceb3c8293a6db7c3974d8023d3e152f05737cf905d5d296c940a84fd9fb821fe437963e773a92a5d2e160c9572bb66be5ef2c4174cc3f6111e3105e32dc0a476bcf2b36ccbb9dec410397e457159ca2b8092b2ccf1cf223a6d3fad80098382f320f354ba8443d0e32f19c40f11271f90d1f6214d46979ffef255a3b3106584ca112c9adab03f8469b89a38c86ec470ab4c749dc8e6f0573077cff8e8eb240c390137b9211e1bffe39de229faea9b2e3b006f03cdf08a83612f3867b67db5f0ff36a98d380b5e771e37bef05c48a435043e4aeaaf712a6d91a7eb7dccbab91ccf30b4f1daef2f668877b804911b7da6da3873610110875c0751bc4edf26771e502af8d7e0378fee6758a06a156d852fee6c8c378370ac580d1a8fcec373795f2772994738001dc592e962220e8ffd9b996816ca245118d6bfcd7921d1cbb30fb4a7f0ef7f270c038f468acd272b1350e1c179d0eae36829f895495cc18e6e5c735faf42af43e5cadf67713aa6a6693337a8b010e47e4440600f457e4b80ce1cf6259f9dd0ee5945f82046cc2c8aef898e6131196875997641eabf8fd99c7d4cacf59a5a7809af9fd619f75f48ec2886c9a9d597cc5651fd34b8326daa5c9b9c508c625efa66d141909c4ad8ef207df111917c8a3e2fb9ac34dd1a27c9b7b1bb8ee3f783dd70953d9ca5a26d568c7e4c93b8a105428c01674eb9d209716d5f75efff55c6b906021ae7cafdfaba9bcaa86739ce8b00e4e54e05df320e822c7f0820f6af0e04e73e2b4e6685174d9af128abf0fa67a61659ff6b055c33a4e3a4a348ce3fc17a260816ebc714475e51716d965e3e001ab519f4310df830bf481efe2fa589a31b489b3bb146257d30b2d15ea3ab2f3faffc7d525ee9fc6eca5ec86786b10ca7849d98a16e760beaf0f6e78c7bf8e9a6da94d46a54293629f9ed3f663681249de512546d867b58f501335698dd4fa8574c373bea0d15b78758cc7f2bb7bd0e801c0027352c5e8c418ed17c3c7e46adbfa591f6c033e63ffde944a538123e3c474a6db42364cf05d2869e285d080371c06addc7d5a56c9e9b588a88a74ddb61c2136e7be4f530e3cce40c8b9a765f0323c74399634a2032a468708cc9ef00c6f6865f6bf385c4df8e47265183467bd14e8f3f44dfc329e451c1f6a7c05960f2d546c58cd2672309fd5f129a8eebbc3f30d201721f689815e37dd56fc1989f262e37aa93714ce1681dae34680d5aabed1d13b7a098463104e8e0aa0208c13cf2574fbdb2003bc10bfafeb7fa61dfad7b30f8ad74587ee7a7eda6a4069c247cd868dde6a863b0eef65d550d4e2127b0520f815d3c5d02dfd82a736f8fc9f88c9247ab21f20b417e405e3dc20fb6d477cdf2fe6050874471ccc7c25cfe72520dd48eadfed7eef08aa25c88c8de33a9435794bcd3e4060e145eef7f03dad542925de9ca1a6dadefacbbd7878101525123632e28756bb0ad379e8e197fa8dc16e8bdfd8a988529ff84f921d4e6619e5b5b9af526400b90c09ffc9935f8e1e0773e0faebf246ce17575873ade30434b78fa663551482ccb8c392c7b5aae988a8e4182f846e42c69da5682c07f488dc6fb671a27032ce8a9508eeffa4a2d4c98f409b9f1f451e2ef0edb584273e1c2be09cb94987d99bd2d159804b0ee936b33300f6ef55700b4501f832ef63f2811acea527cf31df7ead971a91fa595640b6dc6b1537d582c98fd93284d08dd54ce237527bc4234287450e53ded1abd06398667e11f52808711bf0d505cbdcea9d96a6b3bb4bf1372692c1826b4ac49b82f04b4cde14cb711416a8167195012c5acb824eaf9aa10f5f47ab397241493f6acb91f5fa38f3e5fba980f29792d6f85bc1722c4a8638f8168c9003f72d2768a2e73dc87a2d562ea73606fd67283376e55e9f3e8fe7a8c86fa025e1400efb566e79126eacc89a3cd3d220c70060087e6491ed981754a3bd057668a1d0afb310c027cd7b25da0867f107e7e300d37109ba09314c54839214921a608e32d1a492bb22c1efc90eb6dfa7c14401f8553d3892256ff7f4040f6d9102ce83576acdbaee9ba4c1070b4adb16937bae9b6bdea0d716609b3ce6734f8b4ef3e98013db2df5d9f50777f0c0ff628b011f138dbc2a7680933e312180ff4ef8096a54e0361d545fde733948295bbe61a0b0e7409a987d956b516dd72a9f36e443a59819ccf929f9534b732a4cc12f145e8f3e561d693bd7120dd52a1ff8ee6ff09dbf13b7a5df80e24f743465257605953b28bfbab44bdc7c7342c6fb946e07184beb5e1871233a88c51d2c884ea34d9af09eb8860c6b938b48a08f50f0f8dea59aafe1f8030c25007977effe2c10a56eb733edfd1a29a5dd862b773f0920fd10e6ad94330028c17d11474075d8e3aa72b902e0b5a8c672b168531e2339ac6085d7c9ae0026c03a0a8826797251332fa836af5f5e55975e511664783d1966ac9b6aad3f0eb36a6656fb3a5c2b917e7c3ba86ea852f858d575af51ffca5bd234e5816a2177f3ddaa81892d86928c454ff13c5ab7d2b838230506436b27a809557c32ab4197db4f5a0081884259f32e1016c87625ee19db614ccf0f976cd4063e683d61e9268102a2552403fe339014de44f6699cfe543c85339d9a666c8cb838880186ec5b3da596295b880e370faa161d8ae1ec8b723ca689385fbf3be8964f860d31e8f8f1d7fc89868194744b9978d13c2c86da53c47e514affafe714b9a0a865e55a56a002676e57b481a5e63f26fb780fe00a195fc7000df9ef09e478088bb2c8fd362322d8e05e30ed5bf70ccc278538d22c64b8aed321ddca3677c79bd178e6636f1e7d64da77f16ddf2f204e909c3e1f49c8bc9bb3aa7fcc70beacdf0a6d7a123a0d1a1ac53fbe07de711d1735ded7a75a0a194da1768e3df4248e13d348a62772c154dde50d118d473e3b8403179e89e16ef1aff63d67fc92e54122fa97db5153e4f2d168c4bfcf96cf60085e7bca1d139d0295e0874684fe81881e4998d79fba52b41af96de5c4c22aed58e96f422085d9d311e89732b2ad6ef3eebcb6a3aee6b56c8ff1fc62ac806bfdf4dfc4634f5233c8ea0a5eb0a08d62ba8a159050e32bb9d4a7cec67f65d55e1a4fdcd025a00fa17d7edab11daf1614ee5872e6d727512e53e78d1d39823eac3113f92a6a4e0aa1b7ad2181ed80de53d5b166d76730d53989b8284a10dbf6461c36530466e37e99c45aeb06ef3076002d30353d30711f728a39adfaeaf4a454681e980d4e2fbb0080cb82185ee2418ad2a2eeff8cd7ce1a4424d5c7ef018e2754374a83a8057d091fa6f349854fa6adebd6efb157ac3d4bd547ab3099938d10617ccb683f2d49acba6881b9c38a2b6903458ac89d4211f147831f0e0ed81043d1795aa350aa58f276ba203dd90d6ccb80698b94b0d9fcd434d39270d98ba6dc7e0ab632dc92c7c216b85e0193cf8087aa653240ae89d155d61e0f0e5ce331a241ff817e2d4e38673f0844692cebf18d96a25062bd81ddb438a6d962bf55bec12a0be253d3629a8dd4dd20ecdd746ad4fbb8202a126240e19e4133a21662cb78cca6ee935d41849ab8db0327faf8efb0e7c59c395fbd84800033b19f879417b62728a9441e3b8b7e3a8b47a6eaf4d91d5cf4d0600b8453ddd9602ab206bad94d56fa2826d1b93b86c91845b291267856c325b030e61723fa6efa1de5b7657ec6fb7b732dd0a175f9e788f22bfd09523aef6cea457b793b63c67fa83fc1a1fc488039236170f74c2b3fe8faad4b02fd9f56a4c201cbc36baccf5bc732cb204ba8508481291e9248ed842a10fa6d6c70e7fe78a192832f76ba947e7c1ed12a9fe19008e1fc5ec126d3eab7a655925a64b9c08a98581ee7a1ed8139752a2eee16dee580119283435ab1c5203d0b156dc3b2afe6c28601ba17071dc6d983985ddf67c9db7c837a659609cca89fe443a3c58602e2373e7688fb594187a2838ccf5609ffc495c2d96e5e01ffdbe5cf4f9ea9050e990f806c6f6adf66c7a8802829a00b30551e3baf15260b8afae21733e40dafffbdd18f57a6f3c53ff163568e886c958c1729161465b1e8555a000c162d66abf730b9a39fef1300339483dd20a25dba5988793875367abb2f48980622022bceeb6e38b0383e12914f15b0e9aeda2a51d6a0276a0649cc8b52c3a54d8171cd367f3f35d9d65bde1d35305ba98dfa7cd164cae1e0bfcddc312215373fa8fc93a3271ad17e3f6fb36e570ac5b42ea29e36331b2ee90277d917a7a2774f389ab996487115c26c7f178f8458911796bb4942bd65199e18c87c2ec07cc86d5319e589cdfb1b2b0d4bba6d27dbb6fcc7744506868460648daff03b6186f0ce6e7d5cedac50265343b72297a7d83ea5240e5fd311f1ece3e306fd3fbc86b3", 0x1000}, {&(0x7f0000000600)="fe9cc35180319eeff6c44cbe9df97aff5cda55ed502fd1dc40aba143185d4e7e39545b295088d398e5b11c06f988a12de48dd4a075d7df2b6e4e8b7a3b6ed1f9bfbaaf29e984bdc913531c59fb9fc1fb5082c813950a6974c5dba994c842102730ed7686d10e822a443b866fa85cb3ff38c9b2f26d057b4b55c5a6275b58b3df356c3d4f0f5c5afb30a2b1cb55f8e1a44414dc", 0x93}, {&(0x7f0000001740)="768b9af25651b710b62b42f4daf61cfaac6e23a9726ed4426f83430a1aca9a3455b56c9cb99552fe8306a348ba5ef79cce8f8210ac3c9a9a98f2fa7592aef879ed", 0x41}, {&(0x7f00000017c0)="24cd3149572c2e06911edc7f4b2f9c7175d7b11fbc845c426dbde3aa969e68e8b8e5e45312e7c00fbad378ed9dfb0d1b06960a4ce3d5fbc77740d5fb9635f8c36deca2e19d3f855fbc8c2cc7b8cc35813243c6a52da5883918f1eb2af63299e58d01d548264a33f226e321e147490ad41634fb64977104f010cd659899e3d49e4eff712f84cfaa4f409aa3ecb05c3904cd0ceb56ca7cbdbd04a09de57333139995867cbe8a", 0xa5}, {&(0x7f00000006c0)="fa6b950df58e4c88592a057bfa119a8ef4b7888593d4b75feb4ad177fb0d732f8215fbb57f891ce908073b66eae07d19", 0x30}], 0x6, &(0x7f0000001900)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts={{0x28, 0x29, 0x36, {0x8, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}}}, @dstopts={{0xc0, 0x29, 0x37, {0x0, 0x14, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x2, 0x4a, [0x101, 0x0, 0x7, 0x400000000000000, 0xe018, 0x401]}}, @jumbo={0xc2, 0x4, 0x470}, @pad1, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x10, 0x0, [0x5, 0x6]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x6, [0x3, 0x54, 0x0, 0x1]}}, @jumbo={0xc2, 0x4, 0x7150}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1ff}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x130}}, {{&(0x7f0000001a40)={0xa, 0x4e24, 0x2, @private0, 0x4}, 0x1c, &(0x7f0000001d00)=[{&(0x7f0000001a80)="eb6ea67fd06f42753863ddd7039598d675bacc49b8dd3b454ea728d3b9e7", 0x1e}, {&(0x7f0000001ac0)="4b903c43171f65294565c67ed0494b8d1bcef4a0660fe34e88b480e514746e55ed066db4b7551fbce5f879c9286df3bf2f6c165722f899b39a4d72707bdc5ee7db40726c0ca4a3c38493f9c767f9388b2eea3c583eb9b44e1aceb9b2e82f956dfd8135704eb7d505964ae78392488182b2a5e4", 0x73}, {&(0x7f0000001b40)="4120392ad50a31689b4f603ef177bb0c581666f5c6eed06d419684e9d72ac09d3de9131a7d6db942ceba80cc00f26de8dbcc4b018227a21fb9e11795d8185d0063fff5608f5c65169dc5f35d8508168c94388153150dffcd952bb440658d69588141fe723a1e0f8b97df5c3de909d180", 0x70}, {&(0x7f0000001bc0)="3e733175d835681e61cc62f1518abe4238f30bfff93048", 0x17}, {&(0x7f0000001c00)="171d76d529234576d32b166d621d9ad0d6e604cfc1634932d2692614c84bd8d3943e4b821761214a0662d2fe88011d01d849c44bae086e52a4cfa367045abd60cde0a88b6e6afa39bc42f2d86b5a0bc38767c1242cdf6e9b0003cde4190948803eba61fd2d48903ad16e3ee3d227bfcb8514bf4708d83817fbc27242815abab8801b24daebe1de50ba8774ffc8e582ce54a4f3f5f9b9dca5af70305937f9e70a9632a0946230572e6a93a2fc45d5257f8372bd1289fa3841cb241e2e160b950aac8bedb67d29c3f75d60c37c6724bc201874f9d3e5daa2f239f76a23", 0xdc}, {&(0x7f0000001e00)="24827e23cf2a49947a5e3044ae217390c6284e0062396e59fc3ed86f2fbb876346df29f638cf470893bdc5eff0c65641ec6d1621ff65d145a362cb17444e0b1dd761a05bcdc0ca3e92183da4fa189964bf28bdafc9dcfd91c1d91580be6c2e80ee701bbffcae8be072e73da51822d1a4763e0825f732963eb320a5d56523fb964edba6cceb6991a5ec6c4a4e5bffe7fde8e64d9db085e2c9764e45dd93d1d9947382da337b2c0152023f69b53271ed7111db79b5d87439534ecb97e65bda08", 0xbf}, {&(0x7f0000001ec0)="f947b6798db2a30ca9a9bb872136404850e7efae30e90916992910f9c60a95cd3b47c2a9d4e1bcd414a5a0e0bbf071771dcc0eefa7fece29c6fc13dda51533dc25cc1039dba191c3a63801a86148eae51fbb0de344c70233a0ffff2eed738234112acdad3af0809f5d92514651607ca3df8cf52e2fd665f9d363b5e424dc4a02f9aa5a80b9e652a3306042f88e71ab41ba219ccb32055da1a3d4845755836d91a8dd54e01a70c337b14be9ddcdfbe3e0c1a57d3ee77feb71e06ded92cdadbb93b4de4f1b780d11de36133883becc6d35df768e4eb3c47856925e17", 0xdb}, {&(0x7f0000001fc0)="912632d0b512a72cd0d821446594eeda6dbd4725e2849b54f6d1e3d1ba8c2f4e3ef2830424426e721091be6f51b6e6cbdf579c1d7496e729b3a6d98dc2c5d0a174faaa4d14383f6bbb77547dfc37b8928faa8c82509be1ebdd7e465727fb9a74708d9cf7b8efcef8b9569dc5c4f85f746ad7d01ac6c915805102f3ff6ffa906cde1d85b31e3d3b723196d69c45d4546cf7f4f123b4c7e67cbca5be8ca85cdc5b0c0791960a1ef22634c5bd50cadaa044f5befccc903523ac1f49", 0xba}], 0x8, &(0x7f0000002080)=[@hopopts={{0x28, 0x29, 0x36, {0xff, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x9d29}}], 0x98}}], 0x3, 0x800) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000000440)={0x1, 0x1, 0x3, 0x5540, 0x1, [0xff, 0x4, 0x7f]}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r5, r7, 0x0) copy_file_range(r0, 0x0, r2, &(0x7f0000000040)=0x1, 0x80000000, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x7e}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:14 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = epoll_create(0x10000) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xfffffe01, 0x7, 0xfffffc00, 0x7, 0x4}) r3 = openat$cgroup_devices(r1, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) writev(r3, &(0x7f0000001780)=[{&(0x7f0000000500)="a8720767ac168c2e88d3bbb01430ba89979d3db0cdf4c9932dfd3464902ba79d0221e897f5476f", 0x27}, {&(0x7f0000000540)="5827dd82e91e504002228c497a42ee9af882762ddfb1d35742a9a749640e834d7f862dec0d39c18503f25e0073a61106e9c35a3310a1696f8c8ad799610a08a240a28a6ac8039616ef2df76e5455bed876d2433a86e749a7", 0x58}, {&(0x7f00000005c0)="f6f5aeeef6ee73cffbab657dd83617fd19eb9af0166b8e5559fe93a9a144b6157db82c8aa079723b2b074784d4b0776b4708f3dadcd1227b885f82635500fbba6920c8b62d8d42", 0x47}, {&(0x7f0000000640)="94861bb734ed6ce593bec73ec29f30522aae5543b5357fa9bc604d3f177e02253818f527a46f87e1b279a34986d7a00a2a9674cc6025a251eb1210068111324a4f1346c84f1d5da49fd238baf43c6208d0eae5accc2498196cb8024c6f21b078e8b7fc3a156dfed63bf6cc2f55279620a617d2b2684b87f6b9514624dda7fcb7fba41fef38c8968e4bc52918cbb9fde97be93cb7cffa6d768cfaebe9a91a934d4ceb0dbaa3df6c7217", 0xa9}, {&(0x7f0000000700)}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="9af5ec8ea557daa97629010ea13f0f4e54400bdc42a1a8532243916328", 0x1d}], 0x7) r4 = fork() ptrace(0x10, r4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/197, 0xc5}], 0x3, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x100) r6 = fork() ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x0, 0x3f, 0x5, 0x1, 0x0, 0x1000, 0x80c0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x1, 0xffff}, 0x0, 0x40, 0x8, 0x3, 0x2, 0x3, 0xfff7, 0x0, 0x24, 0x0, 0x3}, r6, 0x7, 0xffffffffffffffff, 0x8) ptrace$setsig(0x4203, r5, 0x6, &(0x7f00000002c0)={0x34, 0x93de, 0x7fffffff}) 14:58:14 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x8, 0x80000001, 0x0, 0x6, 0xfffffffd}, 0x0, 0xe, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="2e2f118078ee3000b5e094063b2cfc0036630bd21894b8f9a015447dd3a7627da1ff9b9502"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c29541b403ec7b734c2e53c61e3e827b1fc971009f90", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r6 = accept4$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000006c0)=@get={0x1, &(0x7f0000000380)=""/26, 0xfffffffffffffffa}) r7 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0x1]}, 0x8) fcntl$setstatus(r7, 0x4, 0x46800) mount$9p_virtio(&(0x7f0000000300), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f657874656e642c6163636573733d636c69656e742c6d73697a653d3078303030303030303030303030346334352c70726976706f72742c6d6d61702c616669643d3078303030303030303030303030303030302c6c6f6f73652c646566636f6e746578743d756e636f6e66696e65645f752c6d6561737572652c726f6f74636f6e746578743d757365725f752c0092ce4c6759adff09f56a2d019206383b48163f20a264153c6e8eb5f61aae4d7449962e2c3aa64d1691815623302c9750"]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f00000002c0)={0x8, 'batadv_slave_1\x00', {'syzkaller0\x00'}, 0x7ff}) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 14:58:14 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:14 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:58:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 780.712913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:58:15 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 780.756929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.757915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.759056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 780.770199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:58:15 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 780.812206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.813217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.814280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:58:15 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002140)=[{{&(0x7f0000000280)={0xa, 0x4e21, 0x2, @private2, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)="e9f4bb14422c76bd81982a3f1f573b43f2c2c7084679f15209cf62d5e4f2961a5b3ae312c8fb07d100d7428802dc76e9276cc95f40ce027ccca634182416636cbbb9332ef44553c4a9b1717f013dd900fc9251f6ab6beaea8bc1e254201dda169d9aec541a2a7e32f3c19d342f359ab95a838120294346dff3d1ed291851c92e302b6f5f5ea28770af759833dc87b19382fa21abb845b63ec9a9071a1bcb35a79f5b9079faea76e6d9901659353a67eabedea19e39a7cd1549f627287c165793", 0xc0}], 0x1, &(0x7f0000000500)=[@dstopts={{0x58, 0x29, 0x37, {0x2f, 0x7, '\x00', [@pad1, @calipso={0x7, 0x38, {0x1, 0xc, 0x0, 0x0, [0x80000001, 0x7, 0xf022, 0xfc00000000000000, 0x1, 0x9]}}]}}}], 0x58}}, {{&(0x7f0000000480)={0xa, 0x4e21, 0xc3, @private0}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000580)="cdc96fec5048f27c1d5a2e0cfeeca25dc8a33840ccabe8f060036b2e3cf6b10e1b825f01f3eb67481793ad7eb001864e9ff4f7aa8db27b49c2b13714dfc19002e743cb1137769033d7471128474f57", 0x4f}, {&(0x7f0000000740)="f46331aec9ebb8e5818f30acfc5a1d52a043b063fd2ddbb062d81377505d79e4cef3e8c7f1d4deb05c4141fd16d8464d4dfaa6eed90cd1e0307c6f435ca01a8b9146bcb3f8c12114f042ed32974f4c7322058f838d08ba61a1b44070cb33cb93e48709333d52b39cd93e5e66f9755fa6149c31716497407d826bbab364a3515e58c24ffb0f7bbcd8bcbe38cd89f8807075f28a4ecd3cfc5bbfd5113192e00305f45deed39f0d50609b820b59c2926ee087d270828bb3c111aa208cd1afe5b14d3f7610b669f33747615f6034e6177c107e2e04a79ba07f843747ebb8ff3e34fb0e0fc4720700d6325284b5e68d150e88e9b3becfdff207434a6253fe18cb45da06931a7eef8285e01774fd2b41eeabdfa2d775f9a9d0bdb8bcc4183388724344be6aa3f131ffa9a85797f0388eb3ca359e0121dc0c44998862cec1433aefd942e09ff15159c4f75ca212d08f6036b7b8267e9bd7de76f314d58e771d683209a6f6a325b9c6d4e7ae328fdd58c29561fbbf53e768d6c5c3631271723aeeab08e2a13547e9b61ad60a278985d67e9a4bf0b9e93c4ae585619669d2186d07f0e33f4f1691c3f69a514551e6fd8d48ea747cca799090c4cdeec33eac97bfd4e7bb8f61d0866687f1be4f171cdb0c4007a338fb5de25d3e634309baf4dc4ff6aa5a6bdefd0c3efdb56b0f71e3b4878977fde2ac9e5fbf894df8e9cbb6adc79e5f5fb1532252aae1fadfd760c6490f4ee695b5c656db0cfb0cddb4ed1560a0890a92e4206f835eea09d428e7f9bac942a4f5a345b1560a3948935726079977872ea8c2df2bb49d26cff6d09c418f51452233a45418158284300c0984e9622821e49eac1b582c64c2965c75a4063a73788584aaeaa70623e6a2844a8646072eb63c7a2feea71bd83cb4761fa5546e881335f956dc472321f687fb078697cce1779925dd37769c340c069952d95705b0bd53640544df991fcbb0fcf3f99257c9c1147e5804d4accde3786ac7019d139135338ecf2b9342ebfec86f40bad2d03fb09166fbfb4b58f1d9fb3cffc8f2c16648771bcf5e684bd97af9102ae5821547688d7df23f9a71ffccdaad946bd70f6f590c40e783c4a4dd5ea30c89f8ed98f8f40033d52cd70c450033533e144d4a47b7061b101324161efe698e0b70d2b1b908769f03b20a235e0a0f7ae5dbdcee268d95b691759efb938f2d124033f040a81d8bfc39386e9704040a11237d8215a417cdc340839151d534804f1939bc39c3e6bcc942148e9938228f4adbe2777e96e2807118301083281cd53cd8ee6697a977ec78daf5cd987de5ede49d1957272d182e524b5bd24d7aab001b6fe050746de3c7fa5ba96a9860f3b35f2e83d7eb1a5e220f3eaceb3c8293a6db7c3974d8023d3e152f05737cf905d5d296c940a84fd9fb821fe437963e773a92a5d2e160c9572bb66be5ef2c4174cc3f6111e3105e32dc0a476bcf2b36ccbb9dec410397e457159ca2b8092b2ccf1cf223a6d3fad80098382f320f354ba8443d0e32f19c40f11271f90d1f6214d46979ffef255a3b3106584ca112c9adab03f8469b89a38c86ec470ab4c749dc8e6f0573077cff8e8eb240c390137b9211e1bffe39de229faea9b2e3b006f03cdf08a83612f3867b67db5f0ff36a98d380b5e771e37bef05c48a435043e4aeaaf712a6d91a7eb7dccbab91ccf30b4f1daef2f668877b804911b7da6da3873610110875c0751bc4edf26771e502af8d7e0378fee6758a06a156d852fee6c8c378370ac580d1a8fcec373795f2772994738001dc592e962220e8ffd9b996816ca245118d6bfcd7921d1cbb30fb4a7f0ef7f270c038f468acd272b1350e1c179d0eae36829f895495cc18e6e5c735faf42af43e5cadf67713aa6a6693337a8b010e47e4440600f457e4b80ce1cf6259f9dd0ee5945f82046cc2c8aef898e6131196875997641eabf8fd99c7d4cacf59a5a7809af9fd619f75f48ec2886c9a9d597cc5651fd34b8326daa5c9b9c508c625efa66d141909c4ad8ef207df111917c8a3e2fb9ac34dd1a27c9b7b1bb8ee3f783dd70953d9ca5a26d568c7e4c93b8a105428c01674eb9d209716d5f75efff55c6b906021ae7cafdfaba9bcaa86739ce8b00e4e54e05df320e822c7f0820f6af0e04e73e2b4e6685174d9af128abf0fa67a61659ff6b055c33a4e3a4a348ce3fc17a260816ebc714475e51716d965e3e001ab519f4310df830bf481efe2fa589a31b489b3bb146257d30b2d15ea3ab2f3faffc7d525ee9fc6eca5ec86786b10ca7849d98a16e760beaf0f6e78c7bf8e9a6da94d46a54293629f9ed3f663681249de512546d867b58f501335698dd4fa8574c373bea0d15b78758cc7f2bb7bd0e801c0027352c5e8c418ed17c3c7e46adbfa591f6c033e63ffde944a538123e3c474a6db42364cf05d2869e285d080371c06addc7d5a56c9e9b588a88a74ddb61c2136e7be4f530e3cce40c8b9a765f0323c74399634a2032a468708cc9ef00c6f6865f6bf385c4df8e47265183467bd14e8f3f44dfc329e451c1f6a7c05960f2d546c58cd2672309fd5f129a8eebbc3f30d201721f689815e37dd56fc1989f262e37aa93714ce1681dae34680d5aabed1d13b7a098463104e8e0aa0208c13cf2574fbdb2003bc10bfafeb7fa61dfad7b30f8ad74587ee7a7eda6a4069c247cd868dde6a863b0eef65d550d4e2127b0520f815d3c5d02dfd82a736f8fc9f88c9247ab21f20b417e405e3dc20fb6d477cdf2fe6050874471ccc7c25cfe72520dd48eadfed7eef08aa25c88c8de33a9435794bcd3e4060e145eef7f03dad542925de9ca1a6dadefacbbd7878101525123632e28756bb0ad379e8e197fa8dc16e8bdfd8a988529ff84f921d4e6619e5b5b9af526400b90c09ffc9935f8e1e0773e0faebf246ce17575873ade30434b78fa663551482ccb8c392c7b5aae988a8e4182f846e42c69da5682c07f488dc6fb671a27032ce8a9508eeffa4a2d4c98f409b9f1f451e2ef0edb584273e1c2be09cb94987d99bd2d159804b0ee936b33300f6ef55700b4501f832ef63f2811acea527cf31df7ead971a91fa595640b6dc6b1537d582c98fd93284d08dd54ce237527bc4234287450e53ded1abd06398667e11f52808711bf0d505cbdcea9d96a6b3bb4bf1372692c1826b4ac49b82f04b4cde14cb711416a8167195012c5acb824eaf9aa10f5f47ab397241493f6acb91f5fa38f3e5fba980f29792d6f85bc1722c4a8638f8168c9003f72d2768a2e73dc87a2d562ea73606fd67283376e55e9f3e8fe7a8c86fa025e1400efb566e79126eacc89a3cd3d220c70060087e6491ed981754a3bd057668a1d0afb310c027cd7b25da0867f107e7e300d37109ba09314c54839214921a608e32d1a492bb22c1efc90eb6dfa7c14401f8553d3892256ff7f4040f6d9102ce83576acdbaee9ba4c1070b4adb16937bae9b6bdea0d716609b3ce6734f8b4ef3e98013db2df5d9f50777f0c0ff628b011f138dbc2a7680933e312180ff4ef8096a54e0361d545fde733948295bbe61a0b0e7409a987d956b516dd72a9f36e443a59819ccf929f9534b732a4cc12f145e8f3e561d693bd7120dd52a1ff8ee6ff09dbf13b7a5df80e24f743465257605953b28bfbab44bdc7c7342c6fb946e07184beb5e1871233a88c51d2c884ea34d9af09eb8860c6b938b48a08f50f0f8dea59aafe1f8030c25007977effe2c10a56eb733edfd1a29a5dd862b773f0920fd10e6ad94330028c17d11474075d8e3aa72b902e0b5a8c672b168531e2339ac6085d7c9ae0026c03a0a8826797251332fa836af5f5e55975e511664783d1966ac9b6aad3f0eb36a6656fb3a5c2b917e7c3ba86ea852f858d575af51ffca5bd234e5816a2177f3ddaa81892d86928c454ff13c5ab7d2b838230506436b27a809557c32ab4197db4f5a0081884259f32e1016c87625ee19db614ccf0f976cd4063e683d61e9268102a2552403fe339014de44f6699cfe543c85339d9a666c8cb838880186ec5b3da596295b880e370faa161d8ae1ec8b723ca689385fbf3be8964f860d31e8f8f1d7fc89868194744b9978d13c2c86da53c47e514affafe714b9a0a865e55a56a002676e57b481a5e63f26fb780fe00a195fc7000df9ef09e478088bb2c8fd362322d8e05e30ed5bf70ccc278538d22c64b8aed321ddca3677c79bd178e6636f1e7d64da77f16ddf2f204e909c3e1f49c8bc9bb3aa7fcc70beacdf0a6d7a123a0d1a1ac53fbe07de711d1735ded7a75a0a194da1768e3df4248e13d348a62772c154dde50d118d473e3b8403179e89e16ef1aff63d67fc92e54122fa97db5153e4f2d168c4bfcf96cf60085e7bca1d139d0295e0874684fe81881e4998d79fba52b41af96de5c4c22aed58e96f422085d9d311e89732b2ad6ef3eebcb6a3aee6b56c8ff1fc62ac806bfdf4dfc4634f5233c8ea0a5eb0a08d62ba8a159050e32bb9d4a7cec67f65d55e1a4fdcd025a00fa17d7edab11daf1614ee5872e6d727512e53e78d1d39823eac3113f92a6a4e0aa1b7ad2181ed80de53d5b166d76730d53989b8284a10dbf6461c36530466e37e99c45aeb06ef3076002d30353d30711f728a39adfaeaf4a454681e980d4e2fbb0080cb82185ee2418ad2a2eeff8cd7ce1a4424d5c7ef018e2754374a83a8057d091fa6f349854fa6adebd6efb157ac3d4bd547ab3099938d10617ccb683f2d49acba6881b9c38a2b6903458ac89d4211f147831f0e0ed81043d1795aa350aa58f276ba203dd90d6ccb80698b94b0d9fcd434d39270d98ba6dc7e0ab632dc92c7c216b85e0193cf8087aa653240ae89d155d61e0f0e5ce331a241ff817e2d4e38673f0844692cebf18d96a25062bd81ddb438a6d962bf55bec12a0be253d3629a8dd4dd20ecdd746ad4fbb8202a126240e19e4133a21662cb78cca6ee935d41849ab8db0327faf8efb0e7c59c395fbd84800033b19f879417b62728a9441e3b8b7e3a8b47a6eaf4d91d5cf4d0600b8453ddd9602ab206bad94d56fa2826d1b93b86c91845b291267856c325b030e61723fa6efa1de5b7657ec6fb7b732dd0a175f9e788f22bfd09523aef6cea457b793b63c67fa83fc1a1fc488039236170f74c2b3fe8faad4b02fd9f56a4c201cbc36baccf5bc732cb204ba8508481291e9248ed842a10fa6d6c70e7fe78a192832f76ba947e7c1ed12a9fe19008e1fc5ec126d3eab7a655925a64b9c08a98581ee7a1ed8139752a2eee16dee580119283435ab1c5203d0b156dc3b2afe6c28601ba17071dc6d983985ddf67c9db7c837a659609cca89fe443a3c58602e2373e7688fb594187a2838ccf5609ffc495c2d96e5e01ffdbe5cf4f9ea9050e990f806c6f6adf66c7a8802829a00b30551e3baf15260b8afae21733e40dafffbdd18f57a6f3c53ff163568e886c958c1729161465b1e8555a000c162d66abf730b9a39fef1300339483dd20a25dba5988793875367abb2f48980622022bceeb6e38b0383e12914f15b0e9aeda2a51d6a0276a0649cc8b52c3a54d8171cd367f3f35d9d65bde1d35305ba98dfa7cd164cae1e0bfcddc312215373fa8fc93a3271ad17e3f6fb36e570ac5b42ea29e36331b2ee90277d917a7a2774f389ab996487115c26c7f178f8458911796bb4942bd65199e18c87c2ec07cc86d5319e589cdfb1b2b0d4bba6d27dbb6fcc7744506868460648daff03b6186f0ce6e7d5cedac50265343b72297a7d83ea5240e5fd311f1ece3e306fd3fbc86b3", 0x1000}, {&(0x7f0000000600)="fe9cc35180319eeff6c44cbe9df97aff5cda55ed502fd1dc40aba143185d4e7e39545b295088d398e5b11c06f988a12de48dd4a075d7df2b6e4e8b7a3b6ed1f9bfbaaf29e984bdc913531c59fb9fc1fb5082c813950a6974c5dba994c842102730ed7686d10e822a443b866fa85cb3ff38c9b2f26d057b4b55c5a6275b58b3df356c3d4f0f5c5afb30a2b1cb55f8e1a44414dc", 0x93}, {&(0x7f0000001740)="768b9af25651b710b62b42f4daf61cfaac6e23a9726ed4426f83430a1aca9a3455b56c9cb99552fe8306a348ba5ef79cce8f8210ac3c9a9a98f2fa7592aef879ed", 0x41}, {&(0x7f00000017c0)="24cd3149572c2e06911edc7f4b2f9c7175d7b11fbc845c426dbde3aa969e68e8b8e5e45312e7c00fbad378ed9dfb0d1b06960a4ce3d5fbc77740d5fb9635f8c36deca2e19d3f855fbc8c2cc7b8cc35813243c6a52da5883918f1eb2af63299e58d01d548264a33f226e321e147490ad41634fb64977104f010cd659899e3d49e4eff712f84cfaa4f409aa3ecb05c3904cd0ceb56ca7cbdbd04a09de57333139995867cbe8a", 0xa5}, {&(0x7f00000006c0)="fa6b950df58e4c88592a057bfa119a8ef4b7888593d4b75feb4ad177fb0d732f8215fbb57f891ce908073b66eae07d19", 0x30}], 0x6, &(0x7f0000001900)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts={{0x28, 0x29, 0x36, {0x8, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}}}, @dstopts={{0xc0, 0x29, 0x37, {0x0, 0x14, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x2, 0x4a, [0x101, 0x0, 0x7, 0x400000000000000, 0xe018, 0x401]}}, @jumbo={0xc2, 0x4, 0x470}, @pad1, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x10, 0x0, [0x5, 0x6]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x6, [0x3, 0x54, 0x0, 0x1]}}, @jumbo={0xc2, 0x4, 0x7150}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1ff}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x130}}, {{&(0x7f0000001a40)={0xa, 0x4e24, 0x2, @private0, 0x4}, 0x1c, &(0x7f0000001d00)=[{&(0x7f0000001a80)="eb6ea67fd06f42753863ddd7039598d675bacc49b8dd3b454ea728d3b9e7", 0x1e}, {&(0x7f0000001ac0)="4b903c43171f65294565c67ed0494b8d1bcef4a0660fe34e88b480e514746e55ed066db4b7551fbce5f879c9286df3bf2f6c165722f899b39a4d72707bdc5ee7db40726c0ca4a3c38493f9c767f9388b2eea3c583eb9b44e1aceb9b2e82f956dfd8135704eb7d505964ae78392488182b2a5e4", 0x73}, {&(0x7f0000001b40)="4120392ad50a31689b4f603ef177bb0c581666f5c6eed06d419684e9d72ac09d3de9131a7d6db942ceba80cc00f26de8dbcc4b018227a21fb9e11795d8185d0063fff5608f5c65169dc5f35d8508168c94388153150dffcd952bb440658d69588141fe723a1e0f8b97df5c3de909d180", 0x70}, {&(0x7f0000001bc0)="3e733175d835681e61cc62f1518abe4238f30bfff93048", 0x17}, {&(0x7f0000001c00)="171d76d529234576d32b166d621d9ad0d6e604cfc1634932d2692614c84bd8d3943e4b821761214a0662d2fe88011d01d849c44bae086e52a4cfa367045abd60cde0a88b6e6afa39bc42f2d86b5a0bc38767c1242cdf6e9b0003cde4190948803eba61fd2d48903ad16e3ee3d227bfcb8514bf4708d83817fbc27242815abab8801b24daebe1de50ba8774ffc8e582ce54a4f3f5f9b9dca5af70305937f9e70a9632a0946230572e6a93a2fc45d5257f8372bd1289fa3841cb241e2e160b950aac8bedb67d29c3f75d60c37c6724bc201874f9d3e5daa2f239f76a23", 0xdc}, {&(0x7f0000001e00)="24827e23cf2a49947a5e3044ae217390c6284e0062396e59fc3ed86f2fbb876346df29f638cf470893bdc5eff0c65641ec6d1621ff65d145a362cb17444e0b1dd761a05bcdc0ca3e92183da4fa189964bf28bdafc9dcfd91c1d91580be6c2e80ee701bbffcae8be072e73da51822d1a4763e0825f732963eb320a5d56523fb964edba6cceb6991a5ec6c4a4e5bffe7fde8e64d9db085e2c9764e45dd93d1d9947382da337b2c0152023f69b53271ed7111db79b5d87439534ecb97e65bda08", 0xbf}, {&(0x7f0000001ec0)="f947b6798db2a30ca9a9bb872136404850e7efae30e90916992910f9c60a95cd3b47c2a9d4e1bcd414a5a0e0bbf071771dcc0eefa7fece29c6fc13dda51533dc25cc1039dba191c3a63801a86148eae51fbb0de344c70233a0ffff2eed738234112acdad3af0809f5d92514651607ca3df8cf52e2fd665f9d363b5e424dc4a02f9aa5a80b9e652a3306042f88e71ab41ba219ccb32055da1a3d4845755836d91a8dd54e01a70c337b14be9ddcdfbe3e0c1a57d3ee77feb71e06ded92cdadbb93b4de4f1b780d11de36133883becc6d35df768e4eb3c47856925e17", 0xdb}, {&(0x7f0000001fc0)="912632d0b512a72cd0d821446594eeda6dbd4725e2849b54f6d1e3d1ba8c2f4e3ef2830424426e721091be6f51b6e6cbdf579c1d7496e729b3a6d98dc2c5d0a174faaa4d14383f6bbb77547dfc37b8928faa8c82509be1ebdd7e465727fb9a74708d9cf7b8efcef8b9569dc5c4f85f746ad7d01ac6c915805102f3ff6ffa906cde1d85b31e3d3b723196d69c45d4546cf7f4f123b4c7e67cbca5be8ca85cdc5b0c0791960a1ef22634c5bd50cadaa044f5befccc903523ac1f49", 0xba}], 0x8, &(0x7f0000002080)=[@hopopts={{0x28, 0x29, 0x36, {0xff, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x9d29}}], 0x98}}], 0x3, 0x800) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000000440)={0x1, 0x1, 0x3, 0x5540, 0x1, [0xff, 0x4, 0x7f]}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r5, r7, 0x0) copy_file_range(r0, 0x0, r2, &(0x7f0000000040)=0x1, 0x80000000, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:15 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x255f, 0x4) sendmmsg$inet(r0, &(0x7f0000001d40)=[{{&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000008200)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000008040)=[{{&(0x7f00000000c0)=@llc, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/247, 0xf7}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000580)=""/147, 0x93}], 0x7, &(0x7f00000006c0)=""/110, 0x6e}, 0xffffffff}, {{&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000001a00)=[{&(0x7f00000007c0)=""/158, 0x9e}, {&(0x7f0000000880)=""/227, 0xe3}, {&(0x7f0000000980)=""/48, 0x30}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)}], 0x5}, 0x3}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001b00)=""/168, 0xa8}, {&(0x7f0000001bc0)=""/137, 0x89}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/183, 0xb7}, {&(0x7f0000001d80)=""/181, 0xb5}], 0x5, &(0x7f0000002f40)=""/200, 0xc8}, 0xff}, {{&(0x7f0000003040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001ec0), 0x0, &(0x7f00000030c0)=""/54, 0x36}, 0x7}, {{&(0x7f0000003100)=@nfc, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003180)=""/234, 0xea}, {&(0x7f0000003280)=""/92, 0x5c}, {&(0x7f0000003300)=""/61, 0x3d}, {&(0x7f0000003340)=""/159, 0x9f}, {&(0x7f0000003400)=""/66, 0x42}, {&(0x7f0000003480)=""/42, 0x2a}], 0x6, &(0x7f0000003540)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000004540)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000006940)=[{&(0x7f00000045c0)=""/4096, 0x1000}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/1, 0x1}, {&(0x7f0000006600)=""/223, 0xdf}, {&(0x7f0000006700)=""/183, 0xb7}, {&(0x7f00000067c0)=""/142, 0x8e}, {&(0x7f0000006880)=""/145, 0x91}], 0x7, &(0x7f00000069c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000079c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000007a40)=""/107, 0x6b}, {&(0x7f0000007ac0)=""/213, 0xd5}, {&(0x7f0000007bc0)=""/19, 0x13}, {&(0x7f0000007c00)=""/193, 0xc1}, {&(0x7f0000007d00)=""/188, 0xbc}, {&(0x7f0000007dc0)=""/118, 0x76}, {&(0x7f0000007e40)}, {&(0x7f0000007e80)=""/131, 0x83}, {&(0x7f0000007f40)=""/14, 0xe}], 0x9}, 0x1000}], 0x7, 0x2100, &(0x7f0000008240)={r1, r2+60000000}) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x3, 0xc7bce561360a3f0a, 0x0) 14:58:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:28 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:28 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:58:28 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000000c0)={0x441, 0x93e0, 0x3ff}) 14:58:28 executing program 2: semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000880)=""/4096) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000440)) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffc, r2, 0x0) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\&\\^+%))#7\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) semctl$IPC_RMID(0x0, 0x0, 0x0) keyctl$revoke(0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') unshare(0x48020200) 14:58:28 executing program 7: setrlimit(0x7, &(0x7f0000000000)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) creat(&(0x7f0000000100)='./file0\x00', 0x41) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r2, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r3, 0x0, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x80c0, 0x220f7b50ec91e097) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)) 14:58:28 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:28 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:28 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x4}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:28 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, 0x0, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x4}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:28 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, 0x0, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:28 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0xf}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:28 executing program 7: perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', 0x0, 0x7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x9862, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB='grpjquota=./file1,max_batch_time=0x00000000000006e2,usrjquota=,test_dummy_encryption,barrier=0x0000000000010000,delalloc,smackfsfloor=,hash,rootcontext=system_u,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2d6d6173efc2abac12f007707851e340476b3d5ec79e3dc3526209000000b88d5294ac289871a6d687a9d966c0efcf9fcff0be2f74d1bc108c48975ee9122dfcffffffffffffff2fe2f77a9342d4cb92c894ca28238d8b0fea789e8c37e0cbc83274415d6b4fc81f6a46e12b"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x10, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x10000, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f00000003c0)=""/200, 0xc8, 0x8, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000240)=0x14) getdents64(r1, &(0x7f0000000880)=""/4096, 0x1000) 14:58:28 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace(0x4207, r1) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:58:28 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:28 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:58:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0xf}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:41 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:58:41 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() dup(0xffffffffffffffff) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:58:41 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, 0x0, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:41 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x1c}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r1, 0x2ff, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x1c}}, 0x40041) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) 14:58:41 executing program 7: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) fork() madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x65) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) acct(&(0x7f0000000000)='./file0\x00') ptrace(0x4208, r0) truncate(&(0x7f0000000080)='./file0\x00', 0x55) 14:58:41 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:41 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100), 0x0, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x1c}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:41 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x30}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 807.138129] Process accounting resumed 14:58:41 executing program 2: r0 = getpgid(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) r1 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000440)="c58435b56fadce6925a8c5ef8299d1c9436890996f121c55fd3949c7ffe74e562d5b7ad3ba81ec2ee03296fc177baf9eb677c3b886f2d2f6f15bbb7648f0411a0e88a7e1de93ae4056fd27712f2d24552e5d7d39ec16e048786d22b4989871bad0f0ee169831b6e6f3e5f6aec27d337087b8119f6d755f6e40547c31e63fdaf4b4593725c72c370172c9527216a415009b28cfab12175e4c530e215b70f7b654b1cc73e9eabfb340bcf589b70ae5e8acd00b6770b80a2a135bf9bd68f3679d8a46b4c50a69d29136daef4804fe9cb5f8caceaeb2b7310d7154d547c522215a4a59b9787a63c4e818bd23c5668aa30f9e030613", &(0x7f0000000540)="2ac7a21c8555cb8161df3e647dcdb023da28a1a647a16e4f8e6fa8febca24d45c7a3d99bb9f57cbd2a9300e181ca7c1e21a348b0080a5409b2a4e4d827024c7bc481ad488ef6fded915ad2c221d17d526fba95e126bf2c8f45e164040e2fc26125b81d14d34a97df6efce3e5b87ef010bd0fd8fd2cad78e0a46b99411deb38836c2a13d2"}}, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = getpid() setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x208, 0x4) prctl$PR_SET_PTRACER(0x59616d61, r3) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x6, &(0x7f0000000240)={0x0, 0x34, 0x0, @tid=r0}, &(0x7f0000000880)) clock_gettime(0x0, &(0x7f00000008c0)) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000000)) preadv2(r4, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f0000001940)=""/70, 0x46}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000700)=""/97, 0x61}, {&(0x7f0000000780)=""/112, 0x70}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000180)}], 0x8, 0x7, 0x1, 0x1e) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:58:41 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 807.230980] Process accounting resumed 14:58:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x30}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:54 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:58:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100), 0x0, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:54 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x60}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:54 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0c151100400000001a000000"], 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000}, 0x0, 0x100}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/44, 0x2c}], 0x1) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 14:58:54 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x1, &(0x7f00000002c0)={0x34, 0x93df, 0x80}) 14:58:54 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:54 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000b80)={0x4, 0xce7}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000280)='./file1/file0\x00', 0x2) r3 = dup(0xffffffffffffffff) fcntl$getown(r0, 0x9) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r3, &(0x7f0000000180)='./file1/file0/file0\x00', &(0x7f0000000400)={{r4, r5/1000+10000}}) flock(r0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8280}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00e4ffffff00d1ceeb1a0000", @ANYRES32, @ANYBLOB="ffffff7f000000002e2f66696c1665300022d3ca43e6b2c507b2b0d3f8e3c4fd342c9fe0ca06f1ac7b9252658f6c04b73358d958a1dbb89145f07d5dcefbb3dbe0075a1d52b5d138d0fb75e0feb9ac286b17bbc0316ac64c3ffbd8571760e0d944"]) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000540)={0x0, 0x8001, 0x2, 0x1}) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x25, 0x400, 0x70bd29, 0x25dfdbfe, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffd0b2d6a350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) timerfd_create(0x8, 0x0) unshare(0x48020200) [ 819.905506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 14:58:54 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0xff}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x60}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:54 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100), 0x0, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0xff}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:54 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000b80)={0x4, 0xce7}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000280)='./file1/file0\x00', 0x2) r3 = dup(0xffffffffffffffff) fcntl$getown(r0, 0x9) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r3, &(0x7f0000000180)='./file1/file0/file0\x00', &(0x7f0000000400)={{r4, r5/1000+10000}}) flock(r0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8280}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00e4ffffff00d1ceeb1a0000", @ANYRES32, @ANYBLOB="ffffff7f000000002e2f66696c1665300022d3ca43e6b2c507b2b0d3f8e3c4fd342c9fe0ca06f1ac7b9252658f6c04b73358d958a1dbb89145f07d5dcefbb3dbe0075a1d52b5d138d0fb75e0feb9ac286b17bbc0316ac64c3ffbd8571760e0d944"]) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000540)={0x0, 0x8001, 0x2, 0x1}) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x25, 0x400, 0x70bd29, 0x25dfdbfe, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffd0b2d6a350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) timerfd_create(0x8, 0x0) unshare(0x48020200) 14:58:54 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:58:54 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:58:54 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:58:54 executing program 7: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x1f, 0x8, 0x4, 0x0, 0x0, 0x46, 0x8, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_bp={&(0x7f00000000c0), 0xe}, 0x10000, 0x6, 0x2, 0x6, 0x3f, 0xfffff9ef, 0xffff, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000440)) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r3) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) dup(r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, r4, 0x0) r5 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, r5) unshare(0x48020200) 14:59:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setpgid(0x0, 0x0) r0 = fork() ptrace(0x11, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x8, 0x1, 0x6ac}}) 14:59:07 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:59:07 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = fork() r2 = fork() ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace$cont(0x20, r2, 0x2, 0x6f556543) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r3 = fork() ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r4 = fork() ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r5 = fork() ptrace(0x10, r5) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace$setsig(0x4203, 0x0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace$setopts(0x4200, 0x0, 0x8000, 0x44) r6 = getpgid(r0) clone3(&(0x7f0000000340)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x3a}, &(0x7f0000000100)=""/174, 0xae, &(0x7f00000001c0)=""/129, &(0x7f0000000280)=[r1, r3, r0, r4, 0xffffffffffffffff, r5, r6], 0x7}, 0x58) 14:59:07 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:07 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:07 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:07 executing program 7: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003900)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f00000003c0)=""/210, 0xd2}], 0x2}}, {{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/41, 0x29}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000580)=""/144, 0x90}, {&(0x7f0000000640)=""/49, 0x31}, {&(0x7f0000000680)=""/91, 0x5b}, {&(0x7f0000000700)=""/231, 0xe7}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/53, 0x35}, {&(0x7f0000000880)=""/21, 0x15}, {&(0x7f00000008c0)=""/19, 0x13}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/100, 0x64}], 0xa, &(0x7f0000001a40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000001a80)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001b00)=""/223, 0xdf}, {&(0x7f0000001c00)=""/225, 0xe1}, {&(0x7f0000001d00)=""/154, 0x9a}, {&(0x7f0000001dc0)=""/130, 0x82}], 0x4, &(0x7f0000001ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001f00), 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f80)=""/207, 0xcf}], 0x1}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000002140)=""/183, 0xb7}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x2, &(0x7f0000002240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002380)=""/197, 0xc5}, {&(0x7f0000002480)=""/12, 0xc}, {&(0x7f00000024c0)=""/26, 0x1a}, {&(0x7f0000002500)=""/241, 0xf1}, {&(0x7f0000002600)=""/248, 0xf8}], 0x5, &(0x7f0000002780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}], 0x7, 0x100, &(0x7f0000002880)={r1, r2+60000000}) fcntl$lock(r3, 0x6, &(0x7f0000003ac0)={0x2, 0x2, 0x9, 0xfffffffffffffe00}) fcntl$getflags(r0, 0x408) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x100820, &(0x7f00000028c0)={[{@gid}]}) 14:59:07 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x4}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:07 executing program 7: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x0, 0x3, 0x7, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') timerfd_settime(r1, 0x0, &(0x7f0000000000), &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/pps', 0x82000, 0x26) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xff, 0x5, 0x4, 0x3, 0x0, 0x10000, 0x84390, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140)}, 0x1, 0x5, 0x3, 0x5, 0x0, 0xfffffe01, 0x401, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xb, r2, 0x1) readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) timerfd_gettime(r1, &(0x7f0000000200)) getpgrp(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000240)) open$dir(&(0x7f00000003c0)='./file0\x00', 0x222001, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000100)) unshare(0x48020200) 14:59:07 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:07 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0xf}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 832.898431] kauditd_printk_skb: 16 callbacks suppressed [ 832.898443] audit: type=1326 audit(1732546747.287:192): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8875 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 832.925703] audit: type=1326 audit(1732546747.287:193): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8875 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 14:59:07 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 832.973484] audit: type=1326 audit(1732546747.322:194): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8875 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 833.006474] audit: type=1326 audit(1732546747.322:195): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8875 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 833.033467] audit: type=1326 audit(1732546747.322:196): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8875 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 833.052919] audit: type=1326 audit(1732546747.325:197): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8875 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 833.067161] audit: type=1326 audit(1732546747.326:198): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8875 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 833.069838] audit: type=1326 audit(1732546747.326:199): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8875 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 833.072483] audit: type=1326 audit(1732546747.327:200): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8875 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 833.075159] audit: type=1326 audit(1732546747.328:201): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8875 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 14:59:20 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:59:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:20 executing program 7: write$sndseq(0xffffffffffffffff, &(0x7f00000002c0)=[{0x3, 0x0, 0x6, 0x6, @tick=0x8, {0xbf, 0xa2}, {0x20, 0x92}, @addr={0x2, 0x7}}, {0x3b, 0x8, 0x2, 0x4, @tick=0x3, {0x8, 0x1}, {0x2, 0xb8}, @raw32={[0x80000001, 0x403, 0x6]}}, {0x5, 0x7f, 0x3, 0x81, @time={0x6ca, 0x401}, {0x4, 0x9f}, {0x24, 0x5}, @ext={0xc, &(0x7f0000000140)="7dfa2295a1d87b22dbbd4895"}}, {0x1f, 0xa9, 0x5, 0x6, @time={0x6, 0x3a48}, {0x7, 0x7}, {0x80, 0x81}, @addr={0x8, 0x9}}, {0x5e, 0xe0, 0x9, 0x68, @tick=0xa90, {0x5, 0x6}, {0x1f, 0x9}, @time=@tick=0x6}, {0x5e, 0x20, 0xc8, 0x1, @tick=0x8000, {0xff, 0x2}, {0x8, 0x3f}, @raw32={[0x7, 0x7f, 0x9]}}, {0x4a, 0x0, 0x6, 0x1, @time={0x7, 0x401}, {0x80, 0x3}, {0x81, 0x9}, @ext={0xef, &(0x7f0000000180)="4351e11e45ff7af58e799c69fe02f35cec9f760eb416fb0b40729f833d1e0309e9b65a87d3630b375c91ca8c7b1b37cb3089d54c95aa698b465f5adf3785bef6801b0ace8fc67d0c73b640e702fc3fb20d729fa840f1199f3a9511dc77b186004882f562c541905f53e7cd0874b608e40d534f514cda2c92db185c2146040c3e39172811308fe85f4182ed0264a2cb0e5dc4e3587b2df8808d103337b80060661be78dce4b508e2ad4f526fd6757bd5a257c5b6d9e72306ca5b292274bf8c1313b37ec72add23cff15c3fc6fbbbe54c4b99884562fc827a98d33d6e238acc7924aaefa3d721c5f08a7365ae7d3a87b"}}], 0xc4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$set_reqkey_keyring(0xe, 0x0) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1, 0xf}, &(0x7f0000000000)=':\x15\x00U\x1bT;\xfa4\x8dd\xa0\x9d&\xb0Z\xdfv\x8b\x84\x87\xa8K\xff\xb5\xce\xb4\xa7\xab\xc6\xf1\a\xdb\xc2m\xb2w\b\xb7*v\xfdo\x83\'\xd9[\xee|4P\xa7\xe8\xad\x82,\xf5\xd1\xea\xdb\xf4\xf5F\xc0H\v\x8d\xbc\x9e)&nH\x032\x15\x80\x19\xc0\fn\xdc\x8dk\xf2\xe4\x80\x9aJ\xe7\xdb\x8e\xd3\x80*i\x82CT\xb3j%\x94\x15\xc6\xc1\xc2\x82\x83\xdc\xf6sqF\x9cX', 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = socket$packet(0x11, 0x3, 0x300) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$packet(r1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 14:59:20 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x1c}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:20 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000000c0)=""/198) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) 14:59:20 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0xf}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:20 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x30}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x4}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:20 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204a, 0x0, 0x2, 0x4, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x30f6, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000500)={"13d12337ba734bee18d5e848059d17fa", 0x0, 0x0, {0x5, 0x2}, {0x2, 0x5}, 0xc32, [0x4, 0x4, 0x3, 0x5, 0x70a, 0x4, 0x9, 0x4, 0xe1b, 0x21ee, 0x101, 0x1ff, 0x2, 0x101, 0x3, 0x7]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000600)={"109474b5ca7613960f11bade2bf5005e", r2, r3, {0x7, 0x6}, {0x1, 0xd4}, 0xa9, [0x6, 0x15, 0x8001, 0x9, 0x9, 0x6, 0x7, 0x7fff, 0x0, 0x3100, 0x6, 0xfffffffffffffff7, 0x6, 0x1f, 0x40, 0x3]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_setup(0x5e06, &(0x7f0000000000)={0x0, 0x5e89, 0x20, 0x1, 0x2d3, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x8}, 0x5) syz_io_uring_complete(r4) clone3(&(0x7f0000000ac0)={0x17412e500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:59:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:59:20 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:59:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:20 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x60}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0xf}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:20 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:20 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0xff}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x1c}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000340)={0x1, 0x81, 0x0, 0x6, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000014c0)={0x488, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "74c23c122acc8041d8fd78c7453b96f529cede9a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "5e833bb2679ed9fff2cfda4a90dab7ac7c918192a237d7fcbaf1d2a0fce154"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x6a, 0x3, "4160fcf3c815ed9f42977feb642542ee40c077e1a94a94d3c825d6517a276656905871156dc327668f769f6ab77bd6e222eee4afb5376b76c4f997b9c5088f38af2a76dde41f9d09c07a01838e87aada796b0cae1097fe550cde9afa7b080c6a570f3d78a3ae"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "69ad49a18f07eeea1264bcd9edff2668e93556994c31"}}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a003c7c1ebf41d1a44aeef742e918138982f2d1df903c242c0145a83ec903347bbe5"}}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "0e483860256fecf029a140899d19668f437f80fc9fffd383313c0dd00a2b3698da4d38efe5e7bb93963e03e5e2d88b0e713d27f54d08eea0cd80476ecbde1c3bd97d9db6f9b92b34"}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x118, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33a274f3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20004044}, 0x8000) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) 14:59:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000000580)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="440050ec1d00210c00000000000000dca6000200"], 0x14}}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x103302) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x2be8, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x9dc, 0x5, 0x0, 0x1, [{0x3b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x158, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5b98}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1}]}]}, {0x210, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xe4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x71}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12d}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}]}, {0x4}, {0x78, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1225}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x29}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}]}, {0x2e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x23aa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x168, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x182}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x564}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x187}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xcc0, 0x5, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x17c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x24}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2847}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x301}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800100}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}]}, {0x868, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x258, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x600}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc00}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2c08}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x424, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x60}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x30}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x97}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81ad}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x48}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3d}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x177}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x20c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc000}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x188, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x439}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x7ac, 0x5, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x114, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xeb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa0}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb2d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x360, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x21c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x746d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfda8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff21}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x75}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0xa3c, 0x5, 0x0, 0x1, [{0x470, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x184, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x24c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x54}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x36}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1c24}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x259}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x91}]}]}, {0x1b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2cd821cf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x350, 0x5, 0x0, 0x1, [{0x2a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x236}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}]}]}]}, 0x2be8}}, 0x55) 14:59:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:20 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:34 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0xa, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001900250c0000000000000000020067d808000000", @ANYRES32=0x0, @ANYBLOB="14000f00ff020000000000000000000000000001"], 0x30}}, 0x0) fork() fork() fcntl$getflags(r1, 0x3) r2 = epoll_create(0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x20000000}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x7, 0x4) 14:59:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x8, 0x1, 0x40, 0x9, 0x0, 0x9, 0x6420, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xca, 0x5, @perf_bp={&(0x7f0000000040), 0x8}, 0x40, 0x93, 0x80000000, 0x5, 0x3, 0x5, 0x4, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xd, r0, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x30}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:34 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:34 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:34 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:59:35 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() r1 = fork() r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace$cont(0x1f, r2, 0xffffffff, 0xffffffff) ptrace(0x10, r1) ptrace(0x11, r0) move_pages(0x0, 0x4, &(0x7f0000000040)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000140)=[0xff], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace(0x8, r1) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r3, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x8, 0x1f, 0xf9, 0x0, 0xfff, 0x30900, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x8000, 0x4, 0x9, 0x1, 0x401, 0x1, 0x8000, 0x0, 0x6, 0x0, 0x5b9}, 0xffffffffffffffff, 0xa, r3, 0xf) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) socket$inet6_udplite(0xa, 0x2, 0x88) 14:59:35 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:35 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 860.716096] netlink: 'syz-executor.7': attribute type 15 has an invalid length. [ 860.836866] netlink: 'syz-executor.7': attribute type 15 has an invalid length. 14:59:48 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x16d982, 0x0) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f00000001c0)=@type=0x1) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r1) fcntl$dupfd(r2, 0x0, r3) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x5) shutdown(0xffffffffffffffff, 0x1) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000200)) fsetxattr$security_capability(r2, &(0x7f0000000000), &(0x7f00000005c0)=@v2={0x2000000, [{0x3, 0x4}, {0x401, 0x6}]}, 0xffffffd9, 0x2) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {0x11}, 0x0, 0xffffffffffffff10, 0x0, 0x0}, 0x58) fcntl$getown(r3, 0x9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={{r5}, 0x2, 0x7, 0x91fe}) syz_open_dev$tty1(0xc, 0x4, 0x1) 14:59:48 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:48 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 14:59:48 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:48 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x60}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:48 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) r0 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(r3, &(0x7f0000000180), 0x8, 0x0) r4 = fork() ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 14:59:48 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 874.441646] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 14:59:48 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:48 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 14:59:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0xff}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 874.480808] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 14:59:48 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 14:59:48 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 874.542856] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 874.582088] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 15:00:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:01 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:01 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:01 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(0xffffffffffffffff, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:00:01 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r3 = epoll_create(0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x20000000}) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r2, 0x7, r3, &(0x7f0000000040)={0xffffffffffffffff, r5, 0x1}) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000000)={&(0x7f0000000340)=""/4096, 0x1000}) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:00:01 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000140)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 15:00:01 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:02 executing program 2: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f0000000400)=ANY=[@ANYBLOB="00fb2a0314e90a778c76633ed20000003d0402a20e174c9be604aec55cff9112ef2d822a"], 0x2a, 0x2) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0xfffff4b7, 0xb6, 0x401]}, &(0x7f00000001c0)=0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) timerfd_create(0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="000229bd7000ffdbdf25370000000c009900010400006a00000008009f000700000005001801110000000800a10004000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x100) timerfd_create(0x0, 0x0) r4 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000440)='./file1\x00', 0x2, 0x6, &(0x7f00000017c0)=[{&(0x7f0000000480)="b9b9dc0e97ce0df6ad2100b7dfeaeb6188c1f97ff1409f9c8308b5b575836c836d20a26f7557d44a9b5c44282b1ec759978f48aac4c5e5618cb18cd6486d73a58e1bfe65914fe3cda54b1a252e6e9045b031d3ec0215f3f8404b7e4d0ff978ec16d4036e067649b040dd385bdd5f0e9d22e5432b4367608d739fc2a79e829289eddcd58e3ce276d79387ed32844fb1257577807c576a0b39eef8d7be", 0x9c, 0x10001}, {&(0x7f0000000540)="c1506cb0ffe4d4202140b5ddaf92458b6bf5871c37176f2cd00709ce3fd904f16b9d6c2abd16f6fe50388a301738848977feaab66b273865861d2b69f782fb10431dc498841387b693efb74117d4ef1058375a9a8aef550d8450492f78f29b113b85b46a815a17b40e60d1f045748f57c8b3b409152d", 0x76, 0x6}, {&(0x7f00000005c0)="4ccf040e01dcada961b3ac115b71b96d2711f5626d9356a5a367d3e191e2fb2d1b85dfdf18a40de2f58c5f132b4068f33807a3cd713862e1e53a869dd8f36b53b93fae6fc6d1b3b7701fe6c6aa02cd8383cc8a0c4d57951b12d74b7162674b507272ac26929302cd49077186c071afee109cb8ba716a2a2119d63005e2eb570d857caf69b71fe4097b7aac6c5f8086d0b95001", 0x93, 0x38bd}, {&(0x7f0000000680)="6a60740603443ef6abdaf3687e71e783143de1768acf9a31c619c39c86242a9cc7a03ee4ee486c3ed8bcb8c4fa8afe16e845eb993d33087d6cb4c7577552188ff1b52779c70dc420f414d8f670b56519770a34acd802ca644e1b0d5e9b234a2543965247000f01abd9b82e81c353d0b53f7fc8bfc3d81a04ae491fbfcadab0e5bdaedad27da9f3e6aaadaca3323cf818886730697a55", 0x96, 0x6}, {&(0x7f0000000740)="bbb0e5fa4501d0d6b1c41f596298c52571ff60b464d2aa804e0c4ad9686de6a2534a18226ff3f9235f57e9b3d9443ef612cafaf794fb363891881e448fa49174e42b4f8cae53a1eb9c8817b645464745c14b931c2afa8792a261f86a63578a74255876548a3fc0c64b5406062c52df1ce93c9f7cad8c", 0x76, 0x3f}, {&(0x7f00000007c0)="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", 0x1000, 0x8f6}], 0x22a9008, &(0x7f00000019c0)={[{@fat=@umask={'umask', 0x3d, 0x1f}}, {@nodots}, {@dots}, {@dots}], [{@euid_lt={'euid<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, 'filter\x00'}}, {@euid_lt={'euid<', 0xee01}}]}) r5 = perf_event_open$cgroup(&(0x7f0000001900)={0x1, 0x80, 0x0, 0xff, 0x6, 0x8, 0x0, 0x6, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0xa042}, 0x1000, 0x0, 0x0, 0x5, 0x2, 0x0, 0x200, 0x0, 0x1}, r1, 0xffffffffffffffff, r2, 0x1) sendfile(r4, r5, &(0x7f0000001980)=0xff, 0x7) unshare(0x48020200) 15:00:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:02 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:02 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x30}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:02 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:02 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000240), &(0x7f0000000200)=@v3, 0x18, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0089267bc3ea0b3784110c45b1b6c9757341", @ANYRES16=0x0, @ANYBLOB="080028bd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000800) r2 = epoll_create(0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x20000000}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r4, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x420580, 0x31) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './file0\x00'}) r7 = epoll_create(0x8000) r8 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000000c0)={0x20000000}) bind(r6, &(0x7f0000000280)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ce\x00'}, 0x80) 15:00:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:02 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x60}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:02 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) r1 = fork() ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, '.\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace$getregset(0x4204, r0, 0x3, &(0x7f0000000140)={&(0x7f0000000100)=""/37, 0x25}) 15:00:02 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x0, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:00:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:02 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:15 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000240), &(0x7f0000000200)=@v3, 0x18, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0089267bc3ea0b3784110c45b1b6c9757341", @ANYRES16=0x0, @ANYBLOB="080028bd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000800) r2 = epoll_create(0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x20000000}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r4, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x420580, 0x31) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './file0\x00'}) r7 = epoll_create(0x8000) r8 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000000c0)={0x20000000}) bind(r6, &(0x7f0000000280)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ce\x00'}, 0x80) 15:00:15 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x0, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:00:15 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace(0x4207, r1) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) clone3(&(0x7f0000000200)={0x800, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f00000000c0), {0x17}, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/107, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, r0], 0x3}, 0x58) syz_open_procfs$namespace(r2, &(0x7f0000000280)='ns/net\x00') 15:00:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x8, 0x2, 0x8, 0x4, 0x0, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x212, 0x7, 0x6306, 0xa19174de55ad15b1, 0x8, 0x0, 0x6, 0x0, 0x5, 0x0, 0x5d3}, 0x0, 0x6, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105142, 0x0) fallocate(r1, 0x10, 0x0, 0xfdef) 15:00:15 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:15 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xff}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:15 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x0}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) getitimer(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000080)={{r0, r1/1000+60000}, {0x0, 0x2710}}, &(0x7f00000000c0)) 15:00:16 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:16 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:16 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x0, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 901.689987] kauditd_printk_skb: 2 callbacks suppressed [ 901.689999] audit: type=1326 audit(1732546816.079:204): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9941 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 901.706418] audit: type=1326 audit(1732546816.089:205): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9941 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 15:00:16 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:16 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:16 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x3aa00, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) [ 901.743031] audit: type=1326 audit(1732546816.089:206): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9941 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 15:00:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x30}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 901.770846] audit: type=1326 audit(1732546816.089:207): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9941 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 901.788835] audit: type=1326 audit(1732546816.089:208): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9941 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 901.807308] audit: type=1326 audit(1732546816.090:209): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9941 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 901.828977] audit: type=1326 audit(1732546816.090:210): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9941 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 901.844963] audit: type=1326 audit(1732546816.090:211): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9941 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 901.867566] audit: type=1326 audit(1732546816.104:212): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9941 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 [ 901.880646] audit: type=1326 audit(1732546816.104:213): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9941 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 15:00:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) getitimer(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000080)={{r0, r1/1000+60000}, {0x0, 0x2710}}, &(0x7f00000000c0)) 15:00:29 executing program 0: r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:00:29 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:00:29 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:29 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create(0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40002004}) r3 = epoll_create(0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x20000000}) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20000000}) r5 = epoll_create(0x8000) r6 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000000c0)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000140)={0x70000005}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) signalfd4(r1, &(0x7f0000000040)={[0xfffffffffffffbff]}, 0x8, 0x80000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\f\x00', 0x8, 0x3a, 0x0, @private2, @mcast2, {[], @mlv2_report}}}}}, 0x0) 15:00:29 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x60}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:29 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 914.741589] kauditd_printk_skb: 2 callbacks suppressed [ 914.741601] audit: type=1326 audit(1732546829.130:216): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10105 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14351b9b19 code=0x7ffc0000 15:00:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xff}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:42 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:00:42 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x34, &(0x7f0000001f00)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f00000008c0), 0xa}, 0xff}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/111, 0x6f}, {&(0x7f0000000a00)=""/150, 0xa4}, {&(0x7f0000000ac0)=""/255, 0xff}], 0x3, &(0x7f0000000c00)=""/198, 0xc6}, 0x9}], 0x2, 0x20, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net', 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x18000, 0x0) openat(r5, &(0x7f0000000280)='./file0\x00', 0x222000, 0x131) fsetxattr$security_ima(r4, &(0x7f0000008980), 0x0, 0x0, 0x0) bind$packet(r4, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x51, 0x6, @multicast}, 0x14) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000000)) fsetxattr$security_evm(r3, 0x0, &(0x7f0000000080)=@sha1={0x1, "01fa768c228643b43df74263201243774fc0efef"}, 0x15, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) perf_event_open$cgroup(&(0x7f0000000140)={0x6, 0x80, 0xaf, 0x7f, 0x2, 0x7, 0x0, 0xffff, 0x48038, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x200000, 0x4, @perf_config_ext={0x45, 0x1}, 0xdcecaeac4a1e9cce, 0x7, 0x7d, 0x5, 0x2, 0x0, 0x7, 0x0, 0x552, 0x0, 0x8}, r1, 0xa, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) 15:00:42 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:42 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x4, 0x100, 0x4, 0xfffffffffffffffb}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000014c0)=ANY=[@ANYBLOB="f90000006d33c715d4650901e9fa4a10eeb7810100000018000000", @ANYRES32=r1, @ANYBLOB="00005b12d98c00002e2f66696c6530004f3373c2f9c62dd629892577ceb0da43aa021b9f067f2c0d1cf013c370092fc4b673b3f47e686d7095f4f90732ad48aa233aaf89ea32"]) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000013c0)={"8d4a9343520ec52fb828d6b30c4cbf4f", 0x0, 0x0, {0x5, 0x80}, {0x2, 0x1ff}, 0x80000001, [0x8, 0x0, 0x268, 0x6, 0xf9, 0x3, 0x8, 0x0, 0x80, 0x9, 0x7fff, 0x3, 0x100000001, 0x9, 0x400, 0x1000]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc01000010000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000001010a00000011000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x1bc}}, 0x0) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000000)=0x54) write(r4, &(0x7f0000000240)="01", 0x1) 15:00:42 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:42 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) r1 = fork() ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x3, &(0x7f0000000040)={&(0x7f0000000140)=""/250, 0xfa}) ptrace$setsig(0x4203, r1, 0x1e, &(0x7f00000000c0)={0x2034, 0x1000003, 0x6}) 15:00:42 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x6}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x0}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:42 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 928.042546] sg_write: data in/out 1634493195/246 bytes for SCSI command 0x0-- guessing data in; [ 928.042546] program syz-executor.7 not setting count and/or reply_len properly 15:00:42 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace$getsig(0x4202, r1, 0x9, &(0x7f00000000c0)) 15:00:42 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x11}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:42 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:00:42 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:42 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 928.794188] sg_write: data in/out 1634493195/246 bytes for SCSI command 0x0-- guessing data in; [ 928.794188] program syz-executor.7 not setting count and/or reply_len properly [ 942.883837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 15:00:57 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x29}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:57 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x21, 0xa0, 0x3, 0x9, 0x0, 0x1, 0x80800, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86, 0x2, @perf_config_ext={0x7, 0x81}, 0x2000, 0xfffffffffffffffd, 0x9, 0x5, 0x6, 0x0, 0x4, 0x0, 0xfffffff8, 0x0, 0x3}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x44, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0 ']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRESHEX=r4, @ANYRESHEX, @ANYRESOCT=r3, @ANYRESHEX, @ANYRES16]) r5 = socket$netlink(0x10, 0x3, 0x0) fallocate(r1, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001000f9ff4aa92d8d000008000000090005000000000000804801000000000000f56256e74e7aa53309e24b5f13322b23395408c8afef8ca1ab"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xa504}}, './file1\x00'}) read(r6, &(0x7f0000000500)=""/122, 0x7a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x80800) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) r7 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0, 0x100) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x222080, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1e, 0x29, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7, 0x3f, 0x1, 0x81, 0x0, 0x7, 0x160c, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0xfffe}, 0x4, 0x80, 0x5, 0x9, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffff089}, 0xffffffffffffffff, 0xd, r7, 0x0) 15:00:57 executing program 0: r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:00:57 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:00:57 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:57 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 942.901301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 15:00:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0}) r4 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fallocate(0xffffffffffffffff, 0xb, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)={r7, r8+60000000}, 0x1, 0x1}, 0x1f) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) fchmodat(r9, &(0x7f00000015c0)='./file1\x00', 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x10d, 0x1200) inotify_add_watch(r6, &(0x7f0000000040)='./file1\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x4840, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057440)={0x1, [{r1, r3}, {}, {r1}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2}, {}, {}, {r2, r3}, {r1}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r1}, {r1, r3}, {}, {}, {}, {0x0, r3}, {r2}, {}, {}, {0x0, r3}, {}, {}, {}, {r1, r3}, {0x0, r3}, {r2}, {0x0, r3}, {r1}, {r2}, {r1}, {r2}, {r1, r3}, {r2, r3}, {}, {r2}, {0x0, r3}, {r2}, {0x0, r3}, {}, {}, {r1}, {r2, r3}, {r1}, {r2}, {r2, r3}, {r2}, {0x0, r3}, {r1}, {0x0, r3}, {}, {}, {r1}, {}, {0x0, r3}, {}, {0x0, r3}, {0x0, r3}, {r1}, {}, {r1, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {r2, r3}, {0x0, r3}, {r2, r3}, {r2}, {r2, r3}, {r1, r3}, {0x0, r3}, {}, {r2}, {r1}, {}, {r1, r3}, {0x0, r3}, {r2}, {r1, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {r1}, {}, {r1, r3}, {0x0, r3}, {}, {r2}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r1}, {}, {}, {0x0, r3}, {r1, r3}, {r1}, {r2}, {r2}, {}, {r1, r3}, {}, {}, {0x0, r3}, {r2}, {0x0, r3}, {}, {0x0, r3}, {}, {r2}, {r1}, {r1}, {r2, r3}, {0x0, r3}, {r1}, {0x0, r3}, {r2, r3}, {0x0, r3}, {0x0, r3}, {r1}, {}, {r2, r3}, {}, {r1, r3}, {r1, r3}, {0x0, r3}, {}, {r1, r3}, {r2, r3}, {}, {r1, r3}, {r2, r3}, {0x0, r3}, {}, {}, {r1, r3}, {r2}, {r1}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r1}, {}, {0x0, r3}, {r1}, {r2, r3}, {r2}, {r2}, {0x0, r3}, {r1}, {}, {r1, r3}, {0x0, r3}, {}, {}, {}, {r1}, {r2}, {r2, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {r2, r3}, {}, {}, {r1}, {0x0, r3}, {}, {r2, r3}, {r1}, {r1}, {r1, r3}, {}, {r1}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {r2, r3}, {}, {r2, r3}, {}, {0x0, r3}, {0x0, r3}, {r1, r3}, {r2}, {}, {r2, r3}, {r1}, {r1}, {}, {r2, r3}, {0x0, r3}, {r1, r3}, {r2}, {0x0, r3}, {}, {0x0, r3}, {r2}, {r2, r3}, {r1}, {}, {r1, r3}, {r1}, {0x0, r3}, {0x0, r3}, {}, {0x0, r3}, {0x0, r3}, {}, {r2, r3}, {0x0, r3}, {}, {r1, r3}, {0x0, r3}, {}, {}, {0x0, r3}, {r1}, {r2}, {r2}, {}, {0x0, r3}, {}, {r2}, {}, {r2, r3}, {r1}, {r1}, {}, {}, {}, {r2}, {r2, r3}, {r1, r3}, {0x0, r3}, {0x0, r3}, {r2}, {r2}], 0x5, "3d6dce94a01963"}) creat(&(0x7f0000000400)='./file1\x00', 0x8) 15:00:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:57 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:57 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x2b}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:57 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = epoll_create(0x10007f) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20000000}) ftruncate(r2, 0x2d7) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8001}, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r4 = epoll_create(0x8000) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x40002004}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x48042, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f00000000c0)={0x20000000}) sendmsg$inet(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0}, 0x4c088) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r7, 0x0, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x5}, 0x4) sendmmsg$inet6(r3, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)="07c8dd6941de765ea425c680059aec140fa58467f9e4fc78383715d6fd5b32a726b2fa55b846fc6d6a908efd2a04b1596865db413c546e1144d43575ff5dec6f03c0ae0bc37d30b173483008055e3143", 0x50}, {&(0x7f0000000340)="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", 0xb39}], 0x2}}], 0x1, 0x0) 15:00:57 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x313) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9bbb) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r0, 0x0, 0x6df, 0x48a}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) syz_io_uring_setup(0x5c, &(0x7f00000001c0)={0x0, 0x4000}, &(0x7f0000001000/0x2000)=nil, &(0x7f00009ad000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8002, 0x9b) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x36400, 0xe375d1901a7fcc3b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 15:00:57 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x6}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:57 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x2c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:57 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 943.151923] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 943.153117] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 943.154476] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 943.155259] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 943.156191] print_req_error: 375 callbacks suppressed [ 943.156203] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0 [ 943.158572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.159230] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 943.160571] buffer_io_error: 462 callbacks suppressed [ 943.160578] Buffer I/O error on dev sr0, logical block 0, async page read [ 943.162172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.162859] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 943.164099] Buffer I/O error on dev sr0, logical block 1, async page read [ 943.165220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.165902] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 943.167138] Buffer I/O error on dev sr0, logical block 2, async page read [ 943.168095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.168783] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 943.169997] Buffer I/O error on dev sr0, logical block 3, async page read [ 943.170965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.171658] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 943.172860] Buffer I/O error on dev sr0, logical block 4, async page read [ 943.173812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.174514] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 943.175712] Buffer I/O error on dev sr0, logical block 5, async page read [ 943.176660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.177313] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 943.178579] Buffer I/O error on dev sr0, logical block 6, async page read [ 943.179577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.180227] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 943.181434] Buffer I/O error on dev sr0, logical block 7, async page read [ 943.191432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.192110] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 15:00:57 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 943.193334] Buffer I/O error on dev sr0, logical block 0, async page read [ 943.205390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.206044] Buffer I/O error on dev sr0, logical block 1, async page read [ 943.206978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.207713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.208448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.209156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.209893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.210651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.211449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.212165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.212906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.214629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.215659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.216417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.217136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.217924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.219707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.223468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.224246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.225150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.225943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.226858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.229443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.230233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.231147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.231939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.232742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.233522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.234432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.235187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.235983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.236780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.237608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.238440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.239194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.239996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.240797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.241616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.242480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.246453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.247279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.248069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.249032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.249814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.251146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.254083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.255082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.255868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.257403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.258133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.258893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.259635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.260471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.261184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.261926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.262705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.263540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.264296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.265118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.265914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.269429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.270247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.271045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.271903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.272657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.273408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.274128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.274875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.275651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.276394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.277106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.277875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.278718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.279530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.287429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.288216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.289607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.290514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.291274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.292095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.292869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.293647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.294555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.298524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.299265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.300022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.300874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.302031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.302839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.303645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.304566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.305285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.306070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.306894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.307718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.308508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.309277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.310071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.310890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.311676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.312450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.313160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.313916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.314708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.315549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.316275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.317040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.317798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.318645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.319412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.320133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.320882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.321667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.322434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.323152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.323908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.324663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.325436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.326173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.326947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.327761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.328510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.329217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.329975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.330754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.331553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.332260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.333041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.333826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.336425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.337139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.337903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.338677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.339422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.340140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.340927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.341750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.342561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.343436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.344273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.345149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.346042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.346885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.347782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.348695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.349576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.350449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.351281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.352178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.353068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.353949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.354761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.355586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.356302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.357061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.357823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.358646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.361398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.366388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.368523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.369951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.372179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.373574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.374617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.375372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.376084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.376825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.377621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.378640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.380046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.381424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.382938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.384365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.385744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.387365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.389719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.391368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.392833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.394237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.395931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.397346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.398494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.399203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.399944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.400769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.401521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.402277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.403903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.405282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.406494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.407204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.407949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.408754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.409518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.410279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.411906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.413287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.414775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.416157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.417609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.419218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.420621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.422000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.423761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:00:57 executing program 0: ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:00:57 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:57 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:00:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x11}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:57 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x7, 0x111000) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000300)=""/78, &(0x7f0000000380)=0x4e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000080004000000000014000600fc010000000000000000000000000200"], 0x30}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup(r7) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000080)={@local, 0x78, r10}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) 15:00:57 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x2f}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 943.446929] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 943.449941] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 943.452009] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 943.453708] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 943.456184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.457192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.458082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.458971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.459842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.461543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.462416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.463248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.464141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.465013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.466070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.466911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.470007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.470849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.471738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.472673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.473634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.474503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.475383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.476235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.477171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.478068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.478852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.479607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.480390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.481114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.481862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.482715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.483623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.484496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.485371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.486244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.487145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.488029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.488947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.507850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.509641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.511299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.512797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.514272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.515060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.515798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.516573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.517867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.518656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.519398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.520114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.520854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.521665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.522428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.523143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.524221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.524961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.525695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.528385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.529098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.529903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.530784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.535744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.536552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.537354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.538272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.539107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.543551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.544411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.545146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.545908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.546698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.547464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.548205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.548966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.549731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.551107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.555507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.556495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.557413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:00:57 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:00:57 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x3a}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:00:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x29}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 943.558181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.559342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.560172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.561054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.562541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.563541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.564911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.565801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.566692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.567466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.568482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.569218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.570070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.570855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.571676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.572440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.573213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.573973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.574991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.576155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.577076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.577955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.578763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.579860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.581438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.582231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.583063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.583883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.584738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.587106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.588196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.589035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.590035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.590893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.591745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 943.596694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:00:58 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:10 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x313) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9bbb) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r0, 0x0, 0x6df, 0x48a}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) syz_io_uring_setup(0x5c, &(0x7f00000001c0)={0x0, 0x4000}, &(0x7f0000001000/0x2000)=nil, &(0x7f00009ad000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8002, 0x9b) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x36400, 0xe375d1901a7fcc3b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 15:01:10 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x1}) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:01:10 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:01:10 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x3c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:10 executing program 7: r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9010}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140)={[0xf0]}, 0x8) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)={0x3, 0xc8, "df1f240aa6d76a256f6939908d22746cc12079d379e60801f5e00c6666074dc3411828d543c7c15c4e6654d2a6872f1e042e6d6a89a63959ae4c3fdfe50ffce173d5566ccc80a24c895f6805438ce6860b1243cf4eccd73aed086809d99945f7504d1cde882e3cdb974e340b3f8386475cfca7d4fb1e1b51028a5ed5b3d1fabd7b1646e490385d49873f99d669489a2537fcd928a99da383f0ddbc83ed3179666a69975e03bd1e934d5b74e7088f5a5146d85370c444fdb3ccca51297be75c354954b52f41076d92"}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 15:01:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x2b}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:10 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:10 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:10 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x7e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x2c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:10 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:24 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x313) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9bbb) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r0, 0x0, 0x6df, 0x48a}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) syz_io_uring_setup(0x5c, &(0x7f00000001c0)={0x0, 0x4000}, &(0x7f0000001000/0x2000)=nil, &(0x7f00009ad000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8002, 0x9b) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x36400, 0xe375d1901a7fcc3b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 15:01:24 executing program 7: r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9010}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140)={[0xf0]}, 0x8) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)={0x3, 0xc8, "df1f240aa6d76a256f6939908d22746cc12079d379e60801f5e00c6666074dc3411828d543c7c15c4e6654d2a6872f1e042e6d6a89a63959ae4c3fdfe50ffce173d5566ccc80a24c895f6805438ce6860b1243cf4eccd73aed086809d99945f7504d1cde882e3cdb974e340b3f8386475cfca7d4fb1e1b51028a5ed5b3d1fabd7b1646e490385d49873f99d669489a2537fcd928a99da383f0ddbc83ed3179666a69975e03bd1e934d5b74e7088f5a5146d85370c444fdb3ccca51297be75c354954b52f41076d92"}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 15:01:24 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:24 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:01:24 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:24 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x2f}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:24 executing program 0: r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) [ 970.015938] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 970.019112] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 970.019968] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 970.020761] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 970.021720] print_req_error: 316 callbacks suppressed [ 970.021732] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 970.024971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.026849] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 970.029519] buffer_io_error: 318 callbacks suppressed [ 970.029525] Buffer I/O error on dev sr0, logical block 0, async page read [ 970.033232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.034671] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 970.038017] Buffer I/O error on dev sr0, logical block 1, async page read [ 970.040099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.041535] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 6 prio class 0 [ 970.044442] Buffer I/O error on dev sr0, logical block 2, async page read [ 970.046260] Buffer I/O error on dev sr0, logical block 3, async page read [ 970.047579] Buffer I/O error on dev sr0, logical block 4, async page read [ 970.048431] Buffer I/O error on dev sr0, logical block 5, async page read [ 970.049225] Buffer I/O error on dev sr0, logical block 6, async page read [ 970.050048] Buffer I/O error on dev sr0, logical block 7, async page read [ 970.051177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.051857] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 6 prio class 0 [ 970.053598] Buffer I/O error on dev sr0, logical block 0, async page read [ 970.054466] Buffer I/O error on dev sr0, logical block 1, async page read [ 970.055440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.056060] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 0 [ 970.057826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.058502] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 970.059784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.060608] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 970.061865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.062543] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 970.063833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.064527] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 970.065897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.066603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.067391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.068078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.068903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.069972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.070791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.071827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.072669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.073558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.074343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.075200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.076991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.078006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.078860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.080652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.081472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.082222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.083037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.084416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.085887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.087062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.088030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.089217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.090213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.091212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.092106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.093087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.094105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.095102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.095968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.097008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.098635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.102613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.104477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.109482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.111401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.112236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.113541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.114378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.116864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.117861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.118720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.119761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.120636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.121449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.122199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.122950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.123797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.124552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.125294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.126067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.126908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.128092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.128938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.129931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.130791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.131739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.132558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.133433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.134232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.135088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.136223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.136998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.138045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.138845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.141543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.142272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.143550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.144493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.145651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.146511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.147627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.148452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.149208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.150075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.150885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.151732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.152541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.153343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.154067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.154845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.155695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.156507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.157263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.158047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.160237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.161185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.161939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.162720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.163519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.164257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.165413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.166165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.167177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.167959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.168739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.169512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.170328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.171241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.211842] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 970.213251] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 970.214131] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 970.214967] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 970.216192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.217117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.219624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.220944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.221937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.222706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.223563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.224629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.225442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.226176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.227111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.227934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.228806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.229617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.230403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.231175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.231985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.232768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.233836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.234631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.235526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.236284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.237068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.237910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.238698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.239547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.240229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.241014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.242020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.242771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.243686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.244685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.248201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.249043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.249833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.250757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.251737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.252543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.253396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.254187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.255093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.257094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.257985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.258862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.259642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.260994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.261810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.262662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.263550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.264371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.265244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.266120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.267008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.267960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.268787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.269635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.270577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.271451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.272281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.273104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.274021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.274911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.275761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.276625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.277570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.278408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.279261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.280124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.281022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.281950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.282915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.283905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.284782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.326111] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 970.327644] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 970.328519] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 970.329370] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 970.330472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.331369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.335254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.336477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.337296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.338208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.338983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.339779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.340541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.341260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.342154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.342997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.343826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.344630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.345431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.346284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.347142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.347966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.348885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.349670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.350464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.351192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.351964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.352722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.353524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.354272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.355076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.355871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.356632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.357430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.358176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.358933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.363762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.364557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.365899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.366759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.367656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.368580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.369450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.370397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.391376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.392153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.393026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.393772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.394561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.395457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.396230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.396972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.397748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.398505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.399401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.400157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.400978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.401762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.402596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.423708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.424524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.425358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.426123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.426913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.427689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.428480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.429191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.429968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.430713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.431513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.432299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.433108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.433845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.434623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.435396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.436166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.436921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.437698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.438474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.439370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.440089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.440881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.441623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.442410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.443134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.443919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.444725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.445550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.446328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.447145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.447929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.448760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.449534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.450370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.451193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.452018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.452995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.454145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.454908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.455737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.456500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.457265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.459619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.460431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.461245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.462061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.462932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.463835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.464697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.465517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.466445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.467219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.468079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.468878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.469728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.470570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.471485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.472247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.473065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.473836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.474718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.475520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.476285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.477064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.478541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.479382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.480194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.481046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.481875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.482618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.483403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.484278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.485047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.485864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.486657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.487485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.488199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.489021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.489795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.490888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.491823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.492690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.493530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.494389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.495231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.496339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.497169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.498087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.498933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.499772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.500604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.503225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.504019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.504800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.505536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.506305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.507066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.507855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.508591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.509473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.510305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.511164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.511950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.512775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.513541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.514308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.519233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.520029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.520809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.521545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.522336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.523072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.523857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.525070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.525888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.526856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.527628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.528560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.529467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.530239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.530994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.531797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.532592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.533459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.534217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.535034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.535835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.536648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.537438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.538247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.540451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.541219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.542056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.542839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.543681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.544922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.551602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 970.553537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:01:37 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:37 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2049, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xc5, 0x1f, 0x3, 0x6, 0x0, 0x3f, 0x60, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x40080, 0x8001, 0xf7, 0x9, 0x0, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x6}, r1, 0x10, r0, 0x1) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0x10001, 0x0, 0xfffffffffffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xfbffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="01e855000100000018000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r8 = accept4$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r9, &(0x7f0000000380)='./file0\x00', 0x20000, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8982, &(0x7f00000002c0)={0x8, 'batadv_slave_1\x00', {'syzkaller0\x00'}, 0x7ff}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 15:01:37 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000340)='pkcs7_test\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000780), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0xfffffffffffffff9}, 0x800, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000380)=""/244) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) 15:01:37 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x3a}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:37 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace(0x11, r0) 15:01:37 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 983.452238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 983.492473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.493587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.494636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 983.506655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 15:01:37 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x3c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:37 executing program 7: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/4\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x806c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) sendfile(r3, r1, &(0x7f0000000380)=0xffffffff00000000, 0x400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000001f0000000200"/20], 0x14}}, 0x0) r4 = syz_io_uring_setup(0x29, &(0x7f0000000080)={0x0, 0x5236, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) eventfd(0x0) syz_io_uring_setup(0xabb, &(0x7f0000000200)={0x0, 0xd992, 0x20, 0x1, 0x29d, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000300)) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0xff7f, 0x0, 0x0) r8 = getpid() syz_open_procfs(r8, &(0x7f0000000100)='net/vlan/vlan1\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, @out_args}, './file1\x00'}) fcntl$setstatus(r2, 0x4, 0x6400) write(r2, &(0x7f0000001200), 0xffffff45) 15:01:38 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:01:38 executing program 0: prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x6fe0, 0x2, 0x8, 0x7fffffff, 0x1000, 0x1}) r0 = fork() ptrace(0x10, r0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ptrace$setsig(0x4203, r0, 0x80000000, &(0x7f00000002c0)={0x2b, 0x93de, 0x6}) r1 = getpid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x2, r1}) 15:01:38 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:38 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x7, 0x1f, 0x0, 0x80000000}, {0x0, 0x8, 0x1f, 0x3d614d40}, {0x6}]}) 15:01:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x7e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x11) openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x181) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x40100, 0x60) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x14000, 0x6) sendfile(r2, r3, 0x0, 0x20d315) 15:01:38 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xf}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 15:01:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 15:01:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x78, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x65c2e09e, 0x10}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b1188f088294"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xd, 0x34, @random="7b237dc98800b868a8"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008050) syz_open_dev$vcsu(0x0, 0x0, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r7, 0x0, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa, 0x0, r7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x25, &(0x7f00000004c0), 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000500)={0xcd, 0xf17, 0x80, "7c25549929820a73dcc4f593db0f29082250c98450fa0e735589d0243668289501e0b4d0d39a6b4ed42f27a949dff341fefe47fe5d5c127be33dfea056c6f777354e3715f127886e51f28a85cdde3dd22583ba4b5bbffcb13b2f1a939ceddd3b8f3e650bcebf066c9229596d297a61757604e679d8c4868c19893f87e091b618e51bf7f235cc56d174b955510b1326ed8f93eb3077bcd664f040dd43b468ba582519e6c039e3f0463e047e0b18bd2ae1015ebb276773e1bfbdce572ac3f391c90e1b4ddead83813c35ed75eec2"}) 15:01:51 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x1c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:51 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:01:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x300) openat$urandom(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x8000, 0x7fff, 0x1, 'queue0\x00', 0x3}) r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 15:01:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:01:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 15:01:51 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:01:51 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r1, 0x1000003) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r3, &(0x7f00000002c0)=""/225, 0xe1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r2, r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x3c7) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r3, r4, r5, r2, r6, r7, r7, 0xffffffffffffffff], 0x8) fcntl$addseals(r3, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x39, 0x3, 0x8}}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) lseek(r8, 0x0, 0x2) 15:02:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:06 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r1 = fork() ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x9, 0xa9) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace$getsig(0x4202, r1, 0x2, &(0x7f0000000000)) 15:02:06 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:02:06 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x60}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x0, 0x0) 15:02:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:02:06 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000080)={0x0, 0x0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000030008000c000000faffffffffffffff00"], 0x14}}, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000100)=0x1f, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0xb0841, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000140)=0x3ff, r6, &(0x7f0000000300)=0x7, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x0, @broadcast}}) 15:02:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, 0x0) 15:02:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xf}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:06 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfff, 0x100100) open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000008000000000080000000000500000003ffff0000000000410000000700000100000000049ab7f521d5490a8ab5be35be0d91423d3f00b615d842ce2bf767ae3a1246f0740673f4d37ac5a05c312030aafc575b7edbb3a49d53e6c422847ffd8dc3ace8987b1106f3fe3227a7f93ecc7978a42899300ae776ba1b8fcaf5a8d1563b1126f459aa98bd17da9f94ebd04e0491157700f5d6f2542a754f2232b799403c2155b7fdba8b21288ebfe6228842f22f6b6c954ea018cdff8950bc7fb415ed97b8ce6ad4a2e86327daf4fb7ffb6584f56d5dfef73c6d736592380a80078f5e000000000000000000000000000000b57b549664"], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 15:02:06 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xff}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:06 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:02:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x1c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:02:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:06 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:06 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() r1 = epoll_create(0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20000000}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x1, r3}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r4, 0x0, 0x8, 0x1}) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:02:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x0, 0x0) 15:02:06 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xff}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:02:06 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x60}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x0, 0x0) 15:02:19 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:02:19 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000000ffff0000366175a204000007"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_io_uring_setup(0x7a2, &(0x7f0000000080)={0x0, 0xd8a5, 0x8, 0x0, 0x3ae}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'wlan1\x00', @local}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) 15:02:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x6435aa2b, 0x6}) 15:02:19 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 15:02:19 executing program 7: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8) pwritev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="7e7ba7af247c08f9516693f686fad87e0167d4091b8a7aa7a3e42c532bce4abd8ffeff02c172a32b2da7c69302e30169acdf8fe37e0651e1dab013c6e580452c2566ab", 0x43}, {&(0x7f0000000480)="6156b2f1e54a22a5f58e8b42e70a78581c0f0be43308fc3e0274622ed3a9977839e3cab1e774d5eb641be11dfff633b23b7cb38dc1a692a1bd57773612a8a1f10bc711fc093024befe1399b3e534dffb042288e43a7149f00c224642c24e6b3d15ed0c9a2a243b5cc921c4dda666656c5165de2c5d04a57209dde42c2fd81944e746f690", 0x84}], 0x2, 0x896a, 0x8) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000440)) keyctl$search(0xa, r2, &(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x0}, r2) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x6, 0x1, 0x2, 0x2, 0x0, 0x8, 0x4288, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xc}, 0x40400, 0x800, 0x7, 0x0, 0x5, 0x100, 0x1, 0x0, 0x100, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x0) unshare(0x48020200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x600, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, r4, {0xfffff000}}, './file0\x00'}) fcntl$dupfd(r5, 0x406, r6) 15:02:19 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:02:19 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0xff}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:20 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 15:02:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:20 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:02:20 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0xf}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:20 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:02:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) dup(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r1 = fork() r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000000)={0x1, 0x8}) r3 = epoll_create(0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x20000000}) r5 = fspick(r0, &(0x7f0000000080)='./file0\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f00000000c0)={0x20000000}) sendto(r6, &(0x7f0000000180)="cfa2a625293cc9a11e4aad50ae0cd6421e037fffa8f69c55036100013af01ea3e7573fdac269d6d86a53f69b10ef8e097e10151fc47c4e13b7e846ae", 0x3c, 0x0, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80) fcntl$dupfd(r5, 0x406, r4) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x9, &(0x7f00000002c0)={0x10, 0xd3c, 0x8000006}) 15:02:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 15:02:20 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:02:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)}, 0x0) io_uring_enter(r0, 0x4d97, 0x0, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x2, 0x2004, @fd_index=0x9, 0x3, &(0x7f0000000100)=[{0xfffffffffffffffe}], 0x1, 0x8, 0x1, {0x3}}, 0x1) 15:02:33 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x4d8, 0x5698, 0x40}) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getregset(0x4204, r1, 0x3, &(0x7f00000000c0)={&(0x7f0000000040)=""/38, 0x26}) 15:02:33 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:02:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 15:02:33 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x1c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:02:33 executing program 2: semget$private(0x0, 0x2, 0x207) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x80) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:02:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:33 executing program 2: semget$private(0x0, 0x2, 0x207) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x80) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:02:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) 15:02:33 executing program 7: ioctl$CDROMRESUME(0xffffffffffffffff, 0x5302) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x64b, 0x100) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r1, 0x80, &(0x7f0000000040)=@xdp={0x2c, 0x9, 0x0, 0x30}}, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000100)) sendmmsg$sock(r1, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x3499, @my=0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)="6b2621352fb7de4e1e58e24b733c983baed3c5ce0c93ae0fe4ff9fd72f4ec6dc", 0x20}, {&(0x7f0000000200)="37d1b9aeae00bb0e00a4823f05ff0669771d7348c8d2518432f1d6f2440c40ee2fc7d18fa2b1ac2f21f38ee8738f8b409251744d05d94353f39966c6982b48fd6be041a94a6cb67a27c5df7c24a03387140a3bc629ff79956702c2f19e7f34ac912d8e0f27bc6c43732147cb1d7a266ec0d8a59810c5bd8d62f5c562b7cb7e6b41367235b59adc3488f138e1af35081a2e3769fb82d0900071bfe5a8737d985d5c6cc68c806431b9ea59aeda8b531095b9f9752de09d721486", 0xb9}, {&(0x7f00000002c0)="48d610ee08cb641fbd32d820c35b1225f36cf8e92798cbf6aa0f0f404edb3cff5f205d8414e482d5287eea96ccc3f45a38264d7177a1bb45d2bed838d40b9f97a4c7ecb90bcfb828f4e1e274ce906c67a0881efe85cdae1d60afb06be55158dc2930959eda52685dee", 0x69}, {&(0x7f0000000340)="b3645fdce507f819268208deaa72d75a235f782ca92dc93411cea6c2072d51aac7aab5c030b72ff192934bc3e9b1be37805ed08d1cf921caff85540cb1d8274ee1df9f2b4e605bd0afd611afbe56db9e5fb869a8af977976ff0c74d2fcd3d5d9eed6ad16fba170792ba454b98684ded48fa2be272351fff0af00d2dd32302d", 0x7f}, {&(0x7f00000003c0)="4e59f8ec06c9ac691f20caf02fba887b935e50129f124feeed58ce6e093427ad78245bf271b5bf802986c5df12286798433531046b0b95240702d3c54cef2af22b32b4820a81", 0x46}, {&(0x7f0000000440)="a0c41f1ad80691623bcfa3bc0b89db6094da40deb0d8eded977a35cb11ab21ae07d5e5cc23410b3de2cf53847d499e1e49f80dfb17cb8c016fb7e182160aec32d0b8", 0x42}, {&(0x7f00000004c0)="772de97f480c282e48de6156fc025423cd5ff8b4db7df29841a57cb6a606cd29da157192ce717066c24b42f9c4a4c0bedb029ed68d236399e873ce1cdf035c5a3fb8d2e4388e4f8b978066b3616b86fc92eea0dc383ad70cc7735a7aac3f26c973559c4541449edb596d4e9e263dff06996e1ee2c756d814fbebc7fbddabc6951d2e37ecd82d9997f63b7946dc3633a3dccf47b0d877805febf586fd1e8cfc6b2aed1030f0da5db2eb31b6df21a1149a19a079f36b391f9a43ff2089d364c6bdae0f9a9fb04de067ed2121c305f5d90532b46ced8edf397604fe", 0xda}], 0x7, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}], 0x48}}], 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000740)={0x20, 0x28, '\x00', 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(r0, 0x0, &(0x7f0000001780)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x3, 0x3, &(0x7f0000000780)="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", 0x5, 0x0, 0x0, {0x3}}, 0x4) setxattr$security_selinux(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), &(0x7f0000001840)='system_u:object_r:setfiles_exec_t:s0\x00', 0x25, 0x2) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x12, r1, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000019c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r1, &(0x7f0000001880), &(0x7f0000001980)='./file0\x00', 0x40, 0x100, 0x1, {0x0, r4}}, 0x3) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001a00), 0x8000, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000001a40)=0x4) syz_io_uring_setup(0x2d34, &(0x7f0000001a80)={0x0, 0x4416, 0x20, 0x2, 0x1c9, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000001b00), &(0x7f0000001b40)=0x0) r7 = accept4$inet(r1, &(0x7f0000001b80)={0x2, 0x0, @multicast1}, &(0x7f0000001bc0)=0x10, 0x80800) syz_io_uring_submit(r0, r6, &(0x7f0000002140)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000002100)={&(0x7f0000001c00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001c80)="3e0210907fa9806457ee9ccc73bdd0f47cb06bebf7cd74e4a99010edeaa29d0f923f005d13e8ba8c6c442e3a62725fd5adbe380051a8d660a877223f6d8d73899c8ecdd1cf6219a46af168cd18b6dc7f9639f1224d9792354fc91ed91e8e2cc754129657ee3abd2c33931da2ee4983efb7211dbbde4a5ac8ca56b3ba7e436a17ac2703cd732f29469db4104cdf2ddaa0512db5bc257295c0e82d98fa1659ed", 0x9f}, {&(0x7f0000001d40)="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", 0xfa}, {&(0x7f0000001e40)="0646a1a5185949748ebf72d414a030347ea338d3429a98671aa9f6068f3e20a59ed86b8055813d04f5028b58bc7fff76c7791174a75daa5aaf85ba0843b322dc6ceb8d02ae304017c7a142afc0f2da32f10b8694b619a55ae7c6630f6566a5f51482ba6bc9c0b95fe85092913d43994902729449bcbcb83fe34e4dc4043c8f371246242018a0afe803caa8d07ad96c5b50627120e4dad9cee95fe9a15f76cbb1994a512d4485635a6b950288a41bdc189c15531e740b051e05cb8b577145d1730fc34c0e72f12112ec2b67234ad7cce958ed15fda5b07613008d6847380169", 0xdf}], 0x3, &(0x7f0000001f80)=[{0x90, 0xff, 0x4, "936df4f12fb09d5e40ca0fbe6dcd9f8f9aed9b023cc238445829781dd59be9dbd2997594754038c3f3b0ec7fc357dd4cf2a2ccf78991398fc17d58c59aaec799f4d9c1105cc0f6275e9fdc05cf4bb546d600e91722ee7cdee7d786f0f7639606e8718dc22e9aa14a2820c60100f5393dc619e0c481eb31c359f07a4a1a"}, {0x28, 0x119, 0x10000, "6423656ad5ef727d6e59138d797122af12b57d82"}, {0xb8, 0x10, 0x3, "e3cd5444595ecbdefae516e7da509ed55beddb69c9490a35a310a8ce04d6434787b9cf06f25aac76f56d03cdc3b957c9247bdb530b41c6f15098445c7d6adffbade5fd7f4892a21093775aa283f679c63b7fda7d468497862f9d0558624249860ebdd0942508c2db9b87621c3ba5fec39bdab86c6ebe5c3ebbb680e506beb5e82d7204d8c775b13e87ed1bc62207e9d71da63c1869191071dbb8696e27efc30bdde0c12e105bb374"}], 0x170}, 0x0, 0x20000}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002500)=@IORING_OP_WRITEV={0x2, 0x4, 0x4004, @fd_index=0x3, 0x80000000, &(0x7f0000002480)=[{&(0x7f0000002180)="0ebe5e8cf00fda688764be93d919f7139f3b5c1f0b3e2ac085029ca517e87f17e243540d1670b1e50c656da9a47d5fd6eca3e30582b45c357c52dfd8b0ddde5048", 0x41}, {&(0x7f0000002200)="d75de28bbbbdaede899662ec703ea4d72fbafb6d225aaaca4ef24bfd3ee2cd1f8bc929720619abe14f50bddba5b0ce9f538492cc3c3508764064df3e81f02294ec8af481081acd72805a742f22028b641219efe36f7ad20023af12030952dde1bbdbcf6cb67d19cc5be1ee121491c6d44293336a8ff159ac9ebfbbf0aaedd6f0a04a80f1b6b6f243bbaa794ea34a5bde00a6962eef5739641e3c04acdb94070f097dd6f1064a65c8994309afd1603125f3efdba4a0a8f43a1f2959a727e30e3b0928e88ba9d74fb74bdc84acc23fd216c781243e8bedcf94834c96666cb3c9d6902d", 0xe2}, {&(0x7f0000002300)="0385b59fa764a537485a04e2bfd68c63500e5077f8c2b935b782ddea989b36851a273ac68b46a79a532dc1f2802be762ff043598589d54471db499453387bf277924ce452945563f05d31db8cf26a6dce51458c64cd0056e48c16116ae2716c2b5fc44f51ae226c219765132f2e356c351a1db3051", 0x75}, {&(0x7f0000002380)}, {&(0x7f00000023c0)="eb74352a886e3d6ddadb1b81c2659199983bc1d62b6c65463e5fb9b688c5d04dc25d59567278", 0x26}, {&(0x7f0000002400)="dbd72509bb5eb2a90ab8a7e079c2d0247dd88aaa57bf158d1806529322da58dc34ab544dfa169e874cbb363436bc6ae512e207ff666a0165ad934d39f46967046c064ff5864ac8f97d86d9e33ecb5f3cc0be", 0x52}], 0x6, 0x18, 0x1, {0x1}}, 0x1f) 15:02:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x0, 0x0) 15:02:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0xf}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) 15:02:33 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:33 executing program 2: semget$private(0x0, 0x2, 0x207) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x80) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:02:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x80, 0x40, 0x3, 0xfa, 0x0, 0x9, 0x200, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffe00, 0x1, @perf_config_ext={0x2c, 0x7}, 0x2, 0xb76, 0x3f, 0x1, 0x4, 0x1, 0x8, 0x0, 0x7c45}, 0xffffffffffffffff, 0x1, r0, 0x1) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c17"]) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80, 0x117) 15:02:46 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:02:46 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x0, 0x0) 15:02:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000780)=ANY=[@ANYBLOB='fscontext?']) r0 = fspick(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x201049, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0), 0x8a0030, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@version_L}, {@mmap}, {@access_any}], [{@subj_role={'subj_role', 0x3d, 'utf8=1'}}, {@uid_eq={'uid', 0x3d, r1}}]}}) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file0\x00', 0xffff, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000200)="3b83e0442f8edbe8c1298ca2ed101bba15952ef4b1ca1ab08bfbe87070df8b5efd346cb419f7e1774668f7416630c23f77990d5743170a519bcd1e133b0bf5505b44e176c2b9147f0cf27a25dd03", 0x4e, 0x5}, {&(0x7f0000000280)="3ef0826e06bde2ff5e6973bbb78e470131f7f658ee4c7728b94c4d72337568cdf0e4b943f7cd", 0x26, 0x1000000000000000}], 0x80890, &(0x7f0000000300)={[{@nonumtail}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@umask={'umask', 0x3d, 0x80}}], [{@uid_lt={'uid<', r1}}]}) 15:02:46 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93ce, 0x6}) 15:02:46 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x60}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x1c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:46 executing program 2: semget$private(0x0, 0x2, 0x207) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x80) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:02:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) 15:02:46 executing program 2: semget$private(0x0, 0x2, 0x207) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:02:46 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x0, 0x0) 15:02:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 15:02:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) 15:02:46 executing program 2: semget$private(0x0, 0x2, 0x207) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:02:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x60}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:46 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0xff}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:59 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:02:59 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:02:59 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2441, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x20}, {0xffffffffffffffff, 0x1000}], 0x2, &(0x7f0000000100)={r1, r2+60000000}, &(0x7f0000000140)={[0x4]}, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r4 = fork() r5 = getpgid(r4) ptrace(0x8, r3) ptrace(0x10, r4) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r6, 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x880, 0x124) ptrace$cont(0x9, r5, 0x800, 0x401) ptrace$setsig(0x4203, r4, 0x7ad, &(0x7f00000002c0)={0x1000019, 0x93df, 0x7}) 15:02:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140), 0x0, 0x80000, 0x1}, 0x1ff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x3, 0x40fffe, 0x101) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 15:02:59 executing program 2: semget$private(0x0, 0x2, 0x207) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:03:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:03:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0xff}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 15:03:00 executing program 2: semget$private(0x0, 0x2, 0x207) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:03:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:03:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:03:00 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000180), 0x4) mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x20000000}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"519e01ff6cce5c16a25d52401e8cd890", 0x0, 0x0, {0x1000, 0xfffff000}, {0x8}, 0x8, [0x9, 0x100000000, 0x5, 0x7, 0x5, 0x8, 0x0, 0x10001, 0x1, 0x8, 0x4, 0xdd4e, 0x6, 0x0, 0x0, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000100)=r4) 15:03:00 executing program 2: semget$private(0x0, 0x2, 0x207) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:03:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:13 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:03:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000180), 0x4) mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x20000000}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"519e01ff6cce5c16a25d52401e8cd890", 0x0, 0x0, {0x1000, 0xfffff000}, {0x8}, 0x8, [0x9, 0x100000000, 0x5, 0x7, 0x5, 0x8, 0x0, 0x10001, 0x1, 0x8, 0x4, 0xdd4e, 0x6, 0x0, 0x0, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000100)=r4) 15:03:13 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 15:03:13 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:13 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) 15:03:13 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = epoll_create(0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3], 0x38}}, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="487fec864b24"]}]}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x88, r6, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x393}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x90}, 0x40090) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1a4, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffbdc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x332370ce}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x60000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8a}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1c000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x937ba1e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xdd7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x51b6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1a4}}, 0x40001) r7 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r7, &(0x7f00000000c0)={0x20000000}) pread64(r7, &(0x7f0000000240)=""/95, 0x5f, 0x5) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="200026bd7000fedbdf25180000008800028044000380080001000800000008008600cb0a00000800020003000000080001003f00000008000100e2ffffff080002000000000008000100ffffffff080002000300000004000400080002000800000004000400080002000500000000010380080002000200ff0f00000c0002001908000200070000000c00028008000100090000003000078008000200ff0000c30900000000000000000000000c0440988630cf827400010100000000010000000c000400ed00"/210], 0xd8}, 0x1, 0x0, 0x0, 0xe82868f92c9e0abd}, 0x880) r8 = fork() ptrace(0x10, r8) ptrace$setsig(0x4203, r8, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:03:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:03:13 executing program 7: syz_io_uring_submit(0x0, 0x0, 0x0, 0x800000) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa001, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={[{@clone_children}, {@cpuset_v2_mode}], [{@euid_lt={'euid<', 0xee01}}, {@fowner_lt={'fowner<', 0xee01}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x48) openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB]}, @devid}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x2) sendfile(r1, r2, 0x0, 0x20d315) 15:03:13 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) 15:03:13 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:03:13 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) 15:03:13 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1078.863045] cgroup: Unknown subsys name 'euid<00000000000000060929' [ 1079.012646] cgroup: Unknown subsys name 'euid<00000000000000060929' 15:03:26 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:03:26 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:03:26 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x893e1, 0x6}) 15:03:26 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) 15:03:26 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:03:26 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) 15:03:26 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:26 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:26 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:03:26 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 15:03:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 15:03:26 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:26 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:03:26 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 15:03:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:39 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x3a, 0x893de, 0x6}) 15:03:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 15:03:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x60}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 15:03:39 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x60}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:39 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:03:39 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) 15:03:39 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:03:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xff}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:39 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xff}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) 15:03:52 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x802, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 15:03:52 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:03:52 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:03:52 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace$setsig(0x4203, r0, 0x8000000000000004, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:03:52 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 1) 15:03:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) [ 1117.974367] FAULT_INJECTION: forcing a failure. [ 1117.974367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.975896] CPU: 1 PID: 12881 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1117.976784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1117.977793] Call Trace: [ 1117.978120] dump_stack+0x107/0x167 [ 1117.978593] should_fail.cold+0x5/0xa [ 1117.979083] _copy_from_user+0x2e/0x1b0 [ 1117.979603] __copy_msghdr_from_user+0x91/0x4b0 [ 1117.980190] ? __ia32_sys_shutdown+0x80/0x80 [ 1117.980733] ? __lock_acquire+0xbb1/0x5b00 [ 1117.981254] sendmsg_copy_msghdr+0xa1/0x160 [ 1117.981779] ? do_recvmmsg+0x6d0/0x6d0 [ 1117.982255] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1117.982939] ? mark_lock+0xf5/0x2df0 [ 1117.983399] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1117.984041] ? __lock_acquire+0x1657/0x5b00 [ 1118.000603] ___sys_sendmsg+0xc6/0x170 [ 1118.001087] ? sendmsg_copy_msghdr+0x160/0x160 [ 1118.001671] ? __fget_files+0x2cf/0x520 [ 1118.002153] ? lock_downgrade+0x6d0/0x6d0 [ 1118.002657] ? lock_downgrade+0x6d0/0x6d0 [ 1118.003162] ? __fget_files+0x2f8/0x520 [ 1118.003648] ? __fget_light+0xea/0x290 [ 1118.004136] __sys_sendmmsg+0x195/0x470 [ 1118.004659] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1118.005198] ? lock_downgrade+0x6d0/0x6d0 [ 1118.005739] ? ksys_write+0x12d/0x260 [ 1118.006206] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1118.006793] ? wait_for_completion_io+0x270/0x270 [ 1118.007378] ? rcu_read_lock_any_held+0x75/0xa0 [ 1118.007940] ? vfs_write+0x354/0xb10 [ 1118.008420] ? fput_many+0x2f/0x1a0 [ 1118.008874] ? ksys_write+0x1a9/0x260 [ 1118.009339] ? __ia32_sys_read+0xb0/0xb0 [ 1118.009865] __x64_sys_sendmmsg+0x99/0x100 [ 1118.010378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1118.011001] do_syscall_64+0x33/0x40 [ 1118.011454] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1118.012085] RIP: 0033:0x7fd3a7c24b19 [ 1118.012551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.014855] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1118.015780] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1118.032683] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1118.033551] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.034414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.035283] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:03:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 15:03:52 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:03:52 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x802, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x803, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:52 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:03:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) 15:03:52 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x803, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 15:03:52 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:03:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x804, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:03:52 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:04:05 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setsig(0x4203, r1, 0x8, &(0x7f00000000c0)={0x2d, 0x8, 0x7}) 15:04:05 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:04:05 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 2) 15:04:05 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 15:04:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:05 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 15:04:05 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x804, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) (fail_nth: 1) 15:04:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x80f, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1131.158239] FAULT_INJECTION: forcing a failure. [ 1131.158239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.159883] CPU: 0 PID: 13025 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1131.160817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1131.161910] Call Trace: [ 1131.162265] dump_stack+0x107/0x167 [ 1131.162750] should_fail.cold+0x5/0xa [ 1131.163258] _copy_from_user+0x2e/0x1b0 [ 1131.163785] iovec_from_user+0x141/0x400 [ 1131.164321] __import_iovec+0x67/0x590 [ 1131.164871] ? __ia32_sys_shutdown+0x80/0x80 [ 1131.165463] import_iovec+0x83/0xb0 [ 1131.165955] sendmsg_copy_msghdr+0x131/0x160 [ 1131.166536] ? do_recvmmsg+0x6d0/0x6d0 [ 1131.167063] ? mark_lock+0xf5/0x2df0 [ 1131.167558] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1131.168254] ? __lock_acquire+0x1657/0x5b00 [ 1131.168837] ___sys_sendmsg+0xc6/0x170 [ 1131.169312] ? sendmsg_copy_msghdr+0x160/0x160 [ 1131.169870] ? __fget_files+0x2cf/0x520 [ 1131.170351] ? lock_downgrade+0x6d0/0x6d0 [ 1131.170862] ? lock_downgrade+0x6d0/0x6d0 [ 1131.171368] ? __fget_files+0x2f8/0x520 [ 1131.171862] ? __fget_light+0xea/0x290 [ 1131.172338] __sys_sendmmsg+0x195/0x470 [ 1131.172898] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1131.173465] ? lock_downgrade+0x6d0/0x6d0 [ 1131.174018] ? ksys_write+0x12d/0x260 [ 1131.174527] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1131.175160] ? wait_for_completion_io+0x270/0x270 [ 1131.175796] ? rcu_read_lock_any_held+0x75/0xa0 [ 1131.176412] ? vfs_write+0x354/0xb10 [ 1131.176930] ? fput_many+0x2f/0x1a0 [ 1131.177419] ? ksys_write+0x1a9/0x260 [ 1131.177921] ? __ia32_sys_read+0xb0/0xb0 [ 1131.178457] __x64_sys_sendmmsg+0x99/0x100 [ 1131.179005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1131.179682] do_syscall_64+0x33/0x40 [ 1131.180176] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1131.180876] RIP: 0033:0x7fd3a7c24b19 [ 1131.181357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1131.183755] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1131.184771] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1131.185707] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1131.186638] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1131.187572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.188515] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1131.196239] FAULT_INJECTION: forcing a failure. [ 1131.196239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.197937] CPU: 0 PID: 13090 Comm: syz-executor.2 Not tainted 5.10.230 #1 [ 1131.198831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1131.199899] Call Trace: [ 1131.200243] dump_stack+0x107/0x167 [ 1131.200746] should_fail.cold+0x5/0xa [ 1131.201252] _copy_to_user+0x2e/0x180 [ 1131.201762] simple_read_from_buffer+0xcc/0x160 [ 1131.202375] proc_fail_nth_read+0x198/0x230 [ 1131.202924] ? proc_sessionid_read+0x230/0x230 [ 1131.203523] ? security_file_permission+0xb1/0xe0 15:04:05 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) [ 1131.204154] ? proc_sessionid_read+0x230/0x230 [ 1131.212868] vfs_read+0x228/0x620 [ 1131.213354] ksys_read+0x12d/0x260 [ 1131.213835] ? vfs_write+0xb10/0xb10 [ 1131.214330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1131.215016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1131.215694] do_syscall_64+0x33/0x40 [ 1131.216192] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1131.216901] RIP: 0033:0x7f143516c69c [ 1131.217398] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1131.219784] RSP: 002b:00007f143272f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1131.220809] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f143516c69c [ 1131.221742] RDX: 000000000000000f RSI: 00007f143272f1e0 RDI: 0000000000000004 [ 1131.222669] RBP: 00007f143272f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1131.223610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.224559] R13: 00007fff4b68a83f R14: 00007f143272f300 R15: 0000000000022000 15:04:05 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:05 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x80, 0x7, 0x5b, 0x0, 0x101, 0x3400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1fc00000, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x18208, 0x3f, 0xfff, 0x4, 0x9, 0x3, 0x1ff, 0x0, 0x8}, r0, 0x8, r1, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000140)) r3 = fork() ptrace(0x10, r3) 15:04:05 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 15:04:05 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x80f, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x81c, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:18 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 3) 15:04:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x830, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:18 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x81c, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:18 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 1) 15:04:18 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 15:04:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:04:18 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:04:18 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$cont(0x18, r0, 0xfffffffffffffffa, 0x4) r1 = fcntl$getown(0xffffffffffffffff, 0x9) waitid(0x2, r1, &(0x7f0000000000), 0x1, &(0x7f00000000c0)) fork() ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) [ 1144.055405] FAULT_INJECTION: forcing a failure. [ 1144.055405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.056846] CPU: 0 PID: 13286 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1144.058951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1144.060038] Call Trace: [ 1144.060393] dump_stack+0x107/0x167 [ 1144.060868] should_fail.cold+0x5/0xa [ 1144.061389] _copy_from_user+0x2e/0x1b0 [ 1144.061918] __copy_msghdr_from_user+0x91/0x4b0 [ 1144.062532] ? __ia32_sys_shutdown+0x80/0x80 [ 1144.063115] ? __lock_acquire+0xbb1/0x5b00 [ 1144.063683] sendmsg_copy_msghdr+0xa1/0x160 [ 1144.064249] ? do_recvmmsg+0x6d0/0x6d0 [ 1144.064764] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1144.066220] ? mark_lock+0xf5/0x2df0 [ 1144.067332] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1144.068856] ? __lock_acquire+0x1657/0x5b00 [ 1144.070121] ___sys_sendmsg+0xc6/0x170 [ 1144.071255] ? sendmsg_copy_msghdr+0x160/0x160 [ 1144.072580] ? __fget_files+0x2cf/0x520 [ 1144.073742] ? lock_downgrade+0x6d0/0x6d0 [ 1144.074943] ? lock_downgrade+0x6d0/0x6d0 [ 1144.076144] ? __fget_files+0x2f8/0x520 [ 1144.077312] ? __fget_light+0xea/0x290 [ 1144.078448] __sys_sendmmsg+0x195/0x470 [ 1144.079601] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1144.080844] ? lock_downgrade+0x6d0/0x6d0 [ 1144.082063] ? ksys_write+0x12d/0x260 [ 1144.083182] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1144.084585] ? wait_for_completion_io+0x270/0x270 [ 1144.085991] ? rcu_read_lock_any_held+0x75/0xa0 [ 1144.087337] ? vfs_write+0x354/0xb10 [ 1144.088415] ? fput_many+0x2f/0x1a0 [ 1144.089474] ? ksys_write+0x1a9/0x260 [ 1144.090577] ? __ia32_sys_read+0xb0/0xb0 [ 1144.091753] __x64_sys_sendmmsg+0x99/0x100 [ 1144.092983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1144.094487] do_syscall_64+0x33/0x40 [ 1144.095560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1144.097055] RIP: 0033:0x7f87fda10b19 [ 1144.098135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1144.103765] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1144.106252] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1144.108591] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1144.110943] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1144.113286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.115625] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:04:18 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 15:04:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x2, &(0x7f0000000040)=0x4) 15:04:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x860, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1144.236783] FAULT_INJECTION: forcing a failure. [ 1144.236783] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.241345] CPU: 0 PID: 13289 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1144.241370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1144.241375] Call Trace: [ 1144.241395] dump_stack+0x107/0x167 [ 1144.241411] should_fail.cold+0x5/0xa [ 1144.241428] ? __alloc_skb+0x6d/0x5b0 [ 1144.241446] should_failslab+0x5/0x20 [ 1144.241461] kmem_cache_alloc_node+0x55/0x330 [ 1144.241480] __alloc_skb+0x6d/0x5b0 [ 1144.241499] alloc_skb_with_frags+0x92/0x570 [ 1144.255595] ? mark_lock+0xf5/0x2df0 [ 1144.255615] sock_alloc_send_pskb+0x7af/0x930 [ 1144.257308] ? sk_alloc+0x350/0x350 [ 1144.257786] ? __lock_acquire+0xbb1/0x5b00 [ 1144.258341] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1144.259032] ? __lock_acquire+0x1657/0x5b00 [ 1144.259610] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1144.260277] ? ip6_mtu+0x1bb/0x3d0 [ 1144.260749] ? lock_downgrade+0x6d0/0x6d0 [ 1144.261879] ? ip_frag_init+0x350/0x350 [ 1144.263315] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1144.264979] ? ip6_mtu+0x1e9/0x3d0 [ 1144.266282] ? ip6_setup_cork+0xfb7/0x1740 [ 1144.267876] ip6_append_data+0x1e7/0x330 [ 1144.269413] ? ip_frag_init+0x350/0x350 [ 1144.270922] ? ip_frag_init+0x350/0x350 [ 1144.272442] udpv6_sendmsg+0x1a27/0x2ad0 [ 1144.274033] ? ip_frag_init+0x350/0x350 [ 1144.275555] ? udp_v6_push_pending_frames+0x360/0x360 [ 1144.277544] ? lock_acquire+0x197/0x470 [ 1144.279064] ? find_held_lock+0x2c/0x110 [ 1144.280631] ? __might_fault+0xd3/0x180 [ 1144.282159] ? sock_has_perm+0x1ea/0x280 [ 1144.283778] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1144.285785] ? _copy_from_user+0xfb/0x1b0 [ 1144.287476] ? __import_iovec+0x458/0x590 [ 1144.289196] ? udp_v6_push_pending_frames+0x360/0x360 [ 1144.291208] inet6_sendmsg+0x105/0x140 [ 1144.292731] ? inet6_compat_ioctl+0x320/0x320 [ 1144.294487] __sock_sendmsg+0xf2/0x190 [ 1144.296019] ____sys_sendmsg+0x334/0x870 [ 1144.297641] ? sock_write_iter+0x3d0/0x3d0 [ 1144.299329] ? do_recvmmsg+0x6d0/0x6d0 [ 1144.300883] ? mark_lock+0xf5/0x2df0 [ 1144.302384] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1144.304479] ? __lock_acquire+0x1657/0x5b00 [ 1144.306188] ___sys_sendmsg+0xf3/0x170 [ 1144.307795] ? sendmsg_copy_msghdr+0x160/0x160 [ 1144.309635] ? __fget_files+0x2cf/0x520 [ 1144.311270] ? lock_downgrade+0x6d0/0x6d0 [ 1144.312943] ? lock_downgrade+0x6d0/0x6d0 [ 1144.313963] ? __fget_files+0x2f8/0x520 [ 1144.314519] ? __fget_light+0xea/0x290 [ 1144.315048] __sys_sendmmsg+0x195/0x470 [ 1144.315606] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1144.316186] ? lock_downgrade+0x6d0/0x6d0 [ 1144.316787] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1144.318441] ? wait_for_completion_io+0x270/0x270 [ 1144.320441] ? rcu_read_lock_any_held+0x75/0xa0 [ 1144.322366] ? vfs_write+0x354/0xb10 [ 1144.323875] ? fput_many+0x2f/0x1a0 [ 1144.325412] ? ksys_write+0x1a9/0x260 [ 1144.326962] ? __ia32_sys_read+0xb0/0xb0 [ 1144.328578] __x64_sys_sendmmsg+0x99/0x100 [ 1144.330293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1144.332391] do_syscall_64+0x33/0x40 [ 1144.333911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1144.336000] RIP: 0033:0x7fd3a7c24b19 [ 1144.337502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1144.344959] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1144.348024] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1144.350896] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1144.353773] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1144.356621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.359615] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:04:31 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x830, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:31 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 4) 15:04:31 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 2) 15:04:31 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:04:31 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 15:04:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) r2 = dup3(r0, r0, 0x0) r3 = epoll_create(0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x20000000}) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0x6, 0x101, 0x80000001, 0x8001, 0x89aa}) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000000)=0x4) 15:04:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x4b47, &(0x7f0000000040)=0x4) 15:04:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x4305, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1157.169455] FAULT_INJECTION: forcing a failure. [ 1157.169455] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.178901] CPU: 1 PID: 13487 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1157.179800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.180877] Call Trace: [ 1157.181231] dump_stack+0x107/0x167 [ 1157.181726] should_fail.cold+0x5/0xa [ 1157.182228] ? create_object.isra.0+0x3a/0xa20 [ 1157.182827] should_failslab+0x5/0x20 [ 1157.183331] kmem_cache_alloc+0x5b/0x310 [ 1157.183870] create_object.isra.0+0x3a/0xa20 [ 1157.184444] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1157.185116] kmem_cache_alloc_node+0x169/0x330 [ 1157.185742] __alloc_skb+0x6d/0x5b0 [ 1157.186227] alloc_skb_with_frags+0x92/0x570 [ 1157.186809] ? mark_lock+0xf5/0x2df0 [ 1157.187305] sock_alloc_send_pskb+0x7af/0x930 [ 1157.187906] ? sk_alloc+0x350/0x350 [ 1157.188387] ? __lock_acquire+0xbb1/0x5b00 [ 1157.188938] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1157.189650] ? __lock_acquire+0x1657/0x5b00 [ 1157.190220] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1157.190889] ? ip6_mtu+0x1bb/0x3d0 [ 1157.191359] ? lock_downgrade+0x6d0/0x6d0 [ 1157.191894] ? ip_frag_init+0x350/0x350 [ 1157.192424] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1157.193038] ? ip6_mtu+0x1e9/0x3d0 [ 1157.193522] ? ip6_setup_cork+0xfb7/0x1740 [ 1157.194077] ip6_append_data+0x1e7/0x330 [ 1157.194581] ? ip_frag_init+0x350/0x350 [ 1157.195113] ? ip_frag_init+0x350/0x350 [ 1157.195600] udpv6_sendmsg+0x1a27/0x2ad0 [ 1157.196094] ? ip_frag_init+0x350/0x350 [ 1157.196583] ? udp_v6_push_pending_frames+0x360/0x360 [ 1157.197217] ? lock_acquire+0x197/0x470 [ 1157.197716] ? find_held_lock+0x2c/0x110 [ 1157.198211] ? __might_fault+0xd3/0x180 [ 1157.198701] ? sock_has_perm+0x1ea/0x280 [ 1157.199193] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1157.199825] ? _copy_from_user+0xfb/0x1b0 [ 1157.200335] ? __import_iovec+0x458/0x590 [ 1157.200838] ? udp_v6_push_pending_frames+0x360/0x360 [ 1157.201500] inet6_sendmsg+0x105/0x140 [ 1157.201974] ? inet6_compat_ioctl+0x320/0x320 [ 1157.202523] __sock_sendmsg+0xf2/0x190 [ 1157.202995] ____sys_sendmsg+0x334/0x870 [ 1157.203487] ? sock_write_iter+0x3d0/0x3d0 [ 1157.203997] ? do_recvmmsg+0x6d0/0x6d0 [ 1157.204471] ? mark_lock+0xf5/0x2df0 15:04:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x4b49, &(0x7f0000000040)=0x4) [ 1157.204925] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1157.211016] FAULT_INJECTION: forcing a failure. [ 1157.211016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.213574] ? __lock_acquire+0x1657/0x5b00 [ 1157.213592] ___sys_sendmsg+0xf3/0x170 [ 1157.213610] ? sendmsg_copy_msghdr+0x160/0x160 [ 1157.216497] ? __fget_files+0x2cf/0x520 [ 1157.216984] ? lock_downgrade+0x6d0/0x6d0 [ 1157.217509] ? lock_downgrade+0x6d0/0x6d0 [ 1157.218020] ? __fget_files+0x2f8/0x520 [ 1157.218515] ? __fget_light+0xea/0x290 [ 1157.218994] __sys_sendmmsg+0x195/0x470 [ 1157.219484] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1157.220008] ? lock_downgrade+0x6d0/0x6d0 [ 1157.220536] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1157.221126] ? wait_for_completion_io+0x270/0x270 [ 1157.221745] ? rcu_read_lock_any_held+0x75/0xa0 [ 1157.222311] ? vfs_write+0x354/0xb10 [ 1157.222766] ? fput_many+0x2f/0x1a0 [ 1157.223211] ? ksys_write+0x1a9/0x260 [ 1157.223677] ? __ia32_sys_read+0xb0/0xb0 [ 1157.224178] __x64_sys_sendmmsg+0x99/0x100 [ 1157.224694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1157.225322] do_syscall_64+0x33/0x40 [ 1157.225790] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1157.226416] RIP: 0033:0x7fd3a7c24b19 [ 1157.226869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.229100] RSP: 002b:00007fd3a5179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1157.230043] RAX: ffffffffffffffda RBX: 00007fd3a7d38020 RCX: 00007fd3a7c24b19 [ 1157.230910] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1157.231780] RBP: 00007fd3a51791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.232650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.233533] R13: 00007ffe7824451f R14: 00007fd3a5179300 R15: 0000000000022000 [ 1157.234424] CPU: 0 PID: 13415 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1157.235316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.236381] Call Trace: [ 1157.236726] dump_stack+0x107/0x167 [ 1157.237200] should_fail.cold+0x5/0xa [ 1157.237719] _copy_from_user+0x2e/0x1b0 [ 1157.238239] iovec_from_user+0x141/0x400 [ 1157.238764] __import_iovec+0x67/0x590 [ 1157.239238] ? __ia32_sys_shutdown+0x80/0x80 [ 1157.239826] import_iovec+0x83/0xb0 [ 1157.240309] sendmsg_copy_msghdr+0x131/0x160 [ 1157.240889] ? do_recvmmsg+0x6d0/0x6d0 [ 1157.241409] ? mark_lock+0xf5/0x2df0 [ 1157.241912] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1157.242598] ? __lock_acquire+0x1657/0x5b00 [ 1157.243166] ___sys_sendmsg+0xc6/0x170 [ 1157.243681] ? sendmsg_copy_msghdr+0x160/0x160 [ 1157.244276] ? __fget_files+0x2cf/0x520 [ 1157.244796] ? lock_downgrade+0x6d0/0x6d0 [ 1157.245341] ? lock_downgrade+0x6d0/0x6d0 [ 1157.245906] ? __fget_files+0x2f8/0x520 [ 1157.246429] ? __fget_light+0xea/0x290 [ 1157.246945] __sys_sendmmsg+0x195/0x470 [ 1157.247468] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1157.248032] ? lock_downgrade+0x6d0/0x6d0 [ 1157.248586] ? ksys_write+0x12d/0x260 [ 1157.249090] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1157.249758] ? wait_for_completion_io+0x270/0x270 [ 1157.250382] ? rcu_read_lock_any_held+0x75/0xa0 [ 1157.250992] ? vfs_write+0x354/0xb10 [ 1157.251481] ? fput_many+0x2f/0x1a0 [ 1157.251961] ? ksys_write+0x1a9/0x260 [ 1157.252462] ? __ia32_sys_read+0xb0/0xb0 [ 1157.252998] __x64_sys_sendmmsg+0x99/0x100 [ 1157.253570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1157.254240] do_syscall_64+0x33/0x40 [ 1157.254727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1157.255392] RIP: 0033:0x7f87fda10b19 [ 1157.255880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.258254] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1157.259238] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1157.260166] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1157.261097] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.261105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.261113] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:04:31 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x860, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:31 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 15:04:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:44 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x4305, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:44 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 5) 15:04:44 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:04:44 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x8, r0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r1 = epoll_create(0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20000000}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000165764231e706ba", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 15:04:44 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) [ 1170.061174] FAULT_INJECTION: forcing a failure. 15:04:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 3) 15:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5404, &(0x7f0000000040)=0x4) [ 1170.061174] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.062811] CPU: 0 PID: 13556 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1170.063651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1170.064661] Call Trace: [ 1170.064990] dump_stack+0x107/0x167 [ 1170.065436] should_fail.cold+0x5/0xa [ 1170.065937] ? __alloc_skb+0x6d/0x5b0 [ 1170.066407] should_failslab+0x5/0x20 [ 1170.066876] kmem_cache_alloc_node+0x55/0x330 [ 1170.067428] __alloc_skb+0x6d/0x5b0 [ 1170.067879] alloc_skb_with_frags+0x92/0x570 [ 1170.068420] ? mark_lock+0xf5/0x2df0 [ 1170.068880] sock_alloc_send_pskb+0x7af/0x930 [ 1170.069435] ? sk_alloc+0x350/0x350 [ 1170.069893] ? __lock_acquire+0xbb1/0x5b00 [ 1170.070416] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1170.071059] ? __lock_acquire+0x1657/0x5b00 [ 1170.071592] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1170.072211] ? ip6_mtu+0x1bb/0x3d0 [ 1170.072646] ? lock_downgrade+0x6d0/0x6d0 [ 1170.073151] ? ip_frag_init+0x350/0x350 [ 1170.073645] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1170.074257] ? ip6_mtu+0x1e9/0x3d0 [ 1170.074728] ? ip6_setup_cork+0xfb7/0x1740 [ 1170.075280] ip6_append_data+0x1e7/0x330 [ 1170.075810] ? ip_frag_init+0x350/0x350 [ 1170.076330] ? ip_frag_init+0x350/0x350 [ 1170.076854] udpv6_sendmsg+0x1a27/0x2ad0 [ 1170.077386] ? ip_frag_init+0x350/0x350 [ 1170.078092] ? udp_v6_push_pending_frames+0x360/0x360 [ 1170.079477] ? lock_acquire+0x197/0x470 [ 1170.080549] ? find_held_lock+0x2c/0x110 [ 1170.081637] ? __might_fault+0xd3/0x180 [ 1170.082888] ? sock_has_perm+0x1ea/0x280 [ 1170.083989] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1170.084228] FAULT_INJECTION: forcing a failure. [ 1170.084228] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.085272] ? _copy_from_user+0xfb/0x1b0 [ 1170.085297] ? __import_iovec+0x458/0x590 [ 1170.085314] ? udp_v6_push_pending_frames+0x360/0x360 [ 1170.088370] inet6_sendmsg+0x105/0x140 [ 1170.088847] ? inet6_compat_ioctl+0x320/0x320 [ 1170.089397] __sock_sendmsg+0xf2/0x190 [ 1170.089948] ____sys_sendmsg+0x334/0x870 [ 1170.090940] ? sock_write_iter+0x3d0/0x3d0 [ 1170.091967] ? do_recvmmsg+0x6d0/0x6d0 [ 1170.092928] ? mark_lock+0xf5/0x2df0 [ 1170.093848] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1170.095539] ? __lock_acquire+0x1657/0x5b00 [ 1170.096676] ___sys_sendmsg+0xf3/0x170 [ 1170.097713] ? sendmsg_copy_msghdr+0x160/0x160 [ 1170.098372] ? __fget_files+0x2cf/0x520 [ 1170.098856] ? lock_downgrade+0x6d0/0x6d0 [ 1170.099360] ? lock_downgrade+0x6d0/0x6d0 [ 1170.099865] ? __fget_files+0x2f8/0x520 [ 1170.100356] ? __fget_light+0xea/0x290 [ 1170.100832] __sys_sendmmsg+0x195/0x470 [ 1170.101318] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1170.101879] ? lock_downgrade+0x6d0/0x6d0 [ 1170.102448] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1170.103049] ? wait_for_completion_io+0x270/0x270 [ 1170.103654] ? rcu_read_lock_any_held+0x75/0xa0 [ 1170.104222] ? vfs_write+0x354/0xb10 [ 1170.104683] ? fput_many+0x2f/0x1a0 [ 1170.105131] ? ksys_write+0x1a9/0x260 [ 1170.105600] ? __ia32_sys_read+0xb0/0xb0 [ 1170.106156] __x64_sys_sendmmsg+0x99/0x100 [ 1170.106676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1170.107312] do_syscall_64+0x33/0x40 [ 1170.107768] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1170.108393] RIP: 0033:0x7f87fda10b19 [ 1170.108852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1170.111141] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1170.112075] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1170.112948] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1170.113819] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.114737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.115609] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1170.116504] CPU: 1 PID: 13544 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1170.117401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1170.118485] Call Trace: [ 1170.118500] dump_stack+0x107/0x167 [ 1170.118514] should_fail.cold+0x5/0xa [ 1170.118531] should_failslab+0x5/0x20 [ 1170.118544] __kmalloc_node_track_caller+0x74/0x3b0 [ 1170.118557] ? alloc_skb_with_frags+0x92/0x570 [ 1170.118574] __alloc_skb+0xb1/0x5b0 [ 1170.118591] alloc_skb_with_frags+0x92/0x570 [ 1170.118607] ? mark_lock+0xf5/0x2df0 [ 1170.118625] sock_alloc_send_pskb+0x7af/0x930 [ 1170.118649] ? sk_alloc+0x350/0x350 [ 1170.118664] ? __lock_acquire+0xbb1/0x5b00 [ 1170.118680] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1170.118698] ? __lock_acquire+0x1657/0x5b00 [ 1170.118714] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1170.118738] ? ip6_mtu+0x1bb/0x3d0 [ 1170.118753] ? lock_downgrade+0x6d0/0x6d0 [ 1170.118764] ? ip_frag_init+0x350/0x350 [ 1170.118787] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1170.118802] ? ip6_mtu+0x1e9/0x3d0 [ 1170.118815] ? ip6_setup_cork+0xfb7/0x1740 [ 1170.118831] ip6_append_data+0x1e7/0x330 [ 1170.118843] ? ip_frag_init+0x350/0x350 [ 1170.118860] ? ip_frag_init+0x350/0x350 [ 1170.118880] udpv6_sendmsg+0x1a27/0x2ad0 [ 1170.118897] ? ip_frag_init+0x350/0x350 [ 1170.118923] ? udp_v6_push_pending_frames+0x360/0x360 [ 1170.118954] ? lock_acquire+0x197/0x470 [ 1170.118967] ? find_held_lock+0x2c/0x110 [ 1170.118986] ? __might_fault+0xd3/0x180 [ 1170.119008] ? sock_has_perm+0x1ea/0x280 [ 1170.119022] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1170.119039] ? _copy_from_user+0xfb/0x1b0 [ 1170.119065] ? __import_iovec+0x458/0x590 [ 1170.119080] ? udp_v6_push_pending_frames+0x360/0x360 [ 1170.119097] inet6_sendmsg+0x105/0x140 [ 1170.119113] ? inet6_compat_ioctl+0x320/0x320 [ 1170.119126] __sock_sendmsg+0xf2/0x190 [ 1170.119141] ____sys_sendmsg+0x334/0x870 [ 1170.119158] ? sock_write_iter+0x3d0/0x3d0 [ 1170.119171] ? do_recvmmsg+0x6d0/0x6d0 [ 1170.119189] ? mark_lock+0xf5/0x2df0 [ 1170.119207] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1170.119220] ? __lock_acquire+0x1657/0x5b00 [ 1170.119238] ___sys_sendmsg+0xf3/0x170 [ 1170.119255] ? sendmsg_copy_msghdr+0x160/0x160 [ 1170.119272] ? __fget_files+0x2cf/0x520 [ 1170.119286] ? lock_downgrade+0x6d0/0x6d0 [ 1170.119306] ? lock_downgrade+0x6d0/0x6d0 [ 1170.119325] ? __fget_files+0x2f8/0x520 [ 1170.119347] ? __fget_light+0xea/0x290 [ 1170.119369] __sys_sendmmsg+0x195/0x470 [ 1170.119388] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1170.119403] ? lock_downgrade+0x6d0/0x6d0 [ 1170.119432] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1170.119450] ? wait_for_completion_io+0x270/0x270 [ 1170.119467] ? rcu_read_lock_any_held+0x75/0xa0 [ 1170.119479] ? vfs_write+0x354/0xb10 [ 1170.119493] ? fput_many+0x2f/0x1a0 [ 1170.119508] ? ksys_write+0x1a9/0x260 [ 1170.119523] ? __ia32_sys_read+0xb0/0xb0 [ 1170.119544] __x64_sys_sendmmsg+0x99/0x100 [ 1170.119558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1170.119571] do_syscall_64+0x33/0x40 [ 1170.119584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1170.119593] RIP: 0033:0x7fd3a7c24b19 [ 1170.119605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1170.119613] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1170.119629] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 15:04:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8100, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:44 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1170.119637] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1170.119645] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.119652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.119661] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:04:44 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 6) 15:04:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 4) 15:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5409, &(0x7f0000000040)=0x4) [ 1170.310805] FAULT_INJECTION: forcing a failure. [ 1170.310805] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.313512] CPU: 0 PID: 13673 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1170.316010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1170.317581] Call Trace: [ 1170.318055] dump_stack+0x107/0x167 [ 1170.318545] should_fail.cold+0x5/0xa [ 1170.319567] ? create_object.isra.0+0x3a/0xa20 [ 1170.321219] should_failslab+0x5/0x20 [ 1170.322622] kmem_cache_alloc+0x5b/0x310 [ 1170.324165] create_object.isra.0+0x3a/0xa20 [ 1170.325822] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1170.327704] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1170.329607] ? alloc_skb_with_frags+0x92/0x570 [ 1170.331269] __alloc_skb+0xb1/0x5b0 [ 1170.332601] alloc_skb_with_frags+0x92/0x570 [ 1170.334195] ? mark_lock+0xf5/0x2df0 [ 1170.335563] sock_alloc_send_pskb+0x7af/0x930 [ 1170.337220] ? sk_alloc+0x350/0x350 [ 1170.338623] ? __lock_acquire+0xbb1/0x5b00 [ 1170.340197] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1170.342235] ? __lock_acquire+0x1657/0x5b00 [ 1170.343880] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1170.345795] ? ip6_mtu+0x1bb/0x3d0 [ 1170.347162] ? lock_downgrade+0x6d0/0x6d0 [ 1170.348732] ? ip_frag_init+0x350/0x350 [ 1170.350285] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1170.352040] ? ip6_mtu+0x1e9/0x3d0 [ 1170.353372] ? ip6_setup_cork+0xfb7/0x1740 [ 1170.354995] ip6_append_data+0x1e7/0x330 [ 1170.355379] FAULT_INJECTION: forcing a failure. [ 1170.355379] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.356363] ? ip_frag_init+0x350/0x350 [ 1170.356381] ? ip_frag_init+0x350/0x350 [ 1170.356400] udpv6_sendmsg+0x1a27/0x2ad0 [ 1170.361944] ? ip_frag_init+0x350/0x350 [ 1170.363246] ? udp_v6_push_pending_frames+0x360/0x360 [ 1170.364944] ? lock_acquire+0x197/0x470 [ 1170.366249] ? find_held_lock+0x2c/0x110 [ 1170.367581] ? __might_fault+0xd3/0x180 [ 1170.368882] ? sock_has_perm+0x1ea/0x280 [ 1170.370216] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1170.371906] ? _copy_from_user+0xfb/0x1b0 [ 1170.373260] ? __import_iovec+0x458/0x590 [ 1170.374628] ? udp_v6_push_pending_frames+0x360/0x360 [ 1170.376312] inet6_sendmsg+0x105/0x140 [ 1170.377578] ? inet6_compat_ioctl+0x320/0x320 [ 1170.379046] __sock_sendmsg+0xf2/0x190 [ 1170.380317] ____sys_sendmsg+0x334/0x870 [ 1170.381640] ? sock_write_iter+0x3d0/0x3d0 [ 1170.383026] ? do_recvmmsg+0x6d0/0x6d0 [ 1170.384294] ? mark_lock+0xf5/0x2df0 [ 1170.385506] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1170.387219] ? __lock_acquire+0x1657/0x5b00 [ 1170.388627] ___sys_sendmsg+0xf3/0x170 [ 1170.389902] ? sendmsg_copy_msghdr+0x160/0x160 [ 1170.391395] ? __fget_files+0x2cf/0x520 [ 1170.392683] ? lock_downgrade+0x6d0/0x6d0 [ 1170.394047] ? lock_downgrade+0x6d0/0x6d0 [ 1170.395401] ? __fget_files+0x2f8/0x520 [ 1170.396700] ? __fget_light+0xea/0x290 [ 1170.397976] __sys_sendmmsg+0x195/0x470 [ 1170.399272] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1170.400678] ? lock_downgrade+0x6d0/0x6d0 [ 1170.402052] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1170.403625] ? wait_for_completion_io+0x270/0x270 [ 1170.405196] ? rcu_read_lock_any_held+0x75/0xa0 [ 1170.406720] ? vfs_write+0x354/0xb10 [ 1170.407925] ? fput_many+0x2f/0x1a0 [ 1170.409113] ? ksys_write+0x1a9/0x260 [ 1170.410396] ? __ia32_sys_read+0xb0/0xb0 [ 1170.411724] __x64_sys_sendmmsg+0x99/0x100 [ 1170.413097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1170.414793] do_syscall_64+0x33/0x40 [ 1170.416000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1170.417676] RIP: 0033:0x7fd3a7c24b19 [ 1170.418898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1170.424982] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1170.427485] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1170.429823] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1170.432172] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.434530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.436868] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1170.439235] CPU: 1 PID: 13676 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1170.440265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1170.441520] Call Trace: [ 1170.441914] dump_stack+0x107/0x167 [ 1170.442450] should_fail.cold+0x5/0xa [ 1170.443012] ? create_object.isra.0+0x3a/0xa20 [ 1170.443697] should_failslab+0x5/0x20 [ 1170.444262] kmem_cache_alloc+0x5b/0x310 [ 1170.444860] create_object.isra.0+0x3a/0xa20 [ 1170.445514] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1170.446281] kmem_cache_alloc_node+0x169/0x330 [ 1170.446957] __alloc_skb+0x6d/0x5b0 [ 1170.447505] alloc_skb_with_frags+0x92/0x570 [ 1170.448156] ? mark_lock+0xf5/0x2df0 [ 1170.448717] sock_alloc_send_pskb+0x7af/0x930 [ 1170.449393] ? sk_alloc+0x350/0x350 [ 1170.449949] ? __lock_acquire+0xbb1/0x5b00 [ 1170.450582] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1170.451356] ? __lock_acquire+0x1657/0x5b00 [ 1170.451999] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1170.452741] ? ip6_mtu+0x1bb/0x3d0 [ 1170.453265] ? lock_downgrade+0x6d0/0x6d0 [ 1170.453888] ? ip_frag_init+0x350/0x350 [ 1170.454489] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1170.455173] ? ip6_mtu+0x1e9/0x3d0 [ 1170.455697] ? ip6_setup_cork+0xfb7/0x1740 [ 1170.456322] ip6_append_data+0x1e7/0x330 [ 1170.456913] ? ip_frag_init+0x350/0x350 [ 1170.457500] ? ip_frag_init+0x350/0x350 [ 1170.458100] udpv6_sendmsg+0x1a27/0x2ad0 [ 1170.458726] ? ip_frag_init+0x350/0x350 [ 1170.459321] ? udp_v6_push_pending_frames+0x360/0x360 [ 1170.460094] ? lock_acquire+0x197/0x470 [ 1170.460698] ? find_held_lock+0x2c/0x110 [ 1170.461309] ? __might_fault+0xd3/0x180 [ 1170.461913] ? sock_has_perm+0x1ea/0x280 [ 1170.462519] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1170.463266] ? _copy_from_user+0xfb/0x1b0 [ 1170.463817] ? __import_iovec+0x458/0x590 [ 1170.464342] ? udp_v6_push_pending_frames+0x360/0x360 [ 1170.465013] inet6_sendmsg+0x105/0x140 [ 1170.465525] ? inet6_compat_ioctl+0x320/0x320 [ 1170.466117] __sock_sendmsg+0xf2/0x190 [ 1170.466622] ____sys_sendmsg+0x334/0x870 [ 1170.467157] ? sock_write_iter+0x3d0/0x3d0 [ 1170.467709] ? do_recvmmsg+0x6d0/0x6d0 [ 1170.468225] ? mark_lock+0xf5/0x2df0 [ 1170.468713] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1170.469397] ? __lock_acquire+0x1657/0x5b00 [ 1170.469416] ___sys_sendmsg+0xf3/0x170 [ 1170.469433] ? sendmsg_copy_msghdr+0x160/0x160 [ 1170.469452] ? __fget_files+0x2cf/0x520 15:04:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8847, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:44 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8100, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:44 executing program 0: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/virtio_blk', 0x4000, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0xd969, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r4 = fork() r5 = epoll_create(0x8000) r6 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000000c0)={0x20000000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', r7, 0x40, 0x20, 0xffff7fff, 0x3, {{0xa, 0x4, 0x2, 0x30, 0x28, 0x65, 0x0, 0x7b, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_addr={0x44, 0x14, 0x68, 0x1, 0x1, [{@multicast1, 0x3ff}, {@multicast1}]}]}}}}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x4207, r8) ptrace$setsig(0x4203, r4, 0x8, &(0x7f00000002c0)={0x2b, 0x0, 0x4006}) [ 1170.469466] ? lock_downgrade+0x6d0/0x6d0 [ 1170.469486] ? lock_downgrade+0x6d0/0x6d0 [ 1170.469507] ? __fget_files+0x2f8/0x520 [ 1170.469529] ? __fget_light+0xea/0x290 [ 1170.469551] __sys_sendmmsg+0x195/0x470 [ 1170.469571] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1170.469586] ? lock_downgrade+0x6d0/0x6d0 15:04:44 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:04:44 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) (fail_nth: 1) [ 1170.469617] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1170.469636] ? wait_for_completion_io+0x270/0x270 [ 1170.469653] ? rcu_read_lock_any_held+0x75/0xa0 15:04:44 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8847, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1170.469666] ? vfs_write+0x354/0xb10 15:04:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8848, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1170.469680] ? fput_many+0x2f/0x1a0 [ 1170.469695] ? ksys_write+0x1a9/0x260 [ 1170.469710] ? __ia32_sys_read+0xb0/0xb0 [ 1170.469731] __x64_sys_sendmmsg+0x99/0x100 [ 1170.469744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1170.469755] do_syscall_64+0x33/0x40 [ 1170.469769] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1170.469777] RIP: 0033:0x7f87fda10b19 [ 1170.469790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1170.469797] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1170.469811] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1170.469818] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1170.469827] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.469845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.469853] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1170.583079] FAULT_INJECTION: forcing a failure. [ 1170.583079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.583095] CPU: 1 PID: 13695 Comm: syz-executor.7 Not tainted 5.10.230 #1 [ 1170.583102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1170.583107] Call Trace: [ 1170.583126] dump_stack+0x107/0x167 [ 1170.583141] should_fail.cold+0x5/0xa [ 1170.611773] _copy_to_user+0x2e/0x180 [ 1170.611794] simple_read_from_buffer+0xcc/0x160 [ 1170.612844] proc_fail_nth_read+0x198/0x230 [ 1170.612862] ? proc_sessionid_read+0x230/0x230 [ 1170.614024] ? security_file_permission+0xb1/0xe0 [ 1170.614044] ? proc_sessionid_read+0x230/0x230 [ 1170.614058] vfs_read+0x228/0x620 [ 1170.614077] ksys_read+0x12d/0x260 [ 1170.616118] ? vfs_write+0xb10/0xb10 [ 1170.616610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1170.617293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1170.618149] do_syscall_64+0x33/0x40 [ 1170.619097] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1170.620412] RIP: 0033:0x7fbcc8d6969c [ 1170.621364] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1170.626946] RSP: 002b:00007fbcc630b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1170.629021] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fbcc8d6969c [ 1170.631073] RDX: 000000000000000f RSI: 00007fbcc630b1e0 RDI: 0000000000000004 [ 1170.632911] RBP: 00007fbcc630b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1170.634984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.636944] R13: 00007ffcb482085f R14: 00007fbcc630b300 R15: 0000000000022000 15:04:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:45 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8848, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1183.574943] FAULT_INJECTION: forcing a failure. [ 1183.574943] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.576564] CPU: 1 PID: 13824 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1183.577458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.578526] Call Trace: [ 1183.578862] dump_stack+0x107/0x167 [ 1183.579306] should_fail.cold+0x5/0xa [ 1183.579780] should_failslab+0x5/0x20 [ 1183.580246] __kmalloc_node_track_caller+0x74/0x3b0 [ 1183.580880] ? alloc_skb_with_frags+0x92/0x570 [ 1183.581466] __alloc_skb+0xb1/0x5b0 [ 1183.581937] alloc_skb_with_frags+0x92/0x570 [ 1183.582512] ? mark_lock+0xf5/0x2df0 [ 1183.582972] sock_alloc_send_pskb+0x7af/0x930 [ 1183.583552] ? sk_alloc+0x350/0x350 [ 1183.584015] ? __lock_acquire+0xbb1/0x5b00 [ 1183.584552] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1183.585225] ? __lock_acquire+0x1657/0x5b00 [ 1183.585777] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1183.586442] ? ip6_mtu+0x1bb/0x3d0 [ 1183.586904] ? lock_downgrade+0x6d0/0x6d0 [ 1183.587407] ? ip_frag_init+0x350/0x350 [ 1183.587901] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1183.588466] ? ip6_mtu+0x1e9/0x3d0 [ 1183.588897] ? ip6_setup_cork+0xfb7/0x1740 [ 1183.589412] ip6_append_data+0x1e7/0x330 [ 1183.589904] ? ip_frag_init+0x350/0x350 [ 1183.590403] ? ip_frag_init+0x350/0x350 [ 1183.590896] udpv6_sendmsg+0x1a27/0x2ad0 [ 1183.591391] ? ip_frag_init+0x350/0x350 [ 1183.591882] ? udp_v6_push_pending_frames+0x360/0x360 [ 1183.592518] ? lock_acquire+0x197/0x470 [ 1183.593001] ? find_held_lock+0x2c/0x110 [ 1183.593496] ? __might_fault+0xd3/0x180 [ 1183.593992] ? sock_has_perm+0x1ea/0x280 [ 1183.594496] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1183.595131] ? _copy_from_user+0xfb/0x1b0 [ 1183.595642] ? __import_iovec+0x458/0x590 [ 1183.596146] ? udp_v6_push_pending_frames+0x360/0x360 [ 1183.596775] inet6_sendmsg+0x105/0x140 [ 1183.597248] ? inet6_compat_ioctl+0x320/0x320 [ 1183.597794] __sock_sendmsg+0xf2/0x190 [ 1183.598267] ____sys_sendmsg+0x334/0x870 [ 1183.598780] ? sock_write_iter+0x3d0/0x3d0 [ 1183.599294] ? do_recvmmsg+0x6d0/0x6d0 [ 1183.599770] ? mark_lock+0xf5/0x2df0 [ 1183.600223] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1183.600857] ? __lock_acquire+0x1657/0x5b00 [ 1183.601386] ___sys_sendmsg+0xf3/0x170 [ 1183.601859] ? sendmsg_copy_msghdr+0x160/0x160 [ 1183.602589] ? __fget_files+0x2cf/0x520 [ 1183.603553] ? lock_downgrade+0x6d0/0x6d0 [ 1183.604562] ? lock_downgrade+0x6d0/0x6d0 [ 1183.605564] ? __fget_files+0x2f8/0x520 [ 1183.606477] ? __fget_light+0xea/0x290 [ 1183.606995] __sys_sendmmsg+0x195/0x470 [ 1183.607521] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1183.608089] ? lock_downgrade+0x6d0/0x6d0 [ 1183.608652] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1183.609282] ? wait_for_completion_io+0x270/0x270 [ 1183.609919] ? rcu_read_lock_any_held+0x75/0xa0 [ 1183.610586] ? vfs_write+0x354/0xb10 [ 1183.611083] ? fput_many+0x2f/0x1a0 [ 1183.611564] ? ksys_write+0x1a9/0x260 [ 1183.612071] ? __ia32_sys_read+0xb0/0xb0 [ 1183.612606] __x64_sys_sendmmsg+0x99/0x100 [ 1183.613163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.613835] do_syscall_64+0x33/0x40 [ 1183.614394] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.615064] RIP: 0033:0x7f87fda10b19 [ 1183.615551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.617933] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1183.618962] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1183.619889] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1183.620794] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.621712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.622664] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1183.648230] FAULT_INJECTION: forcing a failure. [ 1183.648230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.649881] CPU: 1 PID: 13827 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1183.650798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.651871] Call Trace: [ 1183.652218] dump_stack+0x107/0x167 [ 1183.652701] should_fail.cold+0x5/0xa [ 1183.653203] _copy_from_user+0x2e/0x1b0 [ 1183.653730] __copy_msghdr_from_user+0x91/0x4b0 15:04:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x540b, &(0x7f0000000040)=0x4) 15:04:57 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:04:57 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 7) 15:04:57 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:57 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 5) 15:04:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8906, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:57 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) [ 1183.654342] ? __ia32_sys_shutdown+0x80/0x80 [ 1183.658737] ? udp_v6_push_pending_frames+0x360/0x360 [ 1183.659412] ? inet6_sendmsg+0xbd/0x140 [ 1183.659935] ? inet6_compat_ioctl+0x320/0x320 [ 1183.660522] ? __sock_sendmsg+0x55/0x190 [ 1183.661042] sendmsg_copy_msghdr+0xa1/0x160 [ 1183.661594] ? do_recvmmsg+0x6d0/0x6d0 [ 1183.662111] ? __lock_acquire+0x1657/0x5b00 [ 1183.662699] ___sys_sendmsg+0xc6/0x170 [ 1183.663203] ? sendmsg_copy_msghdr+0x160/0x160 [ 1183.663800] ? __fget_files+0x2cf/0x520 [ 1183.664318] ? lock_acquire+0x197/0x470 [ 1183.664828] ? find_held_lock+0x2c/0x110 [ 1183.665367] ? __might_fault+0xd3/0x180 [ 1183.665887] ? lock_downgrade+0x6d0/0x6d0 [ 1183.666461] __sys_sendmmsg+0x195/0x470 [ 1183.666989] ? __ia32_sys_sendmsg+0xb0/0xb0 15:04:58 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 1183.667553] ? lock_downgrade+0x6d0/0x6d0 [ 1183.674695] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1183.675345] ? wait_for_completion_io+0x270/0x270 [ 1183.676065] ? rcu_read_lock_any_held+0x75/0xa0 [ 1183.676737] ? vfs_write+0x354/0xb10 [ 1183.677289] ? fput_many+0x2f/0x1a0 [ 1183.677772] ? ksys_write+0x1a9/0x260 [ 1183.678281] ? __ia32_sys_read+0xb0/0xb0 [ 1183.678864] __x64_sys_sendmmsg+0x99/0x100 [ 1183.679427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.680167] do_syscall_64+0x33/0x40 [ 1183.680694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1183.681382] RIP: 0033:0x7fd3a7c24b19 [ 1183.681879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.684331] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1183.685340] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1183.686274] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1183.687245] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.688184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.689131] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:04:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x4, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x540c, &(0x7f0000000040)=0x4) 15:04:58 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x2, &(0x7f0000000040)=0x4) 15:04:58 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x8906, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x540d, &(0x7f0000000040)=0x4) 15:04:58 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x4b47, &(0x7f0000000040)=0x4) 15:04:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:04:58 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x4b49, &(0x7f0000000040)=0x4) 15:05:11 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x10093de, 0x6}) 15:05:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 8) 15:05:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x2, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:11 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:05:11 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 6) 15:05:11 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x4, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:11 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5404, &(0x7f0000000040)=0x4) 15:05:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5413, &(0x7f0000000040)=0x4) [ 1197.015041] FAULT_INJECTION: forcing a failure. [ 1197.015041] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.016443] CPU: 0 PID: 13971 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1197.017277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.018288] Call Trace: [ 1197.018619] dump_stack+0x107/0x167 [ 1197.019124] should_fail.cold+0x5/0xa [ 1197.019594] ? create_object.isra.0+0x3a/0xa20 [ 1197.020154] should_failslab+0x5/0x20 [ 1197.020626] kmem_cache_alloc+0x5b/0x310 [ 1197.021125] create_object.isra.0+0x3a/0xa20 [ 1197.021660] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1197.022282] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1197.038955] ? alloc_skb_with_frags+0x92/0x570 [ 1197.038972] __alloc_skb+0xb1/0x5b0 [ 1197.038988] alloc_skb_with_frags+0x92/0x570 [ 1197.039003] ? mark_lock+0xf5/0x2df0 [ 1197.039018] sock_alloc_send_pskb+0x7af/0x930 [ 1197.039037] ? sk_alloc+0x350/0x350 [ 1197.039050] ? __lock_acquire+0xbb1/0x5b00 [ 1197.039063] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1197.039077] ? __lock_acquire+0x1657/0x5b00 [ 1197.039093] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1197.039115] ? ip6_mtu+0x1bb/0x3d0 [ 1197.039126] ? lock_downgrade+0x6d0/0x6d0 [ 1197.039138] ? ip_frag_init+0x350/0x350 [ 1197.039155] ? ip6_finish_output2+0x1fe0/0x1fe0 15:05:11 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1197.039167] ? ip6_mtu+0x1e9/0x3d0 15:05:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x3, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 9) 15:05:11 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 7) [ 1197.039178] ? ip6_setup_cork+0xfb7/0x1740 15:05:11 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x2, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1197.039191] ip6_append_data+0x1e7/0x330 [ 1197.039201] ? ip_frag_init+0x350/0x350 [ 1197.039214] ? ip_frag_init+0x350/0x350 [ 1197.039231] udpv6_sendmsg+0x1a27/0x2ad0 [ 1197.039245] ? ip_frag_init+0x350/0x350 [ 1197.039264] ? udp_v6_push_pending_frames+0x360/0x360 [ 1197.039286] ? lock_acquire+0x197/0x470 [ 1197.039297] ? find_held_lock+0x2c/0x110 [ 1197.039312] ? __might_fault+0xd3/0x180 [ 1197.039333] ? sock_has_perm+0x1ea/0x280 [ 1197.039344] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1197.039359] ? _copy_from_user+0xfb/0x1b0 [ 1197.039379] ? __import_iovec+0x458/0x590 [ 1197.039391] ? udp_v6_push_pending_frames+0x360/0x360 15:05:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:11 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = fork() ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x4, 0x8, 0x4, 0x0, 0x2, 0x1}) ptrace(0x631b, r2) ptrace(0x10, r1) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x10000034, 0x93de, 0x6}) [ 1197.039406] inet6_sendmsg+0x105/0x140 15:05:11 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r0, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 1197.039419] ? inet6_compat_ioctl+0x320/0x320 [ 1197.039430] __sock_sendmsg+0xf2/0x190 [ 1197.039442] ____sys_sendmsg+0x334/0x870 [ 1197.039455] ? sock_write_iter+0x3d0/0x3d0 [ 1197.039466] ? do_recvmmsg+0x6d0/0x6d0 [ 1197.039481] ? mark_lock+0xf5/0x2df0 [ 1197.039495] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 15:05:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1197.039507] ? __lock_acquire+0x1657/0x5b00 [ 1197.039524] ___sys_sendmsg+0xf3/0x170 [ 1197.039539] ? sendmsg_copy_msghdr+0x160/0x160 [ 1197.039556] ? __fget_files+0x2cf/0x520 [ 1197.039568] ? lock_downgrade+0x6d0/0x6d0 15:05:11 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 8) [ 1197.039583] ? lock_downgrade+0x6d0/0x6d0 15:05:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 10) 15:05:11 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x3, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1197.039599] ? __fget_files+0x2f8/0x520 [ 1197.039616] ? __fget_light+0xea/0x290 [ 1197.039634] __sys_sendmmsg+0x195/0x470 [ 1197.039649] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1197.039661] ? lock_downgrade+0x6d0/0x6d0 [ 1197.039686] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1197.039700] ? wait_for_completion_io+0x270/0x270 [ 1197.039715] ? rcu_read_lock_any_held+0x75/0xa0 [ 1197.039725] ? vfs_write+0x354/0xb10 [ 1197.039737] ? fput_many+0x2f/0x1a0 [ 1197.039749] ? ksys_write+0x1a9/0x260 [ 1197.039761] ? __ia32_sys_read+0xb0/0xb0 [ 1197.039778] __x64_sys_sendmmsg+0x99/0x100 [ 1197.039790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.039800] do_syscall_64+0x33/0x40 [ 1197.039812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.039820] RIP: 0033:0x7f87fda10b19 [ 1197.039831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.039837] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 15:05:11 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1197.039850] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 15:05:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 11) [ 1197.039857] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1197.039864] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.039870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.039876] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1197.068836] FAULT_INJECTION: forcing a failure. [ 1197.068836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.068849] CPU: 1 PID: 13964 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1197.068856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.068859] Call Trace: [ 1197.068873] dump_stack+0x107/0x167 [ 1197.068885] should_fail.cold+0x5/0xa [ 1197.068901] _copy_from_user+0x2e/0x1b0 [ 1197.068918] __copy_msghdr_from_user+0x91/0x4b0 [ 1197.068931] ? __ia32_sys_shutdown+0x80/0x80 [ 1197.068949] ? udp_v6_push_pending_frames+0x360/0x360 [ 1197.068964] ? inet6_sendmsg+0xbd/0x140 [ 1197.068976] ? inet6_compat_ioctl+0x320/0x320 [ 1197.068987] ? __sock_sendmsg+0x55/0x190 [ 1197.069002] sendmsg_copy_msghdr+0xa1/0x160 [ 1197.069014] ? do_recvmmsg+0x6d0/0x6d0 [ 1197.069028] ? __lock_acquire+0x1657/0x5b00 [ 1197.069048] ___sys_sendmsg+0xc6/0x170 [ 1197.069061] ? sendmsg_copy_msghdr+0x160/0x160 [ 1197.069075] ? __fget_files+0x2cf/0x520 [ 1197.069091] ? lock_acquire+0x197/0x470 [ 1197.069101] ? find_held_lock+0x2c/0x110 [ 1197.069115] ? __might_fault+0xd3/0x180 [ 1197.069127] ? lock_downgrade+0x6d0/0x6d0 [ 1197.069150] __sys_sendmmsg+0x195/0x470 [ 1197.069165] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1197.069177] ? lock_downgrade+0x6d0/0x6d0 [ 1197.069199] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1197.069214] ? wait_for_completion_io+0x270/0x270 [ 1197.069227] ? rcu_read_lock_any_held+0x75/0xa0 [ 1197.069237] ? vfs_write+0x354/0xb10 [ 1197.069248] ? fput_many+0x2f/0x1a0 [ 1197.069261] ? ksys_write+0x1a9/0x260 [ 1197.069273] ? __ia32_sys_read+0xb0/0xb0 [ 1197.069289] __x64_sys_sendmmsg+0x99/0x100 [ 1197.069300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.069310] do_syscall_64+0x33/0x40 [ 1197.069321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.069328] RIP: 0033:0x7fd3a7c24b19 [ 1197.069339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.069345] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1197.069358] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1197.069364] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1197.069371] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.069378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.069384] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1197.268168] FAULT_INJECTION: forcing a failure. [ 1197.268168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.268188] CPU: 0 PID: 14090 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1197.268195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.268200] Call Trace: [ 1197.268219] dump_stack+0x107/0x167 [ 1197.268235] should_fail.cold+0x5/0xa [ 1197.268261] _copy_from_user+0x2e/0x1b0 [ 1197.268282] __copy_msghdr_from_user+0x91/0x4b0 [ 1197.268298] ? __ia32_sys_shutdown+0x80/0x80 [ 1197.268314] ? udp_v6_push_pending_frames+0x360/0x360 [ 1197.268332] ? inet6_sendmsg+0xbd/0x140 [ 1197.268347] ? inet6_compat_ioctl+0x320/0x320 [ 1197.268363] ? __sock_sendmsg+0x55/0x190 [ 1197.268387] sendmsg_copy_msghdr+0xa1/0x160 [ 1197.268402] ? do_recvmmsg+0x6d0/0x6d0 [ 1197.268420] ? __lock_acquire+0x1657/0x5b00 [ 1197.268444] ___sys_sendmsg+0xc6/0x170 [ 1197.268459] ? sendmsg_copy_msghdr+0x160/0x160 [ 1197.268478] ? __fget_files+0x2cf/0x520 [ 1197.268497] ? lock_acquire+0x197/0x470 [ 1197.268509] ? find_held_lock+0x2c/0x110 [ 1197.268528] ? __might_fault+0xd3/0x180 [ 1197.268542] ? lock_downgrade+0x6d0/0x6d0 [ 1197.268571] __sys_sendmmsg+0x195/0x470 [ 1197.268590] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1197.268603] ? lock_downgrade+0x6d0/0x6d0 [ 1197.268633] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1197.268650] ? wait_for_completion_io+0x270/0x270 [ 1197.268668] ? rcu_read_lock_any_held+0x75/0xa0 [ 1197.268681] ? vfs_write+0x354/0xb10 [ 1197.268694] ? fput_many+0x2f/0x1a0 [ 1197.268709] ? ksys_write+0x1a9/0x260 [ 1197.268723] ? __ia32_sys_read+0xb0/0xb0 [ 1197.268742] __x64_sys_sendmmsg+0x99/0x100 [ 1197.268757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.268768] do_syscall_64+0x33/0x40 [ 1197.268782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.268792] RIP: 0033:0x7fd3a7c24b19 [ 1197.268805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.268813] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1197.268829] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1197.268837] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1197.268845] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.268853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.268862] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1197.270155] FAULT_INJECTION: forcing a failure. [ 1197.270155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.270166] CPU: 1 PID: 14093 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1197.270171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.270174] Call Trace: [ 1197.270185] dump_stack+0x107/0x167 [ 1197.270196] should_fail.cold+0x5/0xa [ 1197.270210] _copy_from_user+0x2e/0x1b0 [ 1197.270223] __copy_msghdr_from_user+0x91/0x4b0 [ 1197.270235] ? __ia32_sys_shutdown+0x80/0x80 [ 1197.270253] ? udp_v6_push_pending_frames+0x360/0x360 [ 1197.270268] ? inet6_sendmsg+0xbd/0x140 [ 1197.270279] ? inet6_compat_ioctl+0x320/0x320 [ 1197.270288] ? __sock_sendmsg+0x55/0x190 [ 1197.270303] sendmsg_copy_msghdr+0xa1/0x160 [ 1197.270313] ? do_recvmmsg+0x6d0/0x6d0 [ 1197.270325] ? __lock_acquire+0x1657/0x5b00 [ 1197.270343] ___sys_sendmsg+0xc6/0x170 [ 1197.270356] ? sendmsg_copy_msghdr+0x160/0x160 [ 1197.270368] ? __fget_files+0x2cf/0x520 [ 1197.270382] ? lock_acquire+0x197/0x470 [ 1197.270392] ? find_held_lock+0x2c/0x110 [ 1197.270406] ? __might_fault+0xd3/0x180 [ 1197.270416] ? lock_downgrade+0x6d0/0x6d0 [ 1197.270437] __sys_sendmmsg+0x195/0x470 [ 1197.270451] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1197.270461] ? lock_downgrade+0x6d0/0x6d0 [ 1197.270481] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1197.270497] ? wait_for_completion_io+0x270/0x270 [ 1197.270512] ? rcu_read_lock_any_held+0x75/0xa0 [ 1197.270524] ? vfs_write+0x354/0xb10 [ 1197.270538] ? fput_many+0x2f/0x1a0 [ 1197.270552] ? ksys_write+0x1a9/0x260 [ 1197.270566] ? __ia32_sys_read+0xb0/0xb0 [ 1197.270585] __x64_sys_sendmmsg+0x99/0x100 [ 1197.270598] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.270610] do_syscall_64+0x33/0x40 [ 1197.270623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.270631] RIP: 0033:0x7f87fda10b19 [ 1197.270643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.270650] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1197.270663] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1197.270671] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1197.270678] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.270686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.270694] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1197.389734] FAULT_INJECTION: forcing a failure. [ 1197.389734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.389753] CPU: 1 PID: 14130 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1197.389761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.389766] Call Trace: [ 1197.389787] dump_stack+0x107/0x167 [ 1197.389803] should_fail.cold+0x5/0xa [ 1197.389825] _copy_from_user+0x2e/0x1b0 [ 1197.389846] __copy_msghdr_from_user+0x91/0x4b0 [ 1197.389863] ? __ia32_sys_shutdown+0x80/0x80 [ 1197.389880] ? udp_v6_push_pending_frames+0x360/0x360 [ 1197.389900] ? inet6_sendmsg+0xbd/0x140 [ 1197.389916] ? inet6_compat_ioctl+0x320/0x320 [ 1197.389929] ? __sock_sendmsg+0x55/0x190 [ 1197.389950] sendmsg_copy_msghdr+0xa1/0x160 [ 1197.389964] ? do_recvmmsg+0x6d0/0x6d0 [ 1197.389983] ? __lock_acquire+0x1657/0x5b00 [ 1197.390009] ___sys_sendmsg+0xc6/0x170 [ 1197.390026] ? sendmsg_copy_msghdr+0x160/0x160 [ 1197.390046] ? __fget_files+0x2cf/0x520 [ 1197.390066] ? lock_acquire+0x197/0x470 [ 1197.390079] ? find_held_lock+0x2c/0x110 [ 1197.390099] ? __might_fault+0xd3/0x180 [ 1197.390113] ? lock_downgrade+0x6d0/0x6d0 [ 1197.390144] __sys_sendmmsg+0x195/0x470 [ 1197.390164] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1197.390178] ? lock_downgrade+0x6d0/0x6d0 [ 1197.390209] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1197.390228] ? wait_for_completion_io+0x270/0x270 [ 1197.390251] ? rcu_read_lock_any_held+0x75/0xa0 [ 1197.390265] ? vfs_write+0x354/0xb10 [ 1197.390280] ? fput_many+0x2f/0x1a0 [ 1197.390295] ? ksys_write+0x1a9/0x260 [ 1197.390310] ? __ia32_sys_read+0xb0/0xb0 [ 1197.390331] __x64_sys_sendmmsg+0x99/0x100 [ 1197.390346] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.390358] do_syscall_64+0x33/0x40 [ 1197.390373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.390383] RIP: 0033:0x7f87fda10b19 [ 1197.390396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.390404] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1197.390421] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1197.390429] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1197.390438] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.390446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.390454] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1197.391386] FAULT_INJECTION: forcing a failure. [ 1197.391386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.391399] CPU: 0 PID: 14136 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1197.391405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.391409] Call Trace: [ 1197.391422] dump_stack+0x107/0x167 [ 1197.391437] should_fail.cold+0x5/0xa [ 1197.391454] _copy_from_user+0x2e/0x1b0 [ 1197.391472] __copy_msghdr_from_user+0x91/0x4b0 [ 1197.391486] ? __ia32_sys_shutdown+0x80/0x80 [ 1197.391500] ? udp_v6_push_pending_frames+0x360/0x360 [ 1197.391517] ? inet6_sendmsg+0xbd/0x140 [ 1197.391533] ? inet6_compat_ioctl+0x320/0x320 [ 1197.391547] ? __sock_sendmsg+0x55/0x190 [ 1197.391569] sendmsg_copy_msghdr+0xa1/0x160 [ 1197.391581] ? do_recvmmsg+0x6d0/0x6d0 [ 1197.391597] ? __lock_acquire+0x1657/0x5b00 [ 1197.391620] ___sys_sendmsg+0xc6/0x170 [ 1197.391636] ? sendmsg_copy_msghdr+0x160/0x160 [ 1197.391652] ? __fget_files+0x2cf/0x520 [ 1197.391671] ? lock_acquire+0x197/0x470 [ 1197.391683] ? find_held_lock+0x2c/0x110 [ 1197.391701] ? __might_fault+0xd3/0x180 [ 1197.391715] ? lock_downgrade+0x6d0/0x6d0 [ 1197.391745] __sys_sendmmsg+0x195/0x470 [ 1197.391766] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1197.391781] ? lock_downgrade+0x6d0/0x6d0 [ 1197.391810] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1197.391828] ? wait_for_completion_io+0x270/0x270 [ 1197.391843] ? rcu_read_lock_any_held+0x75/0xa0 [ 1197.391855] ? vfs_write+0x354/0xb10 [ 1197.391869] ? fput_many+0x2f/0x1a0 [ 1197.391884] ? ksys_write+0x1a9/0x260 [ 1197.391899] ? __ia32_sys_read+0xb0/0xb0 [ 1197.391920] __x64_sys_sendmmsg+0x99/0x100 [ 1197.391934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.391947] do_syscall_64+0x33/0x40 [ 1197.391960] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.391970] RIP: 0033:0x7fd3a7c24b19 [ 1197.391982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.391990] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1197.392005] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1197.392013] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1197.392021] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.392029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1197.392038] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1197.512938] FAULT_INJECTION: forcing a failure. [ 1197.512938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.512956] CPU: 0 PID: 14219 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1197.512964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.512969] Call Trace: [ 1197.512989] dump_stack+0x107/0x167 [ 1197.513005] should_fail.cold+0x5/0xa [ 1197.513026] _copy_from_user+0x2e/0x1b0 [ 1197.513048] __copy_msghdr_from_user+0x91/0x4b0 [ 1197.513063] ? __ia32_sys_shutdown+0x80/0x80 [ 1197.513079] ? udp_v6_push_pending_frames+0x360/0x360 [ 1197.513099] ? inet6_sendmsg+0xbd/0x140 [ 1197.513114] ? inet6_compat_ioctl+0x320/0x320 [ 1197.513127] ? __sock_sendmsg+0x55/0x190 [ 1197.513147] sendmsg_copy_msghdr+0xa1/0x160 [ 1197.513161] ? do_recvmmsg+0x6d0/0x6d0 [ 1197.513180] ? __lock_acquire+0x1657/0x5b00 [ 1197.513205] ___sys_sendmsg+0xc6/0x170 [ 1197.513221] ? sendmsg_copy_msghdr+0x160/0x160 [ 1197.513246] ? __fget_files+0x2cf/0x520 [ 1197.513265] ? lock_acquire+0x197/0x470 [ 1197.513277] ? find_held_lock+0x2c/0x110 [ 1197.513297] ? __might_fault+0xd3/0x180 [ 1197.513311] ? lock_downgrade+0x6d0/0x6d0 [ 1197.513342] __sys_sendmmsg+0x195/0x470 [ 1197.513361] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1197.513376] ? lock_downgrade+0x6d0/0x6d0 [ 1197.513407] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1197.513426] ? wait_for_completion_io+0x270/0x270 [ 1197.513443] ? rcu_read_lock_any_held+0x75/0xa0 [ 1197.513457] ? vfs_write+0x354/0xb10 [ 1197.513471] ? fput_many+0x2f/0x1a0 [ 1197.513486] ? ksys_write+0x1a9/0x260 [ 1197.513501] ? __ia32_sys_read+0xb0/0xb0 [ 1197.513522] __x64_sys_sendmmsg+0x99/0x100 [ 1197.513536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.513549] do_syscall_64+0x33/0x40 [ 1197.513563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1197.513573] RIP: 0033:0x7fd3a7c24b19 [ 1197.513587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.513596] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1197.513612] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1197.513620] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1197.513629] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.513637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1197.513645] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:05:25 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5409, &(0x7f0000000040)=0x4) 15:05:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)=0x4) 15:05:25 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = fork() ptrace(0x4208, r0) ptrace(0x10, r1) getpgrp(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace(0x4208, r2) r3 = epoll_create(0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x20000000}) r5 = fork() ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x15e0, 0x1e, 0x20, 0x70bd2d, 0x25dfdbff, {0x5}, [@nested={0x86, 0x41, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xa, 0x0, 0x0, @binary="ce74bb53"}, @generic="ca76e4b6e22b47a3438424459fe1ce091c8c2db64fbda94195b4832a18aed33870b6cbb3a6a0ce8e57331ea35ff85a648e87829ca996ccd2bbce63c2b20c9fe99ef81b95828cda92d7f153b9d128f5e270737d5e770be6058a4aad07f09a16e1c768054f18d3307a960692d47f45a4029f74"]}, @nested={0xaa, 0x13, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @fd=r4}, @generic="a7c200a5fc15ff429360cd879bb90ebe586e5a9532f42c1fa30fd0ac8ae02cd4c3f606c8598689c418e5c728be891e3b683300a0e02ccef1c08e60609bd0141bbe293f52aea7d3d3653cdd7cbe658765a22ef73651589cdf1c339f1beb5386e24cccf3ff6dd637b8d98a9e47fdd7307344a88af0db290e74574c48bf6a8c2c7cca1f96b39777b83a88e39a59830b2a59a274c6c3d53b576eded276049600"]}, @nested={0x3f, 0x58, 0x0, 0x1, [@typed={0x8, 0x55, 0x0, 0x0, @pid=r1}, @generic="b549a4bc", @typed={0x9, 0x93, 0x0, 0x0, @str='\xff})\xc0\x00'}, @typed={0x8, 0x68, 0x0, 0x0, @fd}, @generic="e87c136f11cd48769d9d60d0df6b644192bbfcdb1d4859486c596a"]}, @nested={0x11be, 0x11, 0x0, 0x1, [@typed={0x14, 0x10, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x3f}, @typed={0x8, 0x55, 0x0, 0x0, @pid=r5}, @typed={0xc4, 0x4e, 0x0, 0x0, @binary="071057e180de778b868a9a851fc53cdfd712fb0aecfbd1cf985b5eb4ace1168fcdb0c3e65d1d321562daea62fb7cf01e89fde8e096076f94caf73153e1d195dc31256650a347fcb2f1b27af2bb9e8b5acbbc4dc3c755e1aa989b67c60028bb85979fc3d2bac2241176072f7a37da64b8de527df68dc6a3b474fce6d9ae273b23af320b0d0c7bfe74384f879c9a2ae5bc81f09aed09001eb4b47548950a9753754791f8797fb0c03867964b94aedbeb02dfac8e02c79f99419a847886478709d0"}, @typed={0x4, 0x74}, @generic="5cf6f2abf7558f64a633c8a42824a79388c6e70d5280e2a37915b05d58a3e51776304bd8f16b0ba05935c92f4ef14fbda08ec587b7f29a15", @generic="3617e074cac5e541877cc24e2b9f58b774af9e76cc454a0421bb089448eed53083912fbaf88d7919e4bc88d6c1fe753802f4f22aab6565d305bc45010f99704dfda53461a171a10f3635fd600b3a0c4a84c780b4a4627d48a53fc4847ef4b378b1d20d18c236441408698a224daa69a12d0a39cd682089cb780c8054ae1f2267643bffaee6da017d0a", @generic="beb1debfb515672bbf", @generic="d5e314f01b3289d27a764372baf1304c327f5e7d17b4dd745831f8edb31af07f79478144b7c0126ed683e6577952a7dddb541103c19436173f0eff48a64b1c1b8a79dc04c2c28431ca89a3d03be69c08135097d96b2c007e033c6dbb8005c4b65d9c76e8f91a33fa25c494e4093158cc5624efae2476832c5798bb6350191ada80612f873d922f1f6934cdbfde122d211024302ef390d3bac12e1d7467d4109750fa134f2f4a73ccfe3a2f6ef78836a683fe9a25d1367230540efd16e17fe82d95c0cf8280d076eb2196c28aa0a0334de0009e7830600b42456296f475e0695976e354ed1dc99b882b2af21a6370901d956f3dd43580b4fe998aa250522dd7b36fbc390dc45c3d388b72632bf315dbf1b0704bdbf043ed0e6a1939162c7d1641c33aafd8b5f2199552aaaeef7b79bea5f3762d5af3dffc351d098ff464f5501b152adbad9deb7af3992fa9ed51a669d1cf00c2710f5a15fa785b811d50eba6d56fa99c2c884717035db0cb7082209e0650e214fc2f8024034716dad156f39463ad109527beb05eeda11b91f4bf460cc5d2d5f0942e715ad3478ddb6048a5fa3a739006d4a708403012641335ea9720e888bb05b4a86414a21bef89ec0f854ebd5d7698af1fa7c0a8473482c7dbc7c070a9580efb22d888eb9abf0c8ecfeaa55509e895e66705908ed4751c8e82effa4e15ffb915eb93029e7c1e559e7fc94395dadb714c6ea5cdb2a4cdec43c1f33c0de86c1d4448d0a7c1000b26078d715e813075f4cacfa4bb9fe17832fb4d70911eab4d5cfc831f9446a08c78170f044536b174cadc7a154660711db875cf65725bda3133995f7baa2f08015b69e798be3eb5e4f1dda3982d8f70bccd3c0f8038d954cd27b4e165bc7034569d7e8b739f174dd226cbbd41effb872e6e5324fdd16fb7be1456bcf5c79dfba063383fdc62973faedab356b3a2245ceb5e1647e5ad0e8b0b6a7201a887436d8020943aaf4e7e85ffa4fecedb5f3966b0d4921d6851a4e24d24bd26a3d318400397d2e1f6a140d1d8df4c8d51f7f11f677feba1fd0cb57a3a1788763ac052bdf2e9846392864a48294ee8605e6001d8ab8c4c27b56fc69474004383e1d621c1a1e3cdc2aa20d2ceb8ef9e15bebcc958c396c7a8c1bf3e81cfed242adae70001776ca8dbb6c90801ff3a7ac51ea7bf7193a6db879f22dba6ef49005c2f14e0ea136d0aa3a718e218133ef8f69cb436a26b2c4f7ec3896fae00bfe12191a797a9aad3f9b925c2fb1303a6dca6fafb0f1ae34518f74918928e7b2d1aabb9770c041723d3487519e79a926cb24136e861cda48eb5dea9ad3298021fe90d6cad1b80dd08ae02eeba1cb82837f2b919abe5f338f1a2b4d9b59e609afcd47ff3dfa75040812a86b1cbffb57775e36e84907434d2f75719edbc7316c26d0ebde8253f7efac8c8919c377f46800fbe91b76bd3b7d127d31c847b0f064dddf74d74007bf162989cd17673cd3d2d2420ea44891d564468bf94831aca2addb311769daa5689645265b24e17c82717b5552abb69bb751e06ee97d504df07ba14260dc8bc23dec63226a5ca35fcb6173cb7a62ae1b9aed6572efee0b5014f355886c99d5eb541c873bac0dc44bae4a3ca8f85dc30890fdca5206a4a436e48700029fb3a419b9b92fb551c3d80ca075857a730f11ae82abd8df338bbd0f318ce2ccb2eec65f162290e754d9de7631689e0c3823bfb1ed74d1a172f3ac70feadfdc18577689e03b90b67d1553f102708766b9156eee66d5bf94a628582182bdc9cd31d836228c15970a37347c85fb22f175c4c1600d812add110fad3eabc38ab0f3106619fad854d76561836a02000eaa4bacd2acae672cc5f5b504231a551b61eb4bc4be5cca21ee1749b536c4eca30a2a41636e8fc9be0850f462be0491023ea02c90ea0e26ad5ea36a811d204c0956a375846dca95cf6b1259db1491c971b75ac0987c4ca35b92a419d81fb283b93ed36e458567b678d7901c7b7f1bc689d2c7f5696cdd32007c8481d73452446e83eac648a2fab22e416e82f53e1826ba5059b4d645d204fc97c8309a519ee80756c62368e222085c8e788c39d60c9663d66b01542ad3a5c8aa47d33cf235da1391bc83135285a3c380a9aec62ee67f7d9da111738d7af37df992dd1b413fbb15297b0f67c097f031a34de9e0e2af1efe42da83306e7b8d5f338b13fd685b63ecc2a2ad2912feee11457a1a3a3808639b0a7eca9fb153ffa8adf07c67cf22d0cc904459d05433909c1846313771aadbae1018e72988ae0dc387d1e1919a3d4a1211fd32e3fcbdc5f7d532bfeefc2d269ae74df1e985e9bcf76707e4cf4fe2cef696d74504229aa3e7c451399df3e9dc616d504a0cefdcf01bca3d426a934743dd3f27f2b1d3285351076b1c57db145aff82aaf78e04c6d8786067144d2a3bce3df708ffdfb7fe80db53c6c6104f52ed1e60dd90c0c69864d1d04938697d91f0392e65f1de85b3e3816ecbb21e7f607e4b13bbb7be55ed2036bfd6c6eb46f8eed8d544d1038e76a4b00aeccb99eb35578941f5a9fccdb1f91a3f199a87c745c6a8de055dbe2c8d53db7a4abb4dc5774643c8dbfa23b2f2397fc8c28f6e2c3b79ea01c494398e1829be3d5418d58852e0999ac21d8ff3e14928a74f7aadbd6dcdcc23d4d948370ad8ebd4977e203c5ec7fa0521644bded5119c5d36b629f0fd3bd0e593209e98ec1582ed1d0c08eaa5fd30e1e19b0460ecbb91fe0e077062df8ce68baeb3b99bb99bf96bbea0006e244a827e6cb8dcbff9d6b2f471ec3a77281db0a2f82e64599995448bba4329dff3ac8598b7a17c2b5b5a127f6d9fe6c2d30c2cf2ce2315287c103c61edc5b885441ac30124cf5ebbb8b45f05efa2e671c4ce0235d9035ab8071c62a542cb05046db33f318a1a17d593723c793b861d37d43cae50645d8c1fd50e8892cc5271935ea99c13df5a8791d156fe234d87ad83a08bd7ff4bee4ca856b6ba287689be55abb9178c123822b4819623501a6f5a1444670915a929dd27e312ed75912f5d5ddb6b0fa6a60548c4c46a0c76e894e67ca04a899db34b764acce657167871ee325498454fb033d1f29894c2726985dc2bba728d753bb2f038f089d4d83046791b3d8d9dfe73d83c67a97d22ca4d503a3db9365c80b050b49a84f1abe4b460e9679dc204fe94e1b34d1591fd4b708a930baeea435ddebbc316ce421e63b90a92d09f34797d3ddb12f21897db7aa3575800c9225aeaf3d5a2860f0abbca22467efacbc351ac2c68082191807dcab98ff640d3abaa473069d215556ec502404bd67025f39c8ce025232483a6dfd1cb36d0028497d80105bee03a7452c4c9d56b070e01eb9e93b70a443ac88c7590ee62d0b643838e5b5e15c6985832a00f1cb45b8f6ccda9febea5f78f20fe52060f18f7a223844914036531d517a0e45632365a5ec3e3136597d6fd69834bae19a6e69d29ac3f9909e4eac1ea1b56d2168b3e0e2e0b540c5092caa5d18119312353dd03e6e809b172d7bb0f46409452b9486e8c9805b33c7de4fb2e89ac214fe19bde51e6a26ea8971e327aa062977e1a5878753808decc24f9e21cb0d260412c6b296d715d85c02730f676cb8d11039a1aa4c67c4a4ba0c6a2d0959b5cc1ff2db65cbea6177c6649db90c1a1b7d50c370de26fe9ed594361e8ad942e7067ee33a1260ea97c52e66baff64d9f35c008cc9683bb141d4799fcd0637998eed458b46cbcdccbdd0420779612c24b562b32b85cf3673d6a82b4197675eb590a95abdc9639ec30cb1b1d0e5c4bc5cd9ea9901e5980ac554bbf98296f8bf7022b16c331dee0b9fae99ae35f53e37f53203e7425a3643b49e3c3cbac41069e42803fa7ec86e65352961569b67970f189e46e8ec253b03bdf52f7b05777207fd4b04c0b3a4e2feb2ce38f51efc95b46fb6f0338c7538911a57fe7bd59cbf0241235250ae8a034a32faa965307d6e91b0d3aa6387172e445aafffa8433ff6c5d2049b0db51ea54e17fb3a6cb5016566a1a8d07a6b38ea0c35b691c7afa2b8eded633b4217cc2a1ee1dd430b6221dacc463708ecba83e34f6adddf6cf2346c2e96637103aab24ef83853677328dd272ea88a3aa9f7afaeab6a88f2eb04ce09e3354ccd4f5eb4752343ae814cae582498b40c8d098eb276ca9112368a7fe347f7049747d7b5c55298330ed23c19de74fc56c55f0e0999de5eebbe5882e9b69981e47e096ce6388741b7fcc711f2ac2089ef775214fc3a1e175c01f4014285c71ff128736759edb4b525e639b0cb4bda9f5977494a23e70a88eae10f6f4e8c5c6c5c9471e1ddfadf1b3bde419f1a2438cda4069073c9527ae63af83b6e6e6d17bbb9d266bca8c4f76ca2db3b06d5bef0fb39db59b6a24bf76ede733ef24b04c45e0163bdce94192df8765c912b4992da62f406eb1cf79f537d9f7fca055b005395d96c4b2bb36d1aba653339e1e0019bc8e77773baa5450ea6bced0d73ed55d670e474aa2d856d6b991ce25f5788bdda140ea2ad80b03ceb73c21932c75b3931777fba8b6033a123615256409d356f5821fa5097c4a12df113ea0788620920061e8b440aea44c557ab1cbbf0600c4ad2ce47472124e2a57f0b18602818b96a0ad61a98c20fde5fc8d1141db3d4e7073213e9ebc1755ce1f87a09e1efbc57b3fb4ab21ae38c6811e2aa37849f35648cc4419e507bb44c044e93a9681b0c533a8e1cf5a7f10f4c27b7a00f9c4ed6d6056c3059f0bb52e1d3c8a551c246308e57b6fe363e9c0d5b853aaa3d17784deed0b92414f1a74a33dcaa385064d876b7f8951b96466789a6fae9867848e50a72b992047973dfc242e1b1655a54eb7d11e6d77ddd727528c94a9316a1f749c27552cc8819c4ef05666f69914faea9ff0a41abb78739f4b55cea4bcd510524a4e935f577ae88a745e416e08e4f31c342d1919dee856b544286e0163967517aa13f205ebea8b5fdf299f370c2240fa7052e063e180b04967fe967c8b2a9a9acc670ddf2cee297a240b2552a69f35a9823c83efe36ab21c3774aaf7a2b78ec2df98accb042001118ed264660ce58800778ebfe0ea8cf97bd61fcd3560690708a0db883b47d8447bced495a4f13b203ad815c9d256d68cd6815309698ee9b9b83117c58e710657f88cff4661e258b3c86c6ca4b4d05c886e3754512f7e6169203e29af0c6491226ca20ec11d1147ea3b753679a755bd6e02078874a4e5440856bc13c02d2014927292764b0b97199d0e994d749b0cdfbd793831e9467dffde0d9f391d4a49fce6256ec54a057db3d1b0a7fa53cdbded3e9b45ab30ec145c17913a3446d6a7555f91609978596d31674c557f715a1432342e37350058c8db473673fc3082a3ccaa89546bcd4db9adbec7107ffa24572796e07d5e1d5b68cb033f7cd931050f89732f664a54bb36423015e272990eb3b960b0b6db27de17d8a58f013c3cebc45fff0cca0176bde7e66b8993377b359df0656578b4d122b532165e894989ea10f492a42c4f7391092d07b57ead567a3a93b590bf0d1d70055aa1a61eb539e9cdb66444b2f8983a6a15e21ae672d291dcbe113360658a3c1d0b0cd8a8d58c3cadf5c9233125c5fefa02696c5ea18f301084fe53474bcaf6ae689122ed875807dc5cf9311c76fc8ccb834c66791ec26f04ae635ebfdd73e36c01412258d3947314542a3bbf73c64742baabcf6358a2bdb37e7db21ef443aac38ca60374abab39dbb08124859e2b9a6dc3c6e7271816ecfa176bf6de230f8922c9ff0815"]}, @typed={0xa, 0x5f, 0x0, 0x0, @str='l-$%$\x00'}, @nested={0x28a, 0x68, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@local}, @generic="818037f0a116a723c76a8a719d0677c1ebdc999a0c396d54c310ca18d647154998efe74d2b785b9a3ca4436223742a558d5b1935dd962376c7323a637f2df9a3711e83f56ead196a203adf08f6097b773e45e5ed71a7e21339cc4a773b8e54e8b3bb9a8324300036687c8b528eacad4f6230fd8f923b296365ca31866ea57aed35a38b90282a2701271b066c81fa852a573cb758d17be931825732c43318ac8b4a1067e22485c2d246f00f286a00dac4619b4050e846b7199829b9556ee4a9994bd06521446360e9e03cd9bb29288d3df47aa70369719c3fdedaf7b66face18357ee226cb26c99", @generic="9e51cf2eb9e9b8f7b05a9a2f8bb72d6e5076d9addb0f498e4712126343ea16fefdd2d8ae37aea64891b7ebc56dcfbaa7e8e88ff96f43c52a5973cc1248f6c8f277156c927d5879add159e7392c15fbec5a1f8a028c03fb1d5c5571c85a8276d4fc3bd93d14df0ffbb1ba71a34b0acf86b394d919bfae8e9cce2e775bb8d7a6ddf89aeacc9881ef693947da9e6a94ebf83c996ffeb107f1094eb2c87c09e0c7a97d291ea90f8fcf4f8afd62b906e5125a7b6cf7be1890372fe48ce50e28dffaa68857893212aff5b66f0971549646d099385af360af43558489c7a9ef221312ca462f51fbb02de6b24a84e3b4670f4c3ffcb62f0c958f7f16", @generic="dd85f06a199a6a7db7ee9c2e27517a0e702018e4ff1693947af24690bc6b5b05d40a3c3851f4efa2741a9fd631b55f29fe5e5a550cdd20e162d000aeae5e34963c65ad81c5e6a8b5b539cb2bfd96ef65dd00ae3480494c6124e328b253d6a6d16c326c2d3cc6b032be04e4d711ff3df48f34d02adddf5db9db24966046eb52d019c7127459f7519a51daaa8b2737db67e4af7be770f6ce", @typed={0x8, 0x65, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x15e0}, 0x1, 0x0, 0x0, 0x8011}, 0x0) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) [ 1211.576980] FAULT_INJECTION: forcing a failure. [ 1211.576980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1211.578601] CPU: 1 PID: 14232 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1211.579993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1211.582497] Call Trace: [ 1211.583250] dump_stack+0x107/0x167 [ 1211.584189] should_fail.cold+0x5/0xa [ 1211.585161] _copy_from_user+0x2e/0x1b0 [ 1211.586148] __copy_msghdr_from_user+0x91/0x4b0 [ 1211.587318] ? __ia32_sys_shutdown+0x80/0x80 [ 1211.588356] ? udp_v6_push_pending_frames+0x360/0x360 [ 1211.589564] ? inet6_sendmsg+0xbd/0x140 [ 1211.590488] ? inet6_compat_ioctl+0x320/0x320 [ 1211.595425] ? __sock_sendmsg+0x55/0x190 [ 1211.595930] sendmsg_copy_msghdr+0xa1/0x160 [ 1211.596454] ? do_recvmmsg+0x6d0/0x6d0 [ 1211.596934] ? __lock_acquire+0x1657/0x5b00 [ 1211.597466] ___sys_sendmsg+0xc6/0x170 [ 1211.597941] ? sendmsg_copy_msghdr+0x160/0x160 [ 1211.598508] ? __fget_files+0x2cf/0x520 15:05:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:25 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 9) [ 1211.598994] ? lock_acquire+0x197/0x470 [ 1211.603507] ? find_held_lock+0x2c/0x110 [ 1211.604008] ? __might_fault+0xd3/0x180 [ 1211.604491] ? lock_downgrade+0x6d0/0x6d0 [ 1211.605006] __sys_sendmmsg+0x195/0x470 [ 1211.605493] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1211.606017] ? lock_downgrade+0x6d0/0x6d0 [ 1211.606538] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1211.607132] ? wait_for_completion_io+0x270/0x270 [ 1211.611750] ? rcu_read_lock_any_held+0x75/0xa0 [ 1211.612317] ? vfs_write+0x354/0xb10 [ 1211.612770] ? fput_many+0x2f/0x1a0 [ 1211.613218] ? ksys_write+0x1a9/0x260 [ 1211.613680] ? __ia32_sys_read+0xb0/0xb0 [ 1211.614183] __x64_sys_sendmmsg+0x99/0x100 [ 1211.614697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1211.615337] do_syscall_64+0x33/0x40 [ 1211.615791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1211.616413] RIP: 0033:0x7f87fda10b19 [ 1211.616866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1211.619100] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1211.620042] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1211.620914] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1211.621781] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1211.622647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.623527] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:05:38 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x540b, &(0x7f0000000040)=0x4) 15:05:38 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r2 = fork() r3 = epoll_create(0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000000}) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='/\x00', 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x20000000}) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x60000003}) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:05:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 10) 15:05:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 12) 15:05:38 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:38 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r0, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:05:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5415, &(0x7f0000000040)=0x4) [ 1224.611021] FAULT_INJECTION: forcing a failure. [ 1224.611021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.612616] CPU: 1 PID: 14346 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1224.613512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1224.614583] Call Trace: [ 1224.614936] dump_stack+0x107/0x167 [ 1224.615415] should_fail.cold+0x5/0xa [ 1224.615932] _copy_from_user+0x2e/0x1b0 [ 1224.616458] __copy_msghdr_from_user+0x91/0x4b0 [ 1224.617070] ? __ia32_sys_shutdown+0x80/0x80 [ 1224.617653] ? udp_v6_push_pending_frames+0x360/0x360 [ 1224.618334] ? inet6_sendmsg+0xbd/0x140 [ 1224.618856] ? inet6_compat_ioctl+0x320/0x320 [ 1224.619441] ? __sock_sendmsg+0x55/0x190 [ 1224.620000] sendmsg_copy_msghdr+0xa1/0x160 [ 1224.620566] ? do_recvmmsg+0x6d0/0x6d0 [ 1224.621060] ? __lock_acquire+0x1657/0x5b00 [ 1224.621619] ___sys_sendmsg+0xc6/0x170 [ 1224.622128] ? sendmsg_copy_msghdr+0x160/0x160 [ 1224.622729] ? __fget_files+0x2cf/0x520 [ 1224.623254] ? lock_acquire+0x197/0x470 [ 1224.623789] ? find_held_lock+0x2c/0x110 [ 1224.624329] ? __might_fault+0xd3/0x180 [ 1224.624848] ? lock_downgrade+0x6d0/0x6d0 [ 1224.625406] __sys_sendmmsg+0x195/0x470 [ 1224.625931] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1224.626495] ? lock_downgrade+0x6d0/0x6d0 [ 1224.627054] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1224.627696] ? wait_for_completion_io+0x270/0x270 [ 1224.628338] ? rcu_read_lock_any_held+0x75/0xa0 [ 1224.628949] ? vfs_write+0x354/0xb10 [ 1224.629436] ? fput_many+0x2f/0x1a0 [ 1224.629909] ? ksys_write+0x1a9/0x260 [ 1224.630410] ? __ia32_sys_read+0xb0/0xb0 [ 1224.630946] __x64_sys_sendmmsg+0x99/0x100 [ 1224.631497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1224.632192] do_syscall_64+0x33/0x40 [ 1224.632680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1224.633349] RIP: 0033:0x7f87fda10b19 [ 1224.633840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1224.636233] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1224.637230] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1224.638140] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1224.639066] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1224.640013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1224.640934] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1224.694055] FAULT_INJECTION: forcing a failure. [ 1224.694055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.695849] CPU: 0 PID: 14345 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1224.696750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1224.697821] Call Trace: [ 1224.698176] dump_stack+0x107/0x167 [ 1224.698662] should_fail.cold+0x5/0xa [ 1224.699172] _copy_from_user+0x2e/0x1b0 [ 1224.699715] __copy_msghdr_from_user+0x91/0x4b0 [ 1224.700333] ? __ia32_sys_shutdown+0x80/0x80 [ 1224.700921] ? udp_v6_push_pending_frames+0x360/0x360 [ 1224.701588] ? inet6_sendmsg+0xbd/0x140 [ 1224.702115] ? inet6_compat_ioctl+0x320/0x320 [ 1224.702704] ? __sock_sendmsg+0x55/0x190 [ 1224.703250] sendmsg_copy_msghdr+0xa1/0x160 [ 1224.703840] ? do_recvmmsg+0x6d0/0x6d0 [ 1224.704359] ? __lock_acquire+0x1657/0x5b00 [ 1224.704934] ___sys_sendmsg+0xc6/0x170 [ 1224.705444] ? sendmsg_copy_msghdr+0x160/0x160 [ 1224.706048] ? __fget_files+0x2cf/0x520 [ 1224.706577] ? lock_acquire+0x197/0x470 [ 1224.707101] ? find_held_lock+0x2c/0x110 [ 1224.707639] ? __might_fault+0xd3/0x180 [ 1224.708185] ? lock_downgrade+0x6d0/0x6d0 [ 1224.708746] __sys_sendmmsg+0x195/0x470 [ 1224.709270] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1224.709823] ? lock_downgrade+0x6d0/0x6d0 [ 1224.710376] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1224.711012] ? wait_for_completion_io+0x270/0x270 [ 1224.711654] ? rcu_read_lock_any_held+0x75/0xa0 [ 1224.712300] ? vfs_write+0x354/0xb10 [ 1224.712791] ? fput_many+0x2f/0x1a0 [ 1224.713263] ? ksys_write+0x1a9/0x260 [ 1224.713769] ? __ia32_sys_read+0xb0/0xb0 [ 1224.714308] __x64_sys_sendmmsg+0x99/0x100 [ 1224.714869] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1224.715546] do_syscall_64+0x33/0x40 [ 1224.716050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1224.716717] RIP: 0033:0x7fd3a7c24b19 [ 1224.717212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:05:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5416, &(0x7f0000000040)=0x4) 15:05:39 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x540c, &(0x7f0000000040)=0x4) 15:05:39 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1224.719590] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1224.720620] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1224.721557] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1224.732124] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1224.733052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1224.733993] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:05:52 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1237.723651] FAULT_INJECTION: forcing a failure. [ 1237.723651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.725142] CPU: 0 PID: 14482 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1237.725988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1237.727002] Call Trace: [ 1237.727331] dump_stack+0x107/0x167 [ 1237.727777] should_fail.cold+0x5/0xa [ 1237.728277] _copy_from_user+0x2e/0x1b0 [ 1237.728768] __copy_msghdr_from_user+0x91/0x4b0 [ 1237.729335] ? __ia32_sys_shutdown+0x80/0x80 [ 1237.729870] ? udp_v6_push_pending_frames+0x360/0x360 [ 1237.730506] ? inet6_sendmsg+0xbd/0x140 [ 1237.730994] ? inet6_compat_ioctl+0x320/0x320 [ 1237.731537] ? __sock_sendmsg+0x55/0x190 [ 1237.732034] sendmsg_copy_msghdr+0xa1/0x160 [ 1237.732618] ? do_recvmmsg+0x6d0/0x6d0 [ 1237.733100] ? __lock_acquire+0x1657/0x5b00 [ 1237.733632] ___sys_sendmsg+0xc6/0x170 [ 1237.734111] ? sendmsg_copy_msghdr+0x160/0x160 [ 1237.734669] ? __fget_files+0x2cf/0x520 [ 1237.735156] ? lock_acquire+0x197/0x470 [ 1237.735638] ? find_held_lock+0x2c/0x110 [ 1237.736153] ? __might_fault+0xd3/0x180 [ 1237.736643] ? lock_downgrade+0x6d0/0x6d0 [ 1237.737159] __sys_sendmmsg+0x195/0x470 [ 1237.737647] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1237.738176] ? lock_downgrade+0x6d0/0x6d0 [ 1237.738691] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1237.739279] ? wait_for_completion_io+0x270/0x270 [ 1237.739867] ? rcu_read_lock_any_held+0x75/0xa0 [ 1237.740454] ? vfs_write+0x354/0xb10 [ 1237.740906] ? fput_many+0x2f/0x1a0 [ 1237.741349] ? ksys_write+0x1a9/0x260 [ 1237.741812] ? __ia32_sys_read+0xb0/0xb0 [ 1237.742310] __x64_sys_sendmmsg+0x99/0x100 [ 1237.742825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1237.743450] do_syscall_64+0x33/0x40 [ 1237.743903] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1237.744560] RIP: 0033:0x7f87fda10b19 [ 1237.745024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1237.747265] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1237.748206] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1237.749075] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1237.749942] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1237.750807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1237.751674] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:05:52 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 13) 15:05:52 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x540d, &(0x7f0000000040)=0x4) 15:05:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 11) 15:05:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5418, &(0x7f0000000040)=0x4) 15:05:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x800) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) fork() ptrace$setsig(0x4203, 0xffffffffffffffff, 0x4, &(0x7f0000000000)={0x41, 0xffffffff, 0x29}) 15:05:52 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r0, 0x3, 0xb5e46223464a3991) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r3, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 1237.776879] FAULT_INJECTION: forcing a failure. [ 1237.776879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.778323] CPU: 0 PID: 14492 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1237.779164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1237.780201] Call Trace: [ 1237.780540] dump_stack+0x107/0x167 [ 1237.781003] should_fail.cold+0x5/0xa [ 1237.781476] _copy_from_user+0x2e/0x1b0 [ 1237.781966] __copy_msghdr_from_user+0x91/0x4b0 [ 1237.782534] ? __ia32_sys_shutdown+0x80/0x80 [ 1237.783074] ? udp_v6_push_pending_frames+0x360/0x360 [ 1237.783707] ? inet6_sendmsg+0xbd/0x140 [ 1237.784205] ? inet6_compat_ioctl+0x320/0x320 [ 1237.784797] ? __sock_sendmsg+0x55/0x190 [ 1237.785297] sendmsg_copy_msghdr+0xa1/0x160 [ 1237.785824] ? do_recvmmsg+0x6d0/0x6d0 [ 1237.786302] ? __lock_acquire+0x1657/0x5b00 [ 1237.786837] ___sys_sendmsg+0xc6/0x170 [ 1237.787320] ? sendmsg_copy_msghdr+0x160/0x160 [ 1237.787880] ? __fget_files+0x2cf/0x520 [ 1237.788391] ? lock_acquire+0x197/0x470 [ 1237.788880] ? find_held_lock+0x2c/0x110 [ 1237.789382] ? __might_fault+0xd3/0x180 [ 1237.789867] ? lock_downgrade+0x6d0/0x6d0 [ 1237.790387] __sys_sendmmsg+0x195/0x470 [ 1237.790878] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1237.791405] ? lock_downgrade+0x6d0/0x6d0 15:05:52 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1237.791924] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1237.812562] ? wait_for_completion_io+0x270/0x270 [ 1237.812577] ? rcu_read_lock_any_held+0x75/0xa0 [ 1237.812588] ? vfs_write+0x354/0xb10 [ 1237.812599] ? fput_many+0x2f/0x1a0 [ 1237.812611] ? ksys_write+0x1a9/0x260 [ 1237.812623] ? __ia32_sys_read+0xb0/0xb0 [ 1237.812639] __x64_sys_sendmmsg+0x99/0x100 [ 1237.812651] ? syscall_enter_from_user_mode+0x1d/0x50 15:05:52 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5413, &(0x7f0000000040)=0x4) [ 1237.812661] do_syscall_64+0x33/0x40 [ 1237.812672] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1237.812680] RIP: 0033:0x7fd3a7c24b19 [ 1237.812691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1237.812697] RSP: 002b:00007fd3a5179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1237.812710] RAX: ffffffffffffffda RBX: 00007fd3a7d38020 RCX: 00007fd3a7c24b19 [ 1237.812717] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1237.812723] RBP: 00007fd3a51791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1237.812729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1237.812736] R13: 00007ffe7824451f R14: 00007fd3a5179300 R15: 0000000000022000 15:05:52 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 14) 15:05:52 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 12) 15:05:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1237.947731] FAULT_INJECTION: forcing a failure. [ 1237.947731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.949263] CPU: 0 PID: 14606 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1237.950108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1237.951123] Call Trace: [ 1237.951458] dump_stack+0x107/0x167 [ 1237.951903] should_fail.cold+0x5/0xa [ 1237.956412] _copy_from_user+0x2e/0x1b0 [ 1237.956903] __copy_msghdr_from_user+0x91/0x4b0 [ 1237.957469] ? __ia32_sys_shutdown+0x80/0x80 [ 1237.958007] ? udp_v6_push_pending_frames+0x360/0x360 [ 1237.958637] ? inet6_sendmsg+0xbd/0x140 [ 1237.959120] ? inet6_compat_ioctl+0x320/0x320 [ 1237.959663] ? __sock_sendmsg+0x55/0x190 [ 1237.960172] sendmsg_copy_msghdr+0xa1/0x160 [ 1237.960704] ? do_recvmmsg+0x6d0/0x6d0 [ 1237.961185] ? __lock_acquire+0x1657/0x5b00 [ 1237.961720] ___sys_sendmsg+0xc6/0x170 [ 1237.962197] ? sendmsg_copy_msghdr+0x160/0x160 [ 1237.962759] ? __fget_files+0x2cf/0x520 [ 1237.963248] ? lock_acquire+0x197/0x470 [ 1237.963734] ? find_held_lock+0x2c/0x110 [ 1237.964247] ? __might_fault+0xd3/0x180 [ 1237.964733] ? lock_downgrade+0x6d0/0x6d0 [ 1237.965252] __sys_sendmmsg+0x195/0x470 [ 1237.965740] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1237.966270] ? lock_downgrade+0x6d0/0x6d0 [ 1237.966788] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1237.967381] ? wait_for_completion_io+0x270/0x270 [ 1237.967972] ? rcu_read_lock_any_held+0x75/0xa0 [ 1237.968566] ? vfs_write+0x354/0xb10 [ 1237.969019] ? fput_many+0x2f/0x1a0 [ 1237.969464] ? ksys_write+0x1a9/0x260 [ 1237.969930] ? __ia32_sys_read+0xb0/0xb0 [ 1237.970435] __x64_sys_sendmmsg+0x99/0x100 [ 1237.970948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1237.971573] do_syscall_64+0x33/0x40 [ 1237.972025] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1237.972664] RIP: 0033:0x7fd3a7c24b19 [ 1237.973117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1237.975373] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1237.980333] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1237.981209] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1237.982176] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1237.983148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1237.984114] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1237.985139] FAULT_INJECTION: forcing a failure. [ 1237.985139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.986618] CPU: 1 PID: 14611 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1237.987459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1237.988488] Call Trace: [ 1237.988811] dump_stack+0x107/0x167 [ 1237.989254] should_fail.cold+0x5/0xa [ 1237.989720] _copy_from_user+0x2e/0x1b0 [ 1237.990207] __copy_msghdr_from_user+0x91/0x4b0 [ 1237.990772] ? __ia32_sys_shutdown+0x80/0x80 [ 1237.991308] ? udp_v6_push_pending_frames+0x360/0x360 [ 1237.991940] ? inet6_sendmsg+0xbd/0x140 [ 1237.992443] ? inet6_compat_ioctl+0x320/0x320 [ 1237.992991] ? __sock_sendmsg+0x55/0x190 [ 1237.993488] sendmsg_copy_msghdr+0xa1/0x160 [ 1237.994014] ? do_recvmmsg+0x6d0/0x6d0 [ 1237.994490] ? __lock_acquire+0x1657/0x5b00 [ 1237.995023] ___sys_sendmsg+0xc6/0x170 [ 1237.995505] ? sendmsg_copy_msghdr+0x160/0x160 [ 1237.996062] ? __fget_files+0x2cf/0x520 [ 1237.996564] ? lock_acquire+0x197/0x470 [ 1237.997047] ? find_held_lock+0x2c/0x110 [ 1237.997544] ? __might_fault+0xd3/0x180 [ 1237.998028] ? lock_downgrade+0x6d0/0x6d0 [ 1237.998545] __sys_sendmmsg+0x195/0x470 [ 1237.999033] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1237.999559] ? lock_downgrade+0x6d0/0x6d0 [ 1238.000074] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1238.000677] ? wait_for_completion_io+0x270/0x270 [ 1238.001264] ? rcu_read_lock_any_held+0x75/0xa0 [ 1238.001829] ? vfs_write+0x354/0xb10 [ 1238.002282] ? fput_many+0x2f/0x1a0 [ 1238.002732] ? ksys_write+0x1a9/0x260 [ 1238.003197] ? __ia32_sys_read+0xb0/0xb0 [ 1238.003698] __x64_sys_sendmmsg+0x99/0x100 [ 1238.004237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1238.004864] do_syscall_64+0x33/0x40 [ 1238.005316] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1238.005943] RIP: 0033:0x7f87fda10b19 [ 1238.006395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.008647] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1238.009572] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1238.010438] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1238.011303] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.012187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.013055] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:05:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xf, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:52 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)=0x4) 15:05:52 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = fork() clock_gettime(0x0, &(0x7f0000002d80)) ptrace(0x4207, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') ptrace$setsig(0x4203, r1, 0x2, &(0x7f00000002c0)={0xc, 0x93de, 0x6}) 15:05:52 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 15) 15:05:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000040)=0x4) 15:05:52 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:05:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541d, &(0x7f0000000040)=0x4) [ 1238.110992] FAULT_INJECTION: forcing a failure. [ 1238.110992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.112623] CPU: 0 PID: 14629 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1238.113479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1238.114493] Call Trace: [ 1238.114821] dump_stack+0x107/0x167 [ 1238.115268] should_fail.cold+0x5/0xa [ 1238.115742] _copy_from_user+0x2e/0x1b0 [ 1238.116258] __copy_msghdr_from_user+0x91/0x4b0 [ 1238.116835] ? __ia32_sys_shutdown+0x80/0x80 [ 1238.117377] ? udp_v6_push_pending_frames+0x360/0x360 [ 1238.118013] ? inet6_sendmsg+0xbd/0x140 [ 1238.118502] ? inet6_compat_ioctl+0x320/0x320 [ 1238.119049] ? __sock_sendmsg+0x55/0x190 [ 1238.119551] sendmsg_copy_msghdr+0xa1/0x160 [ 1238.120085] ? do_recvmmsg+0x6d0/0x6d0 [ 1238.120587] ? __lock_acquire+0x1657/0x5b00 [ 1238.121120] ___sys_sendmsg+0xc6/0x170 [ 1238.121596] ? sendmsg_copy_msghdr+0x160/0x160 [ 1238.122155] ? __fget_files+0x2cf/0x520 [ 1238.122643] ? lock_acquire+0x197/0x470 [ 1238.123131] ? find_held_lock+0x2c/0x110 [ 1238.123629] ? __might_fault+0xd3/0x180 [ 1238.124111] ? lock_downgrade+0x6d0/0x6d0 [ 1238.124653] __sys_sendmmsg+0x195/0x470 [ 1238.125148] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1238.125674] ? lock_downgrade+0x6d0/0x6d0 [ 1238.126190] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1238.126779] ? wait_for_completion_io+0x270/0x270 [ 1238.127368] ? rcu_read_lock_any_held+0x75/0xa0 [ 1238.127933] ? vfs_write+0x354/0xb10 [ 1238.128401] ? fput_many+0x2f/0x1a0 [ 1238.128845] ? ksys_write+0x1a9/0x260 [ 1238.129311] ? __ia32_sys_read+0xb0/0xb0 [ 1238.129809] __x64_sys_sendmmsg+0x99/0x100 [ 1238.130325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1238.130952] do_syscall_64+0x33/0x40 [ 1238.131406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1238.132028] RIP: 0033:0x7fd3a7c24b19 [ 1238.132500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.134742] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1238.135670] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1238.136564] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1238.137434] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.138309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.139182] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:06:06 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5415, &(0x7f0000000040)=0x4) 15:06:06 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xf, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:06 executing program 0: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x401, 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) r2 = fork() ptrace(0x10, r2) ptrace(0x10, r1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x7ff, 0x81}, {0x2, 0xffff}, {0xa07, 0x7}, {0x101, 0x3600}, {0x7f, 0xf60d}, {0x1, 0x4}, {0xffff, 0x480}]}) 15:06:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 16) 15:06:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000040)=0x4) 15:06:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 13) 15:06:06 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, 0x0, 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 1252.017220] FAULT_INJECTION: forcing a failure. [ 1252.017220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1252.018767] CPU: 1 PID: 14747 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1252.019653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1252.020736] Call Trace: [ 1252.021083] dump_stack+0x107/0x167 [ 1252.021558] should_fail.cold+0x5/0xa [ 1252.022057] _copy_from_user+0x2e/0x1b0 [ 1252.022575] __copy_msghdr_from_user+0x91/0x4b0 [ 1252.023176] ? __ia32_sys_shutdown+0x80/0x80 [ 1252.023745] ? udp_v6_push_pending_frames+0x360/0x360 [ 1252.024417] ? inet6_sendmsg+0xbd/0x140 [ 1252.024951] ? inet6_compat_ioctl+0x320/0x320 [ 1252.025526] ? __sock_sendmsg+0x55/0x190 [ 1252.026057] sendmsg_copy_msghdr+0xa1/0x160 [ 1252.026613] ? do_recvmmsg+0x6d0/0x6d0 [ 1252.027122] ? __lock_acquire+0x1657/0x5b00 [ 1252.027688] ___sys_sendmsg+0xc6/0x170 [ 1252.028191] ? sendmsg_copy_msghdr+0x160/0x160 [ 1252.028802] ? __fget_files+0x2cf/0x520 [ 1252.029318] ? lock_acquire+0x197/0x470 [ 1252.029830] ? find_held_lock+0x2c/0x110 [ 1252.030361] ? __might_fault+0xd3/0x180 [ 1252.030873] ? lock_downgrade+0x6d0/0x6d0 [ 1252.031426] __sys_sendmmsg+0x195/0x470 [ 1252.031944] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1252.032499] ? lock_downgrade+0x6d0/0x6d0 [ 1252.033035] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1252.033621] ? wait_for_completion_io+0x270/0x270 [ 1252.034205] ? rcu_read_lock_any_held+0x75/0xa0 [ 1252.034765] ? vfs_write+0x354/0xb10 [ 1252.035216] ? fput_many+0x2f/0x1a0 [ 1252.035656] ? ksys_write+0x1a9/0x260 [ 1252.036115] ? __ia32_sys_read+0xb0/0xb0 [ 1252.052633] __x64_sys_sendmmsg+0x99/0x100 [ 1252.053200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1252.053871] do_syscall_64+0x33/0x40 [ 1252.054353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1252.055014] RIP: 0033:0x7f87fda10b19 [ 1252.055498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.057871] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1252.058850] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1252.059769] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1252.060693] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.061605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1252.062517] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:06:06 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5416, &(0x7f0000000040)=0x4) 15:06:06 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000040)=0x4) 15:06:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1252.157596] FAULT_INJECTION: forcing a failure. [ 1252.157596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1252.159110] CPU: 0 PID: 14744 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1252.159957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1252.161001] Call Trace: [ 1252.161330] dump_stack+0x107/0x167 [ 1252.161775] should_fail.cold+0x5/0xa [ 1252.162244] _copy_from_user+0x2e/0x1b0 [ 1252.162735] __copy_msghdr_from_user+0x91/0x4b0 [ 1252.163304] ? __ia32_sys_shutdown+0x80/0x80 [ 1252.163848] ? udp_v6_push_pending_frames+0x360/0x360 [ 1252.164478] ? inet6_sendmsg+0xbd/0x140 [ 1252.164988] ? inet6_compat_ioctl+0x320/0x320 [ 1252.165534] ? __sock_sendmsg+0x55/0x190 [ 1252.166033] sendmsg_copy_msghdr+0xa1/0x160 [ 1252.166559] ? do_recvmmsg+0x6d0/0x6d0 [ 1252.167038] ? __lock_acquire+0x1657/0x5b00 [ 1252.167571] ___sys_sendmsg+0xc6/0x170 [ 1252.168046] ? sendmsg_copy_msghdr+0x160/0x160 [ 1252.168606] ? __fget_files+0x2cf/0x520 [ 1252.173128] ? lock_acquire+0x197/0x470 [ 1252.173612] ? find_held_lock+0x2c/0x110 [ 1252.174109] ? __might_fault+0xd3/0x180 [ 1252.174592] ? lock_downgrade+0x6d0/0x6d0 [ 1252.175107] __sys_sendmmsg+0x195/0x470 [ 1252.175595] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1252.176119] ? lock_downgrade+0x6d0/0x6d0 [ 1252.176648] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1252.177252] ? wait_for_completion_io+0x270/0x270 [ 1252.177842] ? rcu_read_lock_any_held+0x75/0xa0 [ 1252.178409] ? vfs_write+0x354/0xb10 [ 1252.178861] ? fput_many+0x2f/0x1a0 [ 1252.179304] ? ksys_write+0x1a9/0x260 [ 1252.179767] ? __ia32_sys_read+0xb0/0xb0 [ 1252.180265] __x64_sys_sendmmsg+0x99/0x100 [ 1252.180801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1252.181429] do_syscall_64+0x33/0x40 [ 1252.181882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1252.182511] RIP: 0033:0x7fd3a7c24b19 [ 1252.182967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.185222] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1252.186156] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1252.187026] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1252.187894] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.192799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1252.193668] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:06:06 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, 0x0, 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:06:19 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, 0x0, 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:06:19 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 17) 15:06:19 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 14) 15:06:19 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5418, &(0x7f0000000040)=0x4) 15:06:19 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x30, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:19 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = fork() r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r3 = fork() ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r4 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x7, 0x6, &(0x7f0000000600)=[{&(0x7f0000000140)="07e5ebcf1c7649f38f23aedcb90f8bab1b64c02aa978bc3285a910b69ea3dccd46e27231e0733388a913c8e99085f7ef1fa25ed5a6159bfa847bbab2e9a7df85ad45338cf7f9627e2a7a14cada69183a9b", 0x51, 0x2}, {&(0x7f00000001c0)="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", 0xfc, 0x8000000000000000}, {&(0x7f00000002c0)="47470aa572f777f490d507e0ad49f00a1faa887220ae688716bb2102daca2bdce8a3862a069269509f5c0c252fccc70155584807bef2e872015e84ccfdc7a8ecc39dd6783229f1fdbd87a27d143f201b02d981fb0af22e55bddabd1854deef45828db08338854b303fc94b87814da968e19fb91b0dd95cab1bbdf78cf9b8823c72b7a4f6f96e57289f9e7d27a3f6d744542bc137f1c790bc04a1da31c3a1cc325644c107e80569cbb2585e6100213b7f13971cb8218de44fccf239a1eacd5a9fe686dbd5dd8ba1e7b85566f097b247b7031ed69bd85e1ab84d551619f1", 0xdd, 0x9}, {&(0x7f00000003c0)="cf63c63b550f7e2c385d26013e6d1f2e4774b792d320ea05daf7e27b4fafec163c44d97854ef55ef160e8588f8ac07344feab3aa793ae5be7e5026bd50021cb95393e2f0312a840a935fc11afb8a025cd11c2d64d51a17bf0fd7ac4daf9b8bd4ffb854669d7c724ea766dfe2878381ab5096b9ed1bc9ffec592d5401205cf364575c56e6d5294478c324fb25bd61c57e292ee35e9c99b648fb025b429c0c2a8b9063f4112547decc44b2", 0xaa, 0x1}, {&(0x7f0000000480)="3fd5db19ec3130cc963ba3cad00928700251d1f604d817ad6e8d1715966af567a706f2aeed383443fe61b5a1bbcaa4f93126b1ecce8e6da16ac3c3661ffea833741f1abf7fed5038eea0b6f61f8ee0c95556ca396c0436c596ad008c8e6fe5f89f1e53553c69cf96bdaff7254d06cdd32f47482ef00f626efd434230d4e1abd9ab98d27005903a1ed0aff7169c2f5769e39f2d0b530106fff00c7b4400d1404f7b4d430941ed056fb762092a62f9c01ba9be8adcbef508d7391f764df7ba5a64847d200db0d97248844427299129f4a3", 0xd0, 0x49}, {&(0x7f0000000580)="3774aba9cf1312c0e46da2f62b1f43ef00e3c9448ccb10927f82baa9bfe515c204b19be513e97d79d6f66fa914db93ec9f3c1bb911bc29c13c9362bc69456fedb23d7d4ccc141b9e570e", 0x4a, 0x100}], 0x10, &(0x7f00000006c0)={[{}, {'+\\\'[*\xe4[&{{+#'}, {}], [{@subj_type}]}) kcmp(r2, r3, 0x0, 0xffffffffffffffff, r4) ptrace(0x10, r1) ptrace$setsig(0x4203, r0, 0x402004, &(0x7f0000000000)={0xffffffff, 0x7ff, 0x3}) 15:06:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5421, &(0x7f0000000040)=0x4) 15:06:19 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000040)=0x4) [ 1265.229098] FAULT_INJECTION: forcing a failure. [ 1265.229098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.230627] CPU: 0 PID: 14881 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1265.231473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1265.232486] Call Trace: [ 1265.232815] dump_stack+0x107/0x167 [ 1265.233286] should_fail.cold+0x5/0xa [ 1265.233760] _copy_from_user+0x2e/0x1b0 [ 1265.234252] __copy_msghdr_from_user+0x91/0x4b0 [ 1265.234823] ? __ia32_sys_shutdown+0x80/0x80 [ 1265.235366] ? udp_v6_push_pending_frames+0x360/0x360 [ 1265.236001] ? inet6_sendmsg+0xbd/0x140 [ 1265.236491] ? inet6_compat_ioctl+0x320/0x320 [ 1265.237042] ? __sock_sendmsg+0x55/0x190 [ 1265.238014] sendmsg_copy_msghdr+0xa1/0x160 [ 1265.239164] ? do_recvmmsg+0x6d0/0x6d0 [ 1265.240194] ? __lock_acquire+0x1657/0x5b00 [ 1265.241230] ___sys_sendmsg+0xc6/0x170 [ 1265.241715] ? sendmsg_copy_msghdr+0x160/0x160 [ 1265.242274] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1265.242914] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1265.243468] ? trace_hardirqs_on+0x5b/0x180 [ 1265.243999] ? lock_acquire+0x197/0x470 [ 1265.244489] ? find_held_lock+0x2c/0x110 [ 1265.244991] ? __might_fault+0xd3/0x180 [ 1265.245494] ? lock_downgrade+0x6d0/0x6d0 [ 1265.246002] ? io_schedule_timeout+0x140/0x140 [ 1265.246567] __sys_sendmmsg+0x195/0x470 [ 1265.247056] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1265.247582] ? lock_downgrade+0x6d0/0x6d0 [ 1265.248098] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1265.248691] ? wait_for_completion_io+0x270/0x270 [ 1265.249329] ? rcu_read_lock_any_held+0x75/0xa0 [ 1265.249899] ? vfs_write+0x354/0xb10 [ 1265.250356] ? fput_many+0x2f/0x1a0 [ 1265.250804] ? ksys_write+0x1a9/0x260 [ 1265.251270] ? __ia32_sys_read+0xb0/0xb0 [ 1265.251772] __x64_sys_sendmmsg+0x99/0x100 [ 1265.252292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1265.252922] do_syscall_64+0x33/0x40 [ 1265.253420] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1265.254047] RIP: 0033:0x7f87fda10b19 [ 1265.254504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1265.256760] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1265.257742] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1265.258616] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1265.259489] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 15:06:19 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1265.260363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1265.269377] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:06:19 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000040)=0x4) 15:06:19 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541d, &(0x7f0000000040)=0x4) 15:06:19 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000040)=0x4) [ 1265.376862] FAULT_INJECTION: forcing a failure. [ 1265.376862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.378440] CPU: 0 PID: 14889 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1265.379289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1265.380300] Call Trace: [ 1265.380629] dump_stack+0x107/0x167 [ 1265.381085] should_fail.cold+0x5/0xa [ 1265.381567] _copy_from_user+0x2e/0x1b0 [ 1265.382058] __copy_msghdr_from_user+0x91/0x4b0 [ 1265.382628] ? __ia32_sys_shutdown+0x80/0x80 [ 1265.383169] ? udp_v6_push_pending_frames+0x360/0x360 [ 1265.383804] ? inet6_sendmsg+0xbd/0x140 [ 1265.384291] ? inet6_compat_ioctl+0x320/0x320 [ 1265.384840] ? __sock_sendmsg+0x55/0x190 [ 1265.385363] sendmsg_copy_msghdr+0xa1/0x160 [ 1265.385890] ? do_recvmmsg+0x6d0/0x6d0 [ 1265.386371] ? __lock_acquire+0x1657/0x5b00 [ 1265.386912] ___sys_sendmsg+0xc6/0x170 [ 1265.387391] ? sendmsg_copy_msghdr+0x160/0x160 [ 1265.387952] ? __fget_files+0x2cf/0x520 [ 1265.388444] ? lock_acquire+0x197/0x470 [ 1265.388935] ? find_held_lock+0x2c/0x110 [ 1265.389478] ? __might_fault+0xd3/0x180 [ 1265.389964] ? lock_downgrade+0x6d0/0x6d0 [ 1265.390481] __sys_sendmmsg+0x195/0x470 [ 1265.390969] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1265.391494] ? lock_downgrade+0x6d0/0x6d0 [ 1265.392010] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1265.392598] ? wait_for_completion_io+0x270/0x270 [ 1265.393207] ? rcu_read_lock_any_held+0x75/0xa0 [ 1265.393774] ? vfs_write+0x354/0xb10 [ 1265.394225] ? fput_many+0x2f/0x1a0 [ 1265.394667] ? ksys_write+0x1a9/0x260 [ 1265.395130] ? __ia32_sys_read+0xb0/0xb0 [ 1265.395630] __x64_sys_sendmmsg+0x99/0x100 [ 1265.396150] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1265.396776] do_syscall_64+0x33/0x40 [ 1265.397245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1265.397870] RIP: 0033:0x7fd3a7c24b19 [ 1265.398323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1265.400570] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1265.401514] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1265.402384] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1265.403256] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.404123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1265.404996] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:06:19 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:06:19 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 18) 15:06:19 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x144) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x4, 0x8, 0x9, 0xfff, 0x81, "87b316ec3708b5849bed83216df299295de5f9", 0x8}) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:06:19 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 15) 15:06:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5425, &(0x7f0000000040)=0x4) 15:06:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1265.486093] FAULT_INJECTION: forcing a failure. [ 1265.486093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.487629] CPU: 1 PID: 15024 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1265.488485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1265.488954] FAULT_INJECTION: forcing a failure. [ 1265.488954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.489504] Call Trace: [ 1265.489523] dump_stack+0x107/0x167 [ 1265.489536] should_fail.cold+0x5/0xa [ 1265.489553] _copy_from_user+0x2e/0x1b0 [ 1265.489570] __copy_msghdr_from_user+0x91/0x4b0 [ 1265.489583] ? __ia32_sys_shutdown+0x80/0x80 [ 1265.489601] ? udp_v6_push_pending_frames+0x360/0x360 [ 1265.494373] ? inet6_sendmsg+0xbd/0x140 [ 1265.494860] ? inet6_compat_ioctl+0x320/0x320 [ 1265.495408] ? __sock_sendmsg+0x55/0x190 [ 1265.495908] sendmsg_copy_msghdr+0xa1/0x160 [ 1265.496436] ? do_recvmmsg+0x6d0/0x6d0 [ 1265.496916] ? __lock_acquire+0x1657/0x5b00 [ 1265.497468] ___sys_sendmsg+0xc6/0x170 [ 1265.497947] ? sendmsg_copy_msghdr+0x160/0x160 [ 1265.498509] ? __fget_files+0x2cf/0x520 [ 1265.498998] ? lock_acquire+0x197/0x470 [ 1265.499482] ? find_held_lock+0x2c/0x110 [ 1265.499985] ? __might_fault+0xd3/0x180 [ 1265.500471] ? lock_downgrade+0x6d0/0x6d0 [ 1265.500990] __sys_sendmmsg+0x195/0x470 [ 1265.501495] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1265.502022] ? lock_downgrade+0x6d0/0x6d0 [ 1265.502541] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1265.503134] ? wait_for_completion_io+0x270/0x270 [ 1265.503725] ? rcu_read_lock_any_held+0x75/0xa0 [ 1265.504299] ? vfs_write+0x354/0xb10 [ 1265.504754] ? fput_many+0x2f/0x1a0 [ 1265.505213] ? ksys_write+0x1a9/0x260 [ 1265.505680] ? __ia32_sys_read+0xb0/0xb0 [ 1265.506178] __x64_sys_sendmmsg+0x99/0x100 [ 1265.506689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1265.507316] do_syscall_64+0x33/0x40 [ 1265.507771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1265.508394] RIP: 0033:0x7f87fda10b19 [ 1265.508852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1265.511118] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1265.512053] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1265.512923] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1265.513814] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.514684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1265.515561] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1265.516453] CPU: 0 PID: 15023 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1265.517352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1265.518355] Call Trace: [ 1265.518676] dump_stack+0x107/0x167 [ 1265.519124] should_fail.cold+0x5/0xa [ 1265.519590] _copy_from_user+0x2e/0x1b0 [ 1265.520075] __copy_msghdr_from_user+0x91/0x4b0 [ 1265.520642] ? __ia32_sys_shutdown+0x80/0x80 [ 1265.521202] ? udp_v6_push_pending_frames+0x360/0x360 [ 1265.521829] ? inet6_sendmsg+0xbd/0x140 [ 1265.522312] ? inet6_compat_ioctl+0x320/0x320 [ 1265.522854] ? __sock_sendmsg+0x55/0x190 [ 1265.523352] sendmsg_copy_msghdr+0xa1/0x160 [ 1265.523876] ? do_recvmmsg+0x6d0/0x6d0 [ 1265.524349] ? __lock_acquire+0x1657/0x5b00 [ 1265.524879] ___sys_sendmsg+0xc6/0x170 [ 1265.525404] ? sendmsg_copy_msghdr+0x160/0x160 [ 1265.525960] ? __fget_files+0x2cf/0x520 [ 1265.526451] ? lock_acquire+0x197/0x470 [ 1265.526931] ? find_held_lock+0x2c/0x110 [ 1265.527426] ? __might_fault+0xd3/0x180 [ 1265.527908] ? lock_downgrade+0x6d0/0x6d0 [ 1265.528429] __sys_sendmmsg+0x195/0x470 [ 1265.528914] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1265.529463] ? lock_downgrade+0x6d0/0x6d0 [ 1265.529977] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1265.530566] ? wait_for_completion_io+0x270/0x270 [ 1265.531151] ? rcu_read_lock_any_held+0x75/0xa0 [ 1265.531713] ? vfs_write+0x354/0xb10 [ 1265.532170] ? fput_many+0x2f/0x1a0 [ 1265.532613] ? ksys_write+0x1a9/0x260 [ 1265.533083] ? __ia32_sys_read+0xb0/0xb0 [ 1265.533594] __x64_sys_sendmmsg+0x99/0x100 [ 1265.534113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1265.534737] do_syscall_64+0x33/0x40 [ 1265.535189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1265.535810] RIP: 0033:0x7fd3a7c24b19 [ 1265.536261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1265.538595] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1265.539518] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1265.540382] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1265.541265] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1265.542133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1265.542997] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:06:32 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000040)=0x4) 15:06:32 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 19) 15:06:32 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000000c0)={0x34, 0x93de, 0x6}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/38, 0x26}], 0x4, &(0x7f00000004c0)}, 0x100) ptrace$cont(0x31, 0x0, 0x5, 0x3) 15:06:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:32 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5427, &(0x7f0000000040)=0x4) 15:06:32 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:06:32 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 16) 15:06:32 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000040)=0x4) 15:06:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x2, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1278.417586] FAULT_INJECTION: forcing a failure. [ 1278.417586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1278.419048] CPU: 0 PID: 15154 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1278.419899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.420916] Call Trace: [ 1278.421247] dump_stack+0x107/0x167 [ 1278.421718] should_fail.cold+0x5/0xa [ 1278.422194] _copy_from_user+0x2e/0x1b0 [ 1278.422690] __copy_msghdr_from_user+0x91/0x4b0 [ 1278.423263] ? __ia32_sys_shutdown+0x80/0x80 [ 1278.423808] ? udp_v6_push_pending_frames+0x360/0x360 [ 1278.424444] ? inet6_sendmsg+0xbd/0x140 [ 1278.424939] ? inet6_compat_ioctl+0x320/0x320 [ 1278.425489] ? __sock_sendmsg+0x55/0x190 [ 1278.426007] sendmsg_copy_msghdr+0xa1/0x160 [ 1278.426538] ? do_recvmmsg+0x6d0/0x6d0 [ 1278.427026] ? __lock_acquire+0x1657/0x5b00 [ 1278.427563] ___sys_sendmsg+0xc6/0x170 [ 1278.428043] ? sendmsg_copy_msghdr+0x160/0x160 [ 1278.428607] ? __fget_files+0x2cf/0x520 [ 1278.429099] ? lock_acquire+0x197/0x470 [ 1278.429600] ? find_held_lock+0x2c/0x110 [ 1278.430109] ? __might_fault+0xd3/0x180 [ 1278.430596] ? lock_downgrade+0x6d0/0x6d0 [ 1278.431116] __sys_sendmmsg+0x195/0x470 [ 1278.431609] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1278.431784] FAULT_INJECTION: forcing a failure. [ 1278.431784] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1278.432135] ? lock_downgrade+0x6d0/0x6d0 [ 1278.432160] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1278.432177] ? wait_for_completion_io+0x270/0x270 [ 1278.432192] ? rcu_read_lock_any_held+0x75/0xa0 [ 1278.435932] ? vfs_write+0x354/0xb10 [ 1278.436388] ? fput_many+0x2f/0x1a0 [ 1278.436837] ? ksys_write+0x1a9/0x260 [ 1278.437303] ? __ia32_sys_read+0xb0/0xb0 [ 1278.437815] __x64_sys_sendmmsg+0x99/0x100 [ 1278.438332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.438964] do_syscall_64+0x33/0x40 [ 1278.439422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.440056] RIP: 0033:0x7f87fda10b19 [ 1278.440513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1278.442947] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1278.444007] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1278.444999] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1278.445999] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1278.446986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1278.447968] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1278.448977] CPU: 1 PID: 15143 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1278.449958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.451081] Call Trace: [ 1278.451440] dump_stack+0x107/0x167 [ 1278.451941] should_fail.cold+0x5/0xa [ 1278.453284] __alloc_pages_nodemask+0x182/0x600 [ 1278.454815] ? lock_chain_count+0x20/0x20 [ 1278.456193] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1278.458240] alloc_pages_vma+0xbb/0x410 [ 1278.459534] wp_page_copy+0xee7/0x1f00 [ 1278.460832] ? print_bad_pte+0x5a0/0x5a0 [ 1278.462194] ? lock_downgrade+0x6d0/0x6d0 [ 1278.463565] ? vm_normal_page+0x162/0x2e0 [ 1278.464940] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1278.466757] do_wp_page+0x27b/0x1390 [ 1278.467975] handle_mm_fault+0x1cc7/0x3500 [ 1278.469381] ? __lock_acquire+0x1657/0x5b00 [ 1278.470850] ? __pmd_alloc+0x5e0/0x5e0 [ 1278.472146] ? vmacache_find+0x55/0x2a0 [ 1278.473469] do_user_addr_fault+0x56e/0xc60 [ 1278.474988] exc_page_fault+0xa2/0x1a0 [ 1278.476250] asm_exc_page_fault+0x1e/0x30 [ 1278.477635] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1278.479287] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 01 06 1d 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 e2 05 1d 02 66 90 48 bb f9 ef ff ff ff 7f [ 1278.485459] RSP: 0018:ffff888045fd7cf0 EFLAGS: 00050293 [ 1278.487217] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020005038 [ 1278.489576] RDX: 0000000000040000 RSI: ffffffff831114c2 RDI: ffff888047c63db8 [ 1278.491935] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000000 [ 1278.494300] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000c [ 1278.496655] R13: 0000000020005000 R14: 0000000000000400 R15: 00000000000003ff [ 1278.499047] ? __sys_sendmmsg+0x1c2/0x470 [ 1278.500405] __sys_sendmmsg+0x1cf/0x470 [ 1278.501727] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1278.503157] ? lock_downgrade+0x6d0/0x6d0 [ 1278.504520] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1278.506141] ? wait_for_completion_io+0x270/0x270 [ 1278.507725] ? rcu_read_lock_any_held+0x75/0xa0 [ 1278.509252] ? vfs_write+0x354/0xb10 15:06:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x3, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1278.510476] ? fput_many+0x2f/0x1a0 [ 1278.518429] ? ksys_write+0x1a9/0x260 [ 1278.519669] ? __ia32_sys_read+0xb0/0xb0 [ 1278.521046] __x64_sys_sendmmsg+0x99/0x100 [ 1278.522452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.524139] do_syscall_64+0x33/0x40 [ 1278.525351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1278.527050] RIP: 0033:0x7fd3a7c24b19 [ 1278.528265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1278.534503] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1278.537034] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1278.539411] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1278.541772] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 15:06:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5428, &(0x7f0000000040)=0x4) [ 1278.544126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1278.546603] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:06:32 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x2, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:32 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x3, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:32 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5421, &(0x7f0000000040)=0x4) 15:06:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000040)=0x4) 15:06:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:45 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 17) 15:06:45 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 20) 15:06:45 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000040)=0x4) 15:06:45 executing program 0: r0 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/194) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/47) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r1 = fork() ptrace(0x10, r1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x74) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000040)={0x5, 0x8, 0x1, 0x3f, 0x100}) 15:06:45 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:06:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:45 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5441, &(0x7f0000000040)=0x4) [ 1291.619063] FAULT_INJECTION: forcing a failure. [ 1291.619063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1291.620639] CPU: 1 PID: 15299 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1291.621545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1291.622652] Call Trace: [ 1291.623017] dump_stack+0x107/0x167 [ 1291.623499] should_fail.cold+0x5/0xa [ 1291.624008] _copy_from_user+0x2e/0x1b0 [ 1291.624543] __copy_msghdr_from_user+0x91/0x4b0 [ 1291.625160] ? __ia32_sys_shutdown+0x80/0x80 [ 1291.625745] ? udp_v6_push_pending_frames+0x360/0x360 [ 1291.626447] ? inet6_sendmsg+0xbd/0x140 [ 1291.626973] ? inet6_compat_ioctl+0x320/0x320 [ 1291.627568] ? __sock_sendmsg+0x55/0x190 [ 1291.628104] sendmsg_copy_msghdr+0xa1/0x160 [ 1291.628669] ? do_recvmmsg+0x6d0/0x6d0 [ 1291.629177] ? __lock_acquire+0x1657/0x5b00 [ 1291.629754] ___sys_sendmsg+0xc6/0x170 [ 1291.630285] ? sendmsg_copy_msghdr+0x160/0x160 [ 1291.630894] ? __fget_files+0x2cf/0x520 [ 1291.631419] ? lock_acquire+0x197/0x470 [ 1291.631948] ? find_held_lock+0x2c/0x110 [ 1291.632486] ? __might_fault+0xd3/0x180 [ 1291.633011] ? lock_downgrade+0x6d0/0x6d0 [ 1291.633570] __sys_sendmmsg+0x195/0x470 [ 1291.634122] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1291.634691] ? lock_downgrade+0x6d0/0x6d0 [ 1291.635255] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1291.635895] ? wait_for_completion_io+0x270/0x270 [ 1291.636536] ? rcu_read_lock_any_held+0x75/0xa0 [ 1291.637154] ? vfs_write+0x354/0xb10 [ 1291.637648] ? fput_many+0x2f/0x1a0 [ 1291.638155] ? ksys_write+0x1a9/0x260 [ 1291.638675] ? __ia32_sys_read+0xb0/0xb0 [ 1291.639219] __x64_sys_sendmmsg+0x99/0x100 [ 1291.639789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1291.640472] do_syscall_64+0x33/0x40 [ 1291.640973] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1291.641666] RIP: 0033:0x7f87fda10b19 [ 1291.642175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1291.644592] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1291.645603] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1291.646567] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1291.647517] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1291.648464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1291.649400] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1291.662045] FAULT_INJECTION: forcing a failure. [ 1291.662045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1291.663594] CPU: 0 PID: 15300 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1291.664500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1291.665580] Call Trace: [ 1291.665927] dump_stack+0x107/0x167 [ 1291.666437] should_fail.cold+0x5/0xa [ 1291.666962] _copy_from_user+0x2e/0x1b0 [ 1291.667488] __copy_msghdr_from_user+0x91/0x4b0 [ 1291.668111] ? __ia32_sys_shutdown+0x80/0x80 [ 1291.668693] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1291.669404] sendmsg_copy_msghdr+0xa1/0x160 [ 1291.669983] ? do_recvmmsg+0x6d0/0x6d0 [ 1291.670519] ? handle_mm_fault+0x9e9/0x3500 [ 1291.671086] ? __lock_acquire+0x1657/0x5b00 [ 1291.671671] ? find_held_lock+0x2c/0x110 [ 1291.672214] ___sys_sendmsg+0xc6/0x170 [ 1291.672741] ? sendmsg_copy_msghdr+0x160/0x160 [ 1291.673336] ? vmacache_find+0x55/0x2a0 [ 1291.673883] ? do_user_addr_fault+0x5b0/0xc60 [ 1291.674492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1291.675191] ? exc_page_fault+0xca/0x1a0 [ 1291.675737] ? trace_hardirqs_on+0x5b/0x180 [ 1291.676301] ? exc_page_fault+0xca/0x1a0 [ 1291.676846] ? asm_exc_page_fault+0x1e/0x30 [ 1291.677426] __sys_sendmmsg+0x195/0x470 [ 1291.677978] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1291.678556] ? lock_downgrade+0x6d0/0x6d0 [ 1291.679131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1291.679767] ? wait_for_completion_io+0x270/0x270 [ 1291.680412] ? rcu_read_lock_any_held+0x75/0xa0 [ 1291.681021] ? vfs_write+0x354/0xb10 [ 1291.681525] ? fput_many+0x2f/0x1a0 [ 1291.682018] ? ksys_write+0x1a9/0x260 [ 1291.682536] ? __ia32_sys_read+0xb0/0xb0 [ 1291.683076] __x64_sys_sendmmsg+0x99/0x100 [ 1291.683656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1291.684327] do_syscall_64+0x33/0x40 [ 1291.684844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1291.685532] RIP: 0033:0x7fd3a7c24b19 [ 1291.686041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1291.688446] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1291.689441] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1291.690386] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1291.691309] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1291.692233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1291.693162] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:06:58 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:58 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 21) 15:06:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x5, 0x6b, "d5906b5c6bee4f007e91c91911a6af778a4356", 0x1, 0x2}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) r4 = fork() r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80201, 0x0) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000280)=0x3) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x280c06, 0x0) ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f0000000180)={0x93c, 0x9}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000180000f5", @ANYRES32=r0, @ANYBLOB="f0ff0000000000002e2f66696c653000"]) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$VT_ACTIVATE(r7, 0x5606, 0x1) ptrace(0x4208, r3) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f00000001c0)={0x3, 0x5, 0x80}) ptrace$setsig(0x4203, r4, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:06:58 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000040)=0x4) 15:06:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5450, &(0x7f0000000040)=0x4) 15:06:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1c, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:58 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x0, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:06:58 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 18) 15:06:58 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1c, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1304.545960] FAULT_INJECTION: forcing a failure. [ 1304.545960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.549650] CPU: 0 PID: 15429 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1304.551847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.554461] Call Trace: [ 1304.555276] dump_stack+0x107/0x167 [ 1304.556400] should_fail.cold+0x5/0xa [ 1304.557588] _copy_from_user+0x2e/0x1b0 [ 1304.558834] __copy_msghdr_from_user+0x91/0x4b0 [ 1304.560285] ? __ia32_sys_shutdown+0x80/0x80 [ 1304.561646] ? udp_v6_push_pending_frames+0x360/0x360 [ 1304.567293] ? inet6_sendmsg+0xbd/0x140 [ 1304.568517] ? inet6_compat_ioctl+0x320/0x320 [ 1304.569907] ? __sock_sendmsg+0x55/0x190 [ 1304.571173] sendmsg_copy_msghdr+0xa1/0x160 [ 1304.572513] ? do_recvmmsg+0x6d0/0x6d0 [ 1304.573711] ? __lock_acquire+0x1657/0x5b00 [ 1304.575076] ___sys_sendmsg+0xc6/0x170 [ 1304.576272] ? sendmsg_copy_msghdr+0x160/0x160 [ 1304.577695] ? __fget_files+0x2cf/0x520 [ 1304.578952] ? lock_acquire+0x197/0x470 [ 1304.580183] ? find_held_lock+0x2c/0x110 [ 1304.581434] ? __might_fault+0xd3/0x180 [ 1304.582685] ? lock_downgrade+0x6d0/0x6d0 [ 1304.583971] __sys_sendmmsg+0x195/0x470 [ 1304.585207] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1304.586576] ? lock_downgrade+0x6d0/0x6d0 [ 1304.587872] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1304.589361] ? wait_for_completion_io+0x270/0x270 [ 1304.590872] ? rcu_read_lock_any_held+0x75/0xa0 [ 1304.592303] ? vfs_write+0x354/0xb10 [ 1304.593453] ? fput_many+0x2f/0x1a0 [ 1304.594599] ? ksys_write+0x1a9/0x260 [ 1304.595781] ? __ia32_sys_read+0xb0/0xb0 [ 1304.597031] __x64_sys_sendmmsg+0x99/0x100 [ 1304.598340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.599944] do_syscall_64+0x33/0x40 [ 1304.601096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.602697] RIP: 0033:0x7f87fda10b19 [ 1304.603849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.609638] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1304.612104] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1304.614340] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 15:06:58 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x30, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1304.616578] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.626814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1304.629032] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1304.648753] FAULT_INJECTION: forcing a failure. [ 1304.648753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.652621] CPU: 0 PID: 15419 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1304.654809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.657427] Call Trace: [ 1304.658229] dump_stack+0x107/0x167 [ 1304.663395] should_fail.cold+0x5/0xa [ 1304.664572] _copy_from_user+0x2e/0x1b0 [ 1304.665806] __copy_msghdr_from_user+0x91/0x4b0 [ 1304.667255] ? __ia32_sys_shutdown+0x80/0x80 [ 1304.668623] ? udp_v6_push_pending_frames+0x360/0x360 [ 1304.670218] ? inet6_sendmsg+0xbd/0x140 [ 1304.671461] ? inet6_compat_ioctl+0x320/0x320 [ 1304.672836] ? __sock_sendmsg+0x55/0x190 [ 1304.674095] sendmsg_copy_msghdr+0xa1/0x160 [ 1304.675437] ? do_recvmmsg+0x6d0/0x6d0 [ 1304.676648] ? __lock_acquire+0x1657/0x5b00 [ 1304.677979] ___sys_sendmsg+0xc6/0x170 [ 1304.679200] ? sendmsg_copy_msghdr+0x160/0x160 [ 1304.680604] ? vmacache_find+0x55/0x2a0 [ 1304.681842] ? lock_acquire+0x197/0x470 [ 1304.683090] ? find_held_lock+0x2c/0x110 [ 1304.684358] ? __might_fault+0xd3/0x180 [ 1304.685577] ? lock_downgrade+0x6d0/0x6d0 [ 1304.686874] ? asm_exc_page_fault+0x1e/0x30 [ 1304.688210] __sys_sendmmsg+0x195/0x470 [ 1304.689444] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1304.694597] ? lock_downgrade+0x6d0/0x6d0 [ 1304.695117] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1304.695708] ? wait_for_completion_io+0x270/0x270 [ 1304.696299] ? rcu_read_lock_any_held+0x75/0xa0 [ 1304.696866] ? vfs_write+0x354/0xb10 [ 1304.697320] ? fput_many+0x2f/0x1a0 [ 1304.697764] ? ksys_write+0x1a9/0x260 [ 1304.698229] ? __ia32_sys_read+0xb0/0xb0 [ 1304.698766] __x64_sys_sendmmsg+0x99/0x100 [ 1304.699283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.699908] do_syscall_64+0x33/0x40 [ 1304.700361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.700983] RIP: 0033:0x7fd3a7c24b19 [ 1304.701438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.703714] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1304.704642] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1304.705509] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1304.706375] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.707280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1304.708148] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:06:59 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5425, &(0x7f0000000040)=0x4) 15:06:59 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x60, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:59 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x0, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:06:59 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5427, &(0x7f0000000040)=0x4) 15:06:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x30, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:06:59 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace(0x10, r0) 15:06:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5451, &(0x7f0000000040)=0x4) 15:07:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x60, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:17 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 19) 15:07:17 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x0, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:07:17 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5428, &(0x7f0000000040)=0x4) [ 1323.607015] FAULT_INJECTION: forcing a failure. [ 1323.607015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1323.608450] CPU: 1 PID: 15668 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1323.609255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1323.610216] Call Trace: [ 1323.610528] dump_stack+0x107/0x167 [ 1323.610952] should_fail.cold+0x5/0xa [ 1323.615426] __alloc_pages_nodemask+0x182/0x600 [ 1323.615969] ? lock_chain_count+0x20/0x20 [ 1323.616453] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1323.617163] alloc_pages_vma+0xbb/0x410 [ 1323.617630] wp_page_copy+0xee7/0x1f00 [ 1323.618091] ? print_bad_pte+0x5a0/0x5a0 15:07:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000040)=0x4) 15:07:18 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x1f, 0x1, 0x4, 0x6, 0x8, 0x51}) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:07:18 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 22) 15:07:18 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x300, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1323.618566] ? lock_downgrade+0x6d0/0x6d0 [ 1323.627126] ? vm_normal_page+0x162/0x2e0 [ 1323.627614] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1323.628237] do_wp_page+0x27b/0x1390 [ 1323.628674] handle_mm_fault+0x1cc7/0x3500 [ 1323.629167] ? __lock_acquire+0x1657/0x5b00 [ 1323.629674] ? __pmd_alloc+0x5e0/0x5e0 [ 1323.630133] ? vmacache_find+0x55/0x2a0 [ 1323.630604] do_user_addr_fault+0x56e/0xc60 [ 1323.631123] exc_page_fault+0xa2/0x1a0 [ 1323.631581] asm_exc_page_fault+0x1e/0x30 [ 1323.632064] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1323.632642] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 01 06 1d 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 e2 05 1d 02 66 90 48 bb f9 ef ff ff ff 7f [ 1323.634775] RSP: 0018:ffff88801807fcf0 EFLAGS: 00050293 [ 1323.635412] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020005038 [ 1323.636238] RDX: 0000000000040000 RSI: ffffffff831114c2 RDI: ffff88804556d7f8 [ 1323.637063] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000000 [ 1323.637887] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000c [ 1323.638711] R13: 0000000020005000 R14: 0000000000000400 R15: 00000000000003ff [ 1323.639569] ? __sys_sendmmsg+0x1c2/0x470 [ 1323.640051] __sys_sendmmsg+0x1cf/0x470 [ 1323.640517] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1323.641017] ? lock_downgrade+0x6d0/0x6d0 [ 1323.641509] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1323.642069] ? wait_for_completion_io+0x270/0x270 [ 1323.642629] ? rcu_read_lock_any_held+0x75/0xa0 [ 1323.643184] ? vfs_write+0x354/0xb10 [ 1323.643620] ? fput_many+0x2f/0x1a0 [ 1323.644047] ? ksys_write+0x1a9/0x260 [ 1323.644494] ? __ia32_sys_read+0xb0/0xb0 [ 1323.644970] __x64_sys_sendmmsg+0x99/0x100 [ 1323.645462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1323.646058] do_syscall_64+0x33/0x40 [ 1323.646491] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1323.647109] RIP: 0033:0x7f87fda10b19 [ 1323.647546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.649669] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1323.650548] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1323.651392] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1323.652215] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.653038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.653865] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:07:18 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000040)=0x4) 15:07:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x545d, &(0x7f0000000040)=0x4) 15:07:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x300, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:18 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 20) 15:07:18 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf00, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5460, &(0x7f0000000040)=0x4) 15:07:18 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5441, &(0x7f0000000040)=0x4) 15:07:18 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, 0x0) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 1323.839928] FAULT_INJECTION: forcing a failure. [ 1323.839928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.841536] CPU: 0 PID: 15789 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1323.842405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1323.843470] Call Trace: [ 1323.843800] dump_stack+0x107/0x167 [ 1323.844249] should_fail.cold+0x5/0xa [ 1323.844749] _copy_from_user+0x2e/0x1b0 [ 1323.845241] __copy_msghdr_from_user+0x91/0x4b0 [ 1323.845845] ? __ia32_sys_shutdown+0x80/0x80 [ 1323.846415] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1323.847079] sendmsg_copy_msghdr+0xa1/0x160 [ 1323.847642] ? do_recvmmsg+0x6d0/0x6d0 [ 1323.848123] ? handle_mm_fault+0x9e9/0x3500 [ 1323.848686] ? __lock_acquire+0x1657/0x5b00 [ 1323.848798] FAULT_INJECTION: forcing a failure. [ 1323.848798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.849213] ? find_held_lock+0x2c/0x110 [ 1323.849232] ___sys_sendmsg+0xc6/0x170 [ 1323.849246] ? sendmsg_copy_msghdr+0x160/0x160 [ 1323.849256] ? vmacache_find+0x55/0x2a0 [ 1323.849275] ? do_user_addr_fault+0x5b0/0xc60 [ 1323.849289] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1323.849313] ? exc_page_fault+0xca/0x1a0 [ 1323.854394] ? trace_hardirqs_on+0x5b/0x180 [ 1323.854933] ? exc_page_fault+0xca/0x1a0 [ 1323.855477] ? asm_exc_page_fault+0x1e/0x30 [ 1323.856017] __sys_sendmmsg+0x195/0x470 [ 1323.856536] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1323.857065] ? lock_downgrade+0x6d0/0x6d0 [ 1323.857609] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1323.858200] ? wait_for_completion_io+0x270/0x270 [ 1323.858820] ? rcu_read_lock_any_held+0x75/0xa0 [ 1323.859432] ? vfs_write+0x354/0xb10 [ 1323.859888] ? fput_many+0x2f/0x1a0 [ 1323.860350] ? ksys_write+0x1a9/0x260 [ 1323.860838] ? __ia32_sys_read+0xb0/0xb0 [ 1323.861356] __x64_sys_sendmmsg+0x99/0x100 [ 1323.861909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1323.862539] do_syscall_64+0x33/0x40 [ 1323.863023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1323.863675] RIP: 0033:0x7f87fda10b19 [ 1323.864160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.866450] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1323.867438] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1323.868338] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1323.869241] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.870141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.871039] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1323.871975] CPU: 1 PID: 15683 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1323.872787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1323.873741] Call Trace: [ 1323.874053] dump_stack+0x107/0x167 [ 1323.874475] should_fail.cold+0x5/0xa [ 1323.874919] _copy_from_user+0x2e/0x1b0 [ 1323.875404] __copy_msghdr_from_user+0x91/0x4b0 [ 1323.875941] ? __ia32_sys_shutdown+0x80/0x80 [ 1323.876450] ? udp_v6_push_pending_frames+0x360/0x360 [ 1323.877047] ? inet6_sendmsg+0xbd/0x140 [ 1323.877512] ? inet6_compat_ioctl+0x320/0x320 [ 1323.878026] ? __sock_sendmsg+0x55/0x190 [ 1323.878499] sendmsg_copy_msghdr+0xa1/0x160 [ 1323.878994] ? do_recvmmsg+0x6d0/0x6d0 [ 1323.879464] ? __lock_acquire+0x1657/0x5b00 [ 1323.879970] ___sys_sendmsg+0xc6/0x170 [ 1323.880429] ? sendmsg_copy_msghdr+0x160/0x160 [ 1323.880963] ? vmacache_find+0x55/0x2a0 [ 1323.881429] ? lock_acquire+0x197/0x470 [ 1323.881885] ? find_held_lock+0x2c/0x110 [ 1323.882356] ? __might_fault+0xd3/0x180 [ 1323.882814] ? lock_downgrade+0x6d0/0x6d0 [ 1323.883309] ? asm_exc_page_fault+0x1e/0x30 [ 1323.883821] __sys_sendmmsg+0x195/0x470 [ 1323.884283] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1323.884780] ? lock_downgrade+0x6d0/0x6d0 [ 1323.885269] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1323.885826] ? wait_for_completion_io+0x270/0x270 [ 1323.886389] ? rcu_read_lock_any_held+0x75/0xa0 [ 1323.886923] ? vfs_write+0x354/0xb10 [ 1323.887367] ? fput_many+0x2f/0x1a0 [ 1323.887787] ? ksys_write+0x1a9/0x260 [ 1323.888226] ? __ia32_sys_read+0xb0/0xb0 [ 1323.888699] __x64_sys_sendmmsg+0x99/0x100 [ 1323.889186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1323.889778] do_syscall_64+0x33/0x40 [ 1323.890206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1323.890795] RIP: 0033:0x7fd3a7c24b19 [ 1323.891238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.893342] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1323.894216] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1323.895033] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1323.895867] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.896686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.897505] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:07:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x40049409, &(0x7f0000000040)=0x4) 15:07:30 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 23) 15:07:30 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, 0x0) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:07:30 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5450, &(0x7f0000000040)=0x4) 15:07:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xf00, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:30 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1c00, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:30 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 21) 15:07:31 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r2, 0x0, 0x0) r3 = mq_open(&(0x7f0000000a00)='&.\x95;&@\x00)-\xb56\xe1\x92/F\xcc\x1a\xbe\xee\b~\xdc', 0x40, 0xa4, &(0x7f0000000380)={0x1a, 0x2cf6, 0x1, 0xe9}) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000440)={0x6, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6, 0x1, 0x3f, 0x7, 0x0, 0x9, 0x108, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x20210, 0x9, 0x4, 0x9, 0x5, 0x81, 0xa3, 0x0, 0x0, 0x0, 0x3}, r1, 0x5, 0xffffffffffffffff, 0x1) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB]) writev(r5, &(0x7f0000000a40)=[{&(0x7f00000004c0)="3f425b225ccad8d8df2712d9c6fbb53fe6e67c44fe54178603ea127ae54b3ed8c4fb5ba6b5ad58d76b576a2864bbc9a16a8c2310466dd6965e74074899d55726d3de48d05498e16af11ed93961379cd6f343aebdf66228d3c238d5f8e7332a74cbfc9eb0dc3302d8118ec32991219768b64741a555268ccd4aabeec7808c99afa93cd52fd4f3d2f6ceba06e6ffc9", 0x8e}, {&(0x7f0000000580)="68aff4fe3862e40b273f43b45203607ed9384541a2bb71acadc000d9788768a3348187b3", 0x24}, {&(0x7f00000005c0)="10d2c8211a189d686f8ee39ea11c3995e9e56fe916f2dce8d44f", 0x1a}, {&(0x7f0000000600)="a0d6ee81468421bc3bab474856c2398313cf5c08bbe8bbbca9eae2e87a55e5bc8cbb0de8456d958b348d0744dec19fff69836220094d40538b645360cffd2713b8f8401906696dde4530", 0x4a}, {&(0x7f0000000680)="db3b3764024ea4a375541308c8671543849e39633ab413d3eb18ad3c3066129bdaaf801d45e44fdfdb9b7a2427952fdd3be5bc16407be1ba19b2b030cdaa382b13e17c6560133124bc37508fc2dd039bdd0208cb06d764838583d08275bfb09288f26fb7fb2b24749a2a73b75a9eb79764e5dd4907a8129a6038a765c54a5c9df6580294ecebd2cefa740c5e9c8eec5ea1dbf547ae37cb8b25043ae0441a1e242cf2ef8916d699e13cd15a757b8dcf1598eb36c8dc6e0738b49c9a5f6c81d79d0726c3a919bcf03831f96cdc505d40239854f9", 0xd3}, {&(0x7f0000000780)="1cd541d67f540d29375ff534b56f3bb1713298b7a5e78b8d8fc73261f8484da2f2a620046eda987796f4b605d3d4fa364dcf0293feadb27b1a7c8c0c41bc03966f0bbb64aad5c00e527ec67b245d4f7374e6a28bd6fc555dbc785beba98da1dd4e2a97555418b267d78bff97b095ef1fa2f494e0ae6570b390b470113694eb64fd439ea1838f6787d95f4192b060a3712ecfabea3f9a24e04cd4a3ce60454e599f2cbd33ff", 0xa5}, {&(0x7f0000000840)="7c0068b97dbfb4f9c7ebd4c26f443cb98e0b5aedba2a68af23a7c6e2a737d3688a8a0e7e0ff720bfc58fb5b626", 0x2d}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="6a14d704688d164915cf84434b1385399b91f98cea51383914a87bd51cb21c74b991ddbd2d8a23b6e6b2d1468946c6192cfc072ee1de949a4b1260f2dfa48843e9fe292dd8545e21a5ec564577e210fa9322dcd58aacd732140e242dc00bae284bd01f0fb35e9c9c5aa0e5703dfe2a9663cc", 0x72}, {&(0x7f0000000a00)}], 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d00)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x8d4}, 0x0) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x134, 0x1f, 0x800, 0x70bd26, 0x25dfdbff, {0xf}, [@typed={0x8, 0x9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}, @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x102, 0x6e, 0x0, 0x1, [@generic="40f184d63714bc3cfed6debf1ab4e60e7d5c4789743f42dafda57fc2d6ebef13a6bf60e786573d809b3b2ead082971018a337d39ce95ba63dc848da0f6e5ba40603b3585a729b47a5ebe0e706669e65e7929a078eabe742e2d74e314a78fef83d2cb10fee3d25e6d06b50f3c7a174bb3c4d538b0a30cbba6f03a37012168353fb65f7c61f30dab38c0192d2efd80e55182575fb0305fa5dc86179a62c98c6056e8a239c9d466849559b407d2f132d33cd5784419a82a4d4e3a52f6c7db0e1bec77cd48aa88248471f30b9dcaa3589c24eb11be633c3dc6d02a09258b98aaeefcc544d2f177c419bc04ef10f31c650277bc5f2b3111a2", @typed={0x0, 0x91, 0x0, 0x0, @fd=r8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) r9 = fork() get_robust_list(r9, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f0000000140), 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f0000000280)=0x18) 15:07:31 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5451, &(0x7f0000000040)=0x4) [ 1336.656824] FAULT_INJECTION: forcing a failure. [ 1336.656824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.658358] CPU: 0 PID: 15822 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1336.659206] FAULT_INJECTION: forcing a failure. [ 1336.659206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.659250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.661640] Call Trace: [ 1336.661969] dump_stack+0x107/0x167 [ 1336.662416] should_fail.cold+0x5/0xa [ 1336.662887] _copy_from_user+0x2e/0x1b0 [ 1336.663381] __copy_msghdr_from_user+0x91/0x4b0 [ 1336.663973] ? __ia32_sys_shutdown+0x80/0x80 [ 1336.664517] ? udp_v6_push_pending_frames+0x360/0x360 [ 1336.665151] ? inet6_sendmsg+0xbd/0x140 [ 1336.665640] ? inet6_compat_ioctl+0x320/0x320 [ 1336.666191] ? __sock_sendmsg+0x55/0x190 [ 1336.666695] sendmsg_copy_msghdr+0xa1/0x160 [ 1336.667227] ? do_recvmmsg+0x6d0/0x6d0 [ 1336.667737] ? __lock_acquire+0x1657/0x5b00 [ 1336.668277] ___sys_sendmsg+0xc6/0x170 [ 1336.668758] ? sendmsg_copy_msghdr+0x160/0x160 [ 1336.669318] ? vmacache_find+0x55/0x2a0 [ 1336.669816] ? lock_acquire+0x197/0x470 [ 1336.670302] ? find_held_lock+0x2c/0x110 [ 1336.670809] ? __might_fault+0xd3/0x180 [ 1336.671297] ? lock_downgrade+0x6d0/0x6d0 [ 1336.675842] ? asm_exc_page_fault+0x1e/0x30 [ 1336.676384] __sys_sendmmsg+0x195/0x470 [ 1336.676876] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1336.677404] ? lock_downgrade+0x6d0/0x6d0 [ 1336.677925] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1336.678516] ? wait_for_completion_io+0x270/0x270 [ 1336.679106] ? rcu_read_lock_any_held+0x75/0xa0 [ 1336.679696] ? vfs_write+0x354/0xb10 [ 1336.680152] ? fput_many+0x2f/0x1a0 [ 1336.680598] ? ksys_write+0x1a9/0x260 [ 1336.681069] ? __ia32_sys_read+0xb0/0xb0 [ 1336.681572] __x64_sys_sendmmsg+0x99/0x100 [ 1336.682089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1336.682717] do_syscall_64+0x33/0x40 [ 1336.683173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1336.683822] RIP: 0033:0x7f87fda10b19 [ 1336.684277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.686516] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1336.687444] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1336.688331] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1336.689203] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.690074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1336.690945] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1336.691855] CPU: 1 PID: 15830 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1336.692754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.693814] Call Trace: [ 1336.694156] dump_stack+0x107/0x167 [ 1336.694631] should_fail.cold+0x5/0xa [ 1336.695132] _copy_from_user+0x2e/0x1b0 [ 1336.695681] __copy_msghdr_from_user+0x91/0x4b0 [ 1336.696293] ? __ia32_sys_shutdown+0x80/0x80 [ 1336.696865] ? udp_v6_push_pending_frames+0x360/0x360 [ 1336.697538] ? inet6_sendmsg+0xbd/0x140 [ 1336.698057] ? inet6_compat_ioctl+0x320/0x320 [ 1336.698638] ? __sock_sendmsg+0x55/0x190 [ 1336.699173] sendmsg_copy_msghdr+0xa1/0x160 [ 1336.699749] ? do_recvmmsg+0x6d0/0x6d0 [ 1336.700260] ? __lock_acquire+0x1657/0x5b00 [ 1336.700832] ___sys_sendmsg+0xc6/0x170 [ 1336.701346] ? sendmsg_copy_msghdr+0x160/0x160 [ 1336.701936] ? vmacache_find+0x55/0x2a0 [ 1336.702460] ? lock_acquire+0x197/0x470 [ 1336.702973] ? find_held_lock+0x2c/0x110 [ 1336.703514] ? __might_fault+0xd3/0x180 [ 1336.704038] ? lock_downgrade+0x6d0/0x6d0 [ 1336.704577] ? asm_exc_page_fault+0x1e/0x30 [ 1336.705158] __sys_sendmmsg+0x195/0x470 [ 1336.705682] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1336.706243] ? lock_downgrade+0x6d0/0x6d0 [ 1336.706793] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1336.707422] ? wait_for_completion_io+0x270/0x270 [ 1336.708074] ? rcu_read_lock_any_held+0x75/0xa0 [ 1336.708678] ? vfs_write+0x354/0xb10 [ 1336.709163] ? fput_many+0x2f/0x1a0 [ 1336.709634] ? ksys_write+0x1a9/0x260 [ 1336.710124] ? __ia32_sys_read+0xb0/0xb0 [ 1336.710657] __x64_sys_sendmmsg+0x99/0x100 [ 1336.711215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1336.711901] do_syscall_64+0x33/0x40 [ 1336.712383] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1336.713046] RIP: 0033:0x7fd3a7c24b19 [ 1336.713530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.715917] RSP: 002b:00007fd3a5179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1336.716894] RAX: ffffffffffffffda RBX: 00007fd3a7d38020 RCX: 00007fd3a7c24b19 [ 1336.717807] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1336.718730] RBP: 00007fd3a51791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.719672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1336.720586] R13: 00007ffe7824451f R14: 00007fd3a5179300 R15: 0000000000022000 15:07:31 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x2000, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000040)=0x4) 15:07:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1c00, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:31 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000040)=0x4) 15:07:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x2000, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x40087602, &(0x7f0000000040)=0x4) 15:07:31 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x3000, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:31 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 22) [ 1336.930454] FAULT_INJECTION: forcing a failure. [ 1336.930454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.932026] CPU: 1 PID: 15953 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1336.932931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.934007] Call Trace: [ 1336.934357] dump_stack+0x107/0x167 [ 1336.934836] should_fail.cold+0x5/0xa [ 1336.935343] _copy_from_user+0x2e/0x1b0 [ 1336.935892] __copy_msghdr_from_user+0x91/0x4b0 [ 1336.936503] ? __ia32_sys_shutdown+0x80/0x80 [ 1336.937085] ? udp_v6_push_pending_frames+0x360/0x360 [ 1336.937768] ? inet6_sendmsg+0xbd/0x140 [ 1336.938291] ? inet6_compat_ioctl+0x320/0x320 [ 1336.938877] ? __sock_sendmsg+0x55/0x190 [ 1336.939422] sendmsg_copy_msghdr+0xa1/0x160 [ 1336.940018] ? do_recvmmsg+0x6d0/0x6d0 [ 1336.940532] ? __lock_acquire+0x1657/0x5b00 [ 1336.941111] ___sys_sendmsg+0xc6/0x170 [ 1336.941634] ? sendmsg_copy_msghdr+0x160/0x160 [ 1336.942238] ? vmacache_find+0x55/0x2a0 [ 1336.942770] ? lock_acquire+0x197/0x470 [ 1336.943295] ? find_held_lock+0x2c/0x110 [ 1336.943845] ? __might_fault+0xd3/0x180 [ 1336.944368] ? lock_downgrade+0x6d0/0x6d0 [ 1336.944915] ? asm_exc_page_fault+0x1e/0x30 [ 1336.945515] __sys_sendmmsg+0x195/0x470 [ 1336.946039] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1336.946611] ? lock_downgrade+0x6d0/0x6d0 [ 1336.947173] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1336.947832] ? wait_for_completion_io+0x270/0x270 [ 1336.948472] ? rcu_read_lock_any_held+0x75/0xa0 [ 1336.949087] ? vfs_write+0x354/0xb10 [ 1336.949584] ? fput_many+0x2f/0x1a0 [ 1336.950071] ? ksys_write+0x1a9/0x260 [ 1336.950573] ? __ia32_sys_read+0xb0/0xb0 [ 1336.951122] __x64_sys_sendmmsg+0x99/0x100 [ 1336.951707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1336.952396] do_syscall_64+0x33/0x40 [ 1336.952886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1336.953562] RIP: 0033:0x7f87fda10b19 [ 1336.954049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.956466] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1336.957437] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1336.958360] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1336.959300] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.960255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1336.961182] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:07:44 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4000, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x3000, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 23) 15:07:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000000040)=0x4) 15:07:44 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x545d, &(0x7f0000000040)=0x4) 15:07:44 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, 0x0) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:07:44 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 24) 15:07:44 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x515a3d73, 0x6}) r1 = fspick(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0), 0x8a0030, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@version_L}, {@mmap}, {@access_any}], [{@subj_role={'subj_role', 0x3d, 'utf8=1'}}, {@uid_eq={'uid', 0x3d, r2}}]}}) fork() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={r0, r2, 0xffffffffffffffff}, 0xc) [ 1349.716650] FAULT_INJECTION: forcing a failure. [ 1349.716650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.718152] CPU: 1 PID: 15974 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1349.719000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.720032] Call Trace: [ 1349.720362] dump_stack+0x107/0x167 [ 1349.720810] should_fail.cold+0x5/0xa [ 1349.721284] _copy_from_user+0x2e/0x1b0 [ 1349.721780] __copy_msghdr_from_user+0x91/0x4b0 [ 1349.722353] ? __ia32_sys_shutdown+0x80/0x80 [ 1349.722897] ? udp_v6_push_pending_frames+0x360/0x360 [ 1349.723532] ? inet6_sendmsg+0xbd/0x140 [ 1349.724037] ? inet6_compat_ioctl+0x320/0x320 [ 1349.724585] ? __sock_sendmsg+0x55/0x190 [ 1349.725088] sendmsg_copy_msghdr+0xa1/0x160 [ 1349.725620] ? do_recvmmsg+0x6d0/0x6d0 [ 1349.726101] ? __lock_acquire+0x1657/0x5b00 [ 1349.726641] ___sys_sendmsg+0xc6/0x170 [ 1349.727119] ? sendmsg_copy_msghdr+0x160/0x160 [ 1349.727683] ? vmacache_find+0x55/0x2a0 [ 1349.728191] ? lock_acquire+0x197/0x470 [ 1349.728680] ? find_held_lock+0x2c/0x110 [ 1349.729183] ? __might_fault+0xd3/0x180 [ 1349.729477] FAULT_INJECTION: forcing a failure. [ 1349.729477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.729681] ? lock_downgrade+0x6d0/0x6d0 [ 1349.731948] ? asm_exc_page_fault+0x1e/0x30 [ 1349.732494] __sys_sendmmsg+0x195/0x470 [ 1349.732985] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1349.733515] ? lock_downgrade+0x6d0/0x6d0 [ 1349.734035] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.734624] ? wait_for_completion_io+0x270/0x270 [ 1349.735215] ? rcu_read_lock_any_held+0x75/0xa0 [ 1349.735784] ? vfs_write+0x354/0xb10 [ 1349.736259] ? fput_many+0x2f/0x1a0 [ 1349.736707] ? ksys_write+0x1a9/0x260 [ 1349.737175] ? __ia32_sys_read+0xb0/0xb0 [ 1349.737677] __x64_sys_sendmmsg+0x99/0x100 [ 1349.738196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.738826] do_syscall_64+0x33/0x40 [ 1349.739284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.739909] RIP: 0033:0x7f87fda10b19 [ 1349.740379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.742627] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1349.743560] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1349.744447] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1349.745318] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.746188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.747061] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1349.747967] CPU: 0 PID: 15963 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1349.748969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.750035] Call Trace: [ 1349.750412] dump_stack+0x107/0x167 [ 1349.750892] should_fail.cold+0x5/0xa [ 1349.751401] _copy_from_user+0x2e/0x1b0 [ 1349.751924] __copy_msghdr_from_user+0x91/0x4b0 [ 1349.752635] ? __ia32_sys_shutdown+0x80/0x80 [ 1349.753229] ? udp_v6_push_pending_frames+0x360/0x360 [ 1349.753966] ? inet6_sendmsg+0xbd/0x140 [ 1349.754486] ? inet6_compat_ioctl+0x320/0x320 [ 1349.755446] ? __sock_sendmsg+0x55/0x190 [ 1349.755999] sendmsg_copy_msghdr+0xa1/0x160 [ 1349.756601] ? do_recvmmsg+0x6d0/0x6d0 [ 1349.757125] ? __lock_acquire+0x1657/0x5b00 [ 1349.757692] ___sys_sendmsg+0xc6/0x170 [ 1349.758221] ? sendmsg_copy_msghdr+0x160/0x160 [ 1349.758856] ? vmacache_find+0x55/0x2a0 [ 1349.759382] ? lock_acquire+0x197/0x470 [ 1349.759901] ? find_held_lock+0x2c/0x110 [ 1349.760493] ? __might_fault+0xd3/0x180 [ 1349.761051] ? lock_downgrade+0x6d0/0x6d0 [ 1349.761603] ? asm_exc_page_fault+0x1e/0x30 [ 1349.762198] __sys_sendmmsg+0x195/0x470 [ 1349.762727] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1349.763281] ? lock_downgrade+0x6d0/0x6d0 [ 1349.763883] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.764539] ? wait_for_completion_io+0x270/0x270 [ 1349.765156] ? rcu_read_lock_any_held+0x75/0xa0 [ 1349.765841] ? vfs_write+0x354/0xb10 [ 1349.766271] ? fput_many+0x2f/0x1a0 [ 1349.766794] ? ksys_write+0x1a9/0x260 [ 1349.767241] ? __ia32_sys_read+0xb0/0xb0 [ 1349.767822] __x64_sys_sendmmsg+0x99/0x100 [ 1349.769579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.770247] do_syscall_64+0x33/0x40 [ 1349.770784] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.771444] RIP: 0033:0x7fd3a7c24b19 [ 1349.771927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.774600] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1349.775531] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1349.776438] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1349.777315] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.778207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.779082] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:07:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000040)=0x4) 15:07:44 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5460, &(0x7f0000000040)=0x4) 15:07:44 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x6000, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4000, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 24) 15:07:44 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xffff, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x80045440, &(0x7f0000000040)=0x4) 15:07:44 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x40049409, &(0x7f0000000040)=0x4) [ 1349.890944] FAULT_INJECTION: forcing a failure. [ 1349.890944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.892376] CPU: 0 PID: 16072 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1349.893176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.894143] Call Trace: [ 1349.894455] dump_stack+0x107/0x167 [ 1349.894880] should_fail.cold+0x5/0xa [ 1349.895328] _copy_from_user+0x2e/0x1b0 [ 1349.895796] __copy_msghdr_from_user+0x91/0x4b0 [ 1349.896539] ? __ia32_sys_shutdown+0x80/0x80 [ 1349.897049] ? udp_v6_push_pending_frames+0x360/0x360 [ 1349.897648] ? inet6_sendmsg+0xbd/0x140 [ 1349.898109] ? inet6_compat_ioctl+0x320/0x320 [ 1349.898624] ? __sock_sendmsg+0x55/0x190 [ 1349.899101] sendmsg_copy_msghdr+0xa1/0x160 [ 1349.899606] ? do_recvmmsg+0x6d0/0x6d0 [ 1349.900253] ? __lock_acquire+0x1657/0x5b00 [ 1349.900759] ___sys_sendmsg+0xc6/0x170 [ 1349.901209] ? sendmsg_copy_msghdr+0x160/0x160 [ 1349.901734] ? vmacache_find+0x55/0x2a0 [ 1349.902206] ? lock_acquire+0x197/0x470 [ 1349.902664] ? find_held_lock+0x2c/0x110 [ 1349.903135] ? __might_fault+0xd3/0x180 [ 1349.903600] ? lock_downgrade+0x6d0/0x6d0 [ 1349.904268] ? asm_exc_page_fault+0x1e/0x30 [ 1349.904777] __sys_sendmmsg+0x195/0x470 [ 1349.905245] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1349.905743] ? lock_downgrade+0x6d0/0x6d0 [ 1349.906233] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.906790] ? wait_for_completion_io+0x270/0x270 [ 1349.907355] ? rcu_read_lock_any_held+0x75/0xa0 [ 1349.907893] ? vfs_write+0x354/0xb10 [ 1349.908556] ? fput_many+0x2f/0x1a0 [ 1349.908979] ? ksys_write+0x1a9/0x260 [ 1349.909419] ? __ia32_sys_read+0xb0/0xb0 [ 1349.909891] __x64_sys_sendmmsg+0x99/0x100 [ 1349.910380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.910972] do_syscall_64+0x33/0x40 [ 1349.911409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.912202] RIP: 0033:0x7f87fda10b19 [ 1349.912633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.914760] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1349.915643] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1349.916751] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1349.917577] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.918400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.919224] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:07:44 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x6000, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:44 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000040)=0x4) 15:07:44 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$setsig(0x4203, r1, 0x5, &(0x7f0000000140)={0x34, 0x93e2, 0x400006}) ptrace$getsig(0x4202, r0, 0x4, &(0x7f0000000000)) 15:07:44 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:07:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x80086601, &(0x7f0000000040)=0x4) 15:07:44 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 25) 15:07:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xffff, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:44 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1350.046771] FAULT_INJECTION: forcing a failure. [ 1350.046771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.048363] CPU: 1 PID: 16118 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1350.049210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.050223] Call Trace: [ 1350.050553] dump_stack+0x107/0x167 [ 1350.050999] should_fail.cold+0x5/0xa [ 1350.051472] _copy_from_user+0x2e/0x1b0 [ 1350.051972] __copy_msghdr_from_user+0x91/0x4b0 [ 1350.052550] ? __ia32_sys_shutdown+0x80/0x80 [ 1350.053090] ? udp_v6_push_pending_frames+0x360/0x360 [ 1350.053725] ? inet6_sendmsg+0xbd/0x140 [ 1350.054211] ? inet6_compat_ioctl+0x320/0x320 [ 1350.054758] ? __sock_sendmsg+0x55/0x190 [ 1350.055260] sendmsg_copy_msghdr+0xa1/0x160 [ 1350.055787] ? do_recvmmsg+0x6d0/0x6d0 [ 1350.056286] ? __lock_acquire+0x1657/0x5b00 [ 1350.056820] ___sys_sendmsg+0xc6/0x170 [ 1350.057298] ? sendmsg_copy_msghdr+0x160/0x160 [ 1350.057857] ? vmacache_find+0x55/0x2a0 [ 1350.058353] ? lock_acquire+0x197/0x470 [ 1350.058839] ? find_held_lock+0x2c/0x110 [ 1350.059340] ? __might_fault+0xd3/0x180 [ 1350.059825] ? lock_downgrade+0x6d0/0x6d0 [ 1350.060351] ? asm_exc_page_fault+0x1e/0x30 [ 1350.060890] __sys_sendmmsg+0x195/0x470 [ 1350.061380] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1350.061908] ? lock_downgrade+0x6d0/0x6d0 [ 1350.062429] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1350.063022] ? wait_for_completion_io+0x270/0x270 [ 1350.063616] ? rcu_read_lock_any_held+0x75/0xa0 [ 1350.064198] ? vfs_write+0x354/0xb10 [ 1350.064653] ? fput_many+0x2f/0x1a0 [ 1350.065098] ? ksys_write+0x1a9/0x260 [ 1350.065563] ? __ia32_sys_read+0xb0/0xb0 [ 1350.066063] __x64_sys_sendmmsg+0x99/0x100 [ 1350.066580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.067207] do_syscall_64+0x33/0x40 [ 1350.067661] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.068302] RIP: 0033:0x7fd3a7c24b19 [ 1350.068757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.070994] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1350.071923] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1350.072805] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1350.073677] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.074549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1350.075421] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:07:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x80087601, &(0x7f0000000040)=0x4) 15:07:44 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x40087602, &(0x7f0000000040)=0x4) 15:07:57 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 25) 15:07:57 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f0000000000)={0x1f, 0x93de, 0x9}) 15:07:57 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000000040)=0x4) 15:07:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:57 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000040)=0x4) 15:07:57 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:07:57 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 26) 15:07:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000040)=0x4) 15:07:57 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1363.604709] FAULT_INJECTION: forcing a failure. [ 1363.604709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.606358] CPU: 0 PID: 16240 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1363.607213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1363.608234] Call Trace: [ 1363.608578] dump_stack+0x107/0x167 [ 1363.609028] should_fail.cold+0x5/0xa [ 1363.609503] _copy_from_user+0x2e/0x1b0 [ 1363.609994] __copy_msghdr_from_user+0x91/0x4b0 [ 1363.610565] ? __ia32_sys_shutdown+0x80/0x80 [ 1363.611107] ? udp_v6_push_pending_frames+0x360/0x360 [ 1363.611743] ? inet6_sendmsg+0xbd/0x140 [ 1363.612230] ? inet6_compat_ioctl+0x320/0x320 [ 1363.612798] ? __sock_sendmsg+0x55/0x190 [ 1363.613299] sendmsg_copy_msghdr+0xa1/0x160 [ 1363.613825] ? do_recvmmsg+0x6d0/0x6d0 [ 1363.614305] ? __lock_acquire+0x1657/0x5b00 [ 1363.614839] ___sys_sendmsg+0xc6/0x170 [ 1363.615314] ? sendmsg_copy_msghdr+0x160/0x160 [ 1363.615869] ? vmacache_find+0x55/0x2a0 [ 1363.616360] ? lock_acquire+0x197/0x470 [ 1363.616863] ? find_held_lock+0x2c/0x110 [ 1363.617365] ? __might_fault+0xd3/0x180 [ 1363.617851] ? lock_downgrade+0x6d0/0x6d0 [ 1363.618356] ? asm_exc_page_fault+0x1e/0x30 [ 1363.618893] __sys_sendmmsg+0x195/0x470 [ 1363.619383] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1363.619907] ? lock_downgrade+0x6d0/0x6d0 [ 1363.620442] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1363.621979] ? wait_for_completion_io+0x270/0x270 [ 1363.623232] ? rcu_read_lock_any_held+0x75/0xa0 [ 1363.624478] ? vfs_write+0x354/0xb10 [ 1363.625617] ? fput_many+0x2f/0x1a0 [ 1363.626575] ? ksys_write+0x1a9/0x260 [ 1363.627579] ? __ia32_sys_read+0xb0/0xb0 [ 1363.628722] __x64_sys_sendmmsg+0x99/0x100 [ 1363.629819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.631153] do_syscall_64+0x33/0x40 [ 1363.632110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1363.632924] RIP: 0033:0x7f87fda10b19 [ 1363.633383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1363.635736] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1363.636710] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1363.637587] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1363.638463] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.639337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1363.640212] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:07:58 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000040)=0x4) 15:07:58 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xf, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1363.720093] FAULT_INJECTION: forcing a failure. [ 1363.720093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.721589] CPU: 0 PID: 16253 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1363.722438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1363.723449] Call Trace: [ 1363.723776] dump_stack+0x107/0x167 [ 1363.724221] should_fail.cold+0x5/0xa [ 1363.724706] _copy_from_user+0x2e/0x1b0 [ 1363.725202] __copy_msghdr_from_user+0x91/0x4b0 [ 1363.725771] ? __ia32_sys_shutdown+0x80/0x80 [ 1363.726310] ? udp_v6_push_pending_frames+0x360/0x360 [ 1363.726950] ? inet6_sendmsg+0xbd/0x140 [ 1363.727444] ? inet6_compat_ioctl+0x320/0x320 [ 1363.727992] ? __sock_sendmsg+0x55/0x190 [ 1363.728514] sendmsg_copy_msghdr+0xa1/0x160 [ 1363.729044] ? do_recvmmsg+0x6d0/0x6d0 [ 1363.729522] ? __lock_acquire+0x1657/0x5b00 [ 1363.730059] ___sys_sendmsg+0xc6/0x170 [ 1363.730542] ? sendmsg_copy_msghdr+0x160/0x160 [ 1363.731101] ? vmacache_find+0x55/0x2a0 [ 1363.731597] ? lock_acquire+0x197/0x470 [ 1363.732084] ? find_held_lock+0x2c/0x110 [ 1363.732599] ? __might_fault+0xd3/0x180 [ 1363.733088] ? lock_downgrade+0x6d0/0x6d0 [ 1363.733595] ? asm_exc_page_fault+0x1e/0x30 [ 1363.734134] __sys_sendmmsg+0x195/0x470 [ 1363.734625] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1363.735153] ? lock_downgrade+0x6d0/0x6d0 [ 1363.735673] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1363.736266] ? wait_for_completion_io+0x270/0x270 [ 1363.736879] ? rcu_read_lock_any_held+0x75/0xa0 [ 1363.737448] ? vfs_write+0x354/0xb10 [ 1363.737905] ? fput_many+0x2f/0x1a0 [ 1363.738350] ? ksys_write+0x1a9/0x260 [ 1363.738816] ? __ia32_sys_read+0xb0/0xb0 [ 1363.739317] __x64_sys_sendmmsg+0x99/0x100 [ 1363.739834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.740480] do_syscall_64+0x33/0x40 [ 1363.740940] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1363.741568] RIP: 0033:0x7fd3a7c24b19 [ 1363.742025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1363.744280] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1363.745225] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1363.746098] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1363.746975] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.747848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1363.748736] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:07:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:07:58 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x80045440, &(0x7f0000000040)=0x4) 15:07:58 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:07:58 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 26) [ 1363.840777] FAULT_INJECTION: forcing a failure. [ 1363.840777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.842294] CPU: 0 PID: 16380 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1363.843145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1363.844161] Call Trace: [ 1363.844501] dump_stack+0x107/0x167 [ 1363.844949] should_fail.cold+0x5/0xa [ 1363.845420] _copy_from_user+0x2e/0x1b0 [ 1363.845914] __copy_msghdr_from_user+0x91/0x4b0 [ 1363.846483] ? __ia32_sys_shutdown+0x80/0x80 [ 1363.847028] ? udp_v6_push_pending_frames+0x360/0x360 [ 1363.847668] ? inet6_sendmsg+0xbd/0x140 [ 1363.848156] ? inet6_compat_ioctl+0x320/0x320 [ 1363.849124] ? __sock_sendmsg+0x55/0x190 [ 1363.850205] sendmsg_copy_msghdr+0xa1/0x160 [ 1363.851349] ? do_recvmmsg+0x6d0/0x6d0 [ 1363.852381] ? __lock_acquire+0x1657/0x5b00 [ 1363.853763] ___sys_sendmsg+0xc6/0x170 [ 1363.854771] ? sendmsg_copy_msghdr+0x160/0x160 [ 1363.855955] ? vmacache_find+0x55/0x2a0 [ 1363.857147] ? lock_acquire+0x197/0x470 [ 1363.858200] ? find_held_lock+0x2c/0x110 [ 1363.859278] ? __might_fault+0xd3/0x180 [ 1363.860331] ? lock_downgrade+0x6d0/0x6d0 [ 1363.861617] ? asm_exc_page_fault+0x1e/0x30 [ 1363.862747] __sys_sendmmsg+0x195/0x470 [ 1363.863783] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1363.864989] ? lock_downgrade+0x6d0/0x6d0 [ 1363.866006] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1363.867182] ? wait_for_completion_io+0x270/0x270 [ 1363.868360] ? rcu_read_lock_any_held+0x75/0xa0 [ 1363.869717] ? vfs_write+0x354/0xb10 [ 1363.870599] ? fput_many+0x2f/0x1a0 [ 1363.871461] ? ksys_write+0x1a9/0x260 [ 1363.872360] ? __ia32_sys_read+0xb0/0xb0 [ 1363.873546] __x64_sys_sendmmsg+0x99/0x100 [ 1363.874578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.875842] do_syscall_64+0x33/0x40 [ 1363.876835] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1363.878058] RIP: 0033:0x7f87fda10b19 [ 1363.878936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1363.884023] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1363.886181] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1363.887882] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1363.889049] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.889926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1363.890801] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:08:11 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ftruncate(0xffffffffffffffff, 0x7) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x0, 0xd045}) r1 = getpgrp(0x0) ptrace$cont(0x18, r1, 0x5, 0xff000) r2 = epoll_create(0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x20000000}) fallocate(r3, 0x30, 0x7f, 0x7) 15:08:11 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 27) 15:08:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000040)=0x4) 15:08:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:11 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 27) 15:08:11 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x80086601, &(0x7f0000000040)=0x4) 15:08:11 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x0) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 1377.062713] FAULT_INJECTION: forcing a failure. [ 1377.062713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.064180] CPU: 1 PID: 16386 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1377.065044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.066057] Call Trace: [ 1377.066386] dump_stack+0x107/0x167 [ 1377.066832] should_fail.cold+0x5/0xa [ 1377.067306] _copy_from_user+0x2e/0x1b0 [ 1377.067800] __copy_msghdr_from_user+0x91/0x4b0 [ 1377.068374] ? __ia32_sys_shutdown+0x80/0x80 [ 1377.068930] ? udp_v6_push_pending_frames+0x360/0x360 [ 1377.069570] ? inet6_sendmsg+0xbd/0x140 [ 1377.070059] ? inet6_compat_ioctl+0x320/0x320 [ 1377.070606] ? __sock_sendmsg+0x55/0x190 [ 1377.071113] sendmsg_copy_msghdr+0xa1/0x160 [ 1377.071641] ? do_recvmmsg+0x6d0/0x6d0 [ 1377.072124] ? __lock_acquire+0x1657/0x5b00 [ 1377.072659] ___sys_sendmsg+0xc6/0x170 [ 1377.075050] FAULT_INJECTION: forcing a failure. [ 1377.075050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.077165] ? sendmsg_copy_msghdr+0x160/0x160 [ 1377.077177] ? vmacache_find+0x55/0x2a0 [ 1377.077196] ? lock_acquire+0x197/0x470 [ 1377.077207] ? find_held_lock+0x2c/0x110 [ 1377.077222] ? __might_fault+0xd3/0x180 [ 1377.077234] ? lock_downgrade+0x6d0/0x6d0 [ 1377.077247] ? asm_exc_page_fault+0x1e/0x30 [ 1377.077269] __sys_sendmmsg+0x195/0x470 [ 1377.082593] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1377.083122] ? lock_downgrade+0x6d0/0x6d0 [ 1377.083638] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1377.084227] ? wait_for_completion_io+0x270/0x270 [ 1377.084817] ? rcu_read_lock_any_held+0x75/0xa0 [ 1377.085402] ? vfs_write+0x354/0xb10 [ 1377.085855] ? fput_many+0x2f/0x1a0 [ 1377.086297] ? ksys_write+0x1a9/0x260 [ 1377.086759] ? __ia32_sys_read+0xb0/0xb0 [ 1377.087263] __x64_sys_sendmmsg+0x99/0x100 [ 1377.087778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.088403] do_syscall_64+0x33/0x40 [ 1377.088854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.093502] RIP: 0033:0x7f87fda10b19 [ 1377.093955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.096189] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1377.097135] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1377.098006] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1377.098871] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.099737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.100604] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1377.101503] CPU: 0 PID: 16392 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1377.102349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.103358] Call Trace: [ 1377.103679] dump_stack+0x107/0x167 [ 1377.104123] should_fail.cold+0x5/0xa [ 1377.104589] _copy_from_user+0x2e/0x1b0 [ 1377.105094] __copy_msghdr_from_user+0x91/0x4b0 [ 1377.105660] ? __ia32_sys_shutdown+0x80/0x80 [ 1377.106201] ? udp_v6_push_pending_frames+0x360/0x360 [ 1377.106831] ? inet6_sendmsg+0xbd/0x140 [ 1377.107315] ? inet6_compat_ioctl+0x320/0x320 [ 1377.107858] ? __sock_sendmsg+0x55/0x190 [ 1377.108355] sendmsg_copy_msghdr+0xa1/0x160 [ 1377.108893] ? do_recvmmsg+0x6d0/0x6d0 [ 1377.109371] ? __lock_acquire+0x1657/0x5b00 [ 1377.109904] ___sys_sendmsg+0xc6/0x170 [ 1377.110378] ? sendmsg_copy_msghdr+0x160/0x160 [ 1377.110930] ? vmacache_find+0x55/0x2a0 [ 1377.111421] ? lock_acquire+0x197/0x470 [ 1377.111908] ? find_held_lock+0x2c/0x110 [ 1377.112405] ? __might_fault+0xd3/0x180 [ 1377.112899] ? lock_downgrade+0x6d0/0x6d0 [ 1377.113408] ? asm_exc_page_fault+0x1e/0x30 [ 1377.113943] __sys_sendmmsg+0x195/0x470 [ 1377.114430] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1377.114961] ? lock_downgrade+0x6d0/0x6d0 [ 1377.115475] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1377.116064] ? wait_for_completion_io+0x270/0x270 [ 1377.116650] ? rcu_read_lock_any_held+0x75/0xa0 [ 1377.117231] ? vfs_write+0x354/0xb10 [ 1377.117684] ? fput_many+0x2f/0x1a0 [ 1377.118129] ? ksys_write+0x1a9/0x260 [ 1377.118592] ? __ia32_sys_read+0xb0/0xb0 [ 1377.119092] __x64_sys_sendmmsg+0x99/0x100 [ 1377.119605] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.120230] do_syscall_64+0x33/0x40 [ 1377.120681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.121320] RIP: 0033:0x7fd3a7c24b19 [ 1377.121775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.124004] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1377.124943] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1377.125812] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1377.126675] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.127540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.128405] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:08:11 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x30, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0xc020660b, &(0x7f0000000040)=0x4) 15:08:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xf, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:11 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x0) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:08:11 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x80087601, &(0x7f0000000040)=0x4) 15:08:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 28) 15:08:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) [ 1377.261513] FAULT_INJECTION: forcing a failure. [ 1377.261513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.263066] CPU: 1 PID: 16486 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1377.263914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.264943] Call Trace: [ 1377.265276] dump_stack+0x107/0x167 [ 1377.265723] should_fail.cold+0x5/0xa [ 1377.266195] _copy_from_user+0x2e/0x1b0 [ 1377.266687] __copy_msghdr_from_user+0x91/0x4b0 [ 1377.267262] ? __ia32_sys_shutdown+0x80/0x80 [ 1377.267802] ? udp_v6_push_pending_frames+0x360/0x360 [ 1377.268436] ? inet6_sendmsg+0xbd/0x140 [ 1377.268931] ? inet6_compat_ioctl+0x320/0x320 [ 1377.269488] ? __sock_sendmsg+0x55/0x190 [ 1377.269505] sendmsg_copy_msghdr+0xa1/0x160 [ 1377.269518] ? do_recvmmsg+0x6d0/0x6d0 [ 1377.269535] ? __lock_acquire+0x1657/0x5b00 [ 1377.269555] ___sys_sendmsg+0xc6/0x170 [ 1377.269569] ? sendmsg_copy_msghdr+0x160/0x160 [ 1377.269581] ? vmacache_find+0x55/0x2a0 [ 1377.269601] ? lock_acquire+0x197/0x470 [ 1377.269612] ? find_held_lock+0x2c/0x110 [ 1377.269627] ? __might_fault+0xd3/0x180 [ 1377.269640] ? lock_downgrade+0x6d0/0x6d0 [ 1377.269653] ? asm_exc_page_fault+0x1e/0x30 [ 1377.269676] __sys_sendmmsg+0x195/0x470 [ 1377.269692] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1377.269704] ? lock_downgrade+0x6d0/0x6d0 [ 1377.269728] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1377.269743] ? wait_for_completion_io+0x270/0x270 [ 1377.269757] ? rcu_read_lock_any_held+0x75/0xa0 [ 1377.269770] ? vfs_write+0x354/0xb10 [ 1377.269782] ? fput_many+0x2f/0x1a0 [ 1377.269795] ? ksys_write+0x1a9/0x260 [ 1377.269807] ? __ia32_sys_read+0xb0/0xb0 [ 1377.269824] __x64_sys_sendmmsg+0x99/0x100 [ 1377.269836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1377.269847] do_syscall_64+0x33/0x40 [ 1377.269858] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1377.269867] RIP: 0033:0x7fd3a7c24b19 [ 1377.269879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.269885] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1377.269899] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1377.269906] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1377.269914] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.269920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.269928] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1390.162952] FAULT_INJECTION: forcing a failure. [ 1390.162952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.164593] CPU: 0 PID: 16548 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1390.165501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1390.166510] Call Trace: [ 1390.166838] dump_stack+0x107/0x167 [ 1390.167282] should_fail.cold+0x5/0xa [ 1390.167751] _copy_from_user+0x2e/0x1b0 [ 1390.168241] __copy_msghdr_from_user+0x91/0x4b0 [ 1390.168808] ? __ia32_sys_shutdown+0x80/0x80 [ 1390.169371] ? udp_v6_push_pending_frames+0x360/0x360 [ 1390.170061] ? inet6_sendmsg+0xbd/0x140 [ 1390.170138] FAULT_INJECTION: forcing a failure. [ 1390.170138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.170555] ? inet6_compat_ioctl+0x320/0x320 [ 1390.170568] ? __sock_sendmsg+0x55/0x190 [ 1390.170588] sendmsg_copy_msghdr+0xa1/0x160 [ 1390.170604] ? do_recvmmsg+0x6d0/0x6d0 [ 1390.174009] ? __lock_acquire+0x1657/0x5b00 [ 1390.174548] ___sys_sendmsg+0xc6/0x170 [ 1390.175033] ? sendmsg_copy_msghdr+0x160/0x160 [ 1390.175593] ? vmacache_find+0x55/0x2a0 [ 1390.176093] ? lock_acquire+0x197/0x470 [ 1390.176581] ? find_held_lock+0x2c/0x110 [ 1390.177087] ? __might_fault+0xd3/0x180 [ 1390.177593] ? lock_downgrade+0x6d0/0x6d0 [ 1390.178105] ? asm_exc_page_fault+0x1e/0x30 [ 1390.178649] __sys_sendmmsg+0x195/0x470 [ 1390.179142] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1390.179672] ? lock_downgrade+0x6d0/0x6d0 [ 1390.180194] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1390.180791] ? wait_for_completion_io+0x270/0x270 [ 1390.181405] ? rcu_read_lock_any_held+0x75/0xa0 [ 1390.181977] ? vfs_write+0x354/0xb10 [ 1390.182436] ? fput_many+0x2f/0x1a0 [ 1390.182885] ? ksys_write+0x1a9/0x260 [ 1390.183354] ? __ia32_sys_read+0xb0/0xb0 [ 1390.183856] __x64_sys_sendmmsg+0x99/0x100 [ 1390.184376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1390.185006] do_syscall_64+0x33/0x40 [ 1390.185484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.186112] RIP: 0033:0x7f87fda10b19 [ 1390.186572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.188816] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1390.189779] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1390.190655] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1390.191522] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1390.192389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1390.193263] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1390.194215] CPU: 1 PID: 16545 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1390.195108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1390.196190] Call Trace: [ 1390.196535] dump_stack+0x107/0x167 [ 1390.197010] should_fail.cold+0x5/0xa [ 1390.197527] _copy_from_user+0x2e/0x1b0 [ 1390.198046] __copy_msghdr_from_user+0x91/0x4b0 [ 1390.198651] ? __ia32_sys_shutdown+0x80/0x80 [ 1390.199241] ? udp_v6_push_pending_frames+0x360/0x360 [ 1390.199927] ? inet6_sendmsg+0xbd/0x140 15:08:24 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 28) 15:08:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 15:08:24 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000040)=0x4) 15:08:24 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x60, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:24 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x0) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:08:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x30, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:24 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 29) 15:08:24 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000040)=0x4) [ 1390.200431] ? inet6_compat_ioctl+0x320/0x320 [ 1390.209777] ? __sock_sendmsg+0x55/0x190 [ 1390.210288] sendmsg_copy_msghdr+0xa1/0x160 [ 1390.210845] ? do_recvmmsg+0x6d0/0x6d0 [ 1390.211344] ? __lock_acquire+0x1657/0x5b00 [ 1390.211892] ___sys_sendmsg+0xc6/0x170 [ 1390.212402] ? sendmsg_copy_msghdr+0x160/0x160 [ 1390.212952] ? vmacache_find+0x55/0x2a0 [ 1390.213454] ? lock_acquire+0x197/0x470 [ 1390.213933] ? find_held_lock+0x2c/0x110 [ 1390.214426] ? __might_fault+0xd3/0x180 [ 1390.214909] ? lock_downgrade+0x6d0/0x6d0 [ 1390.215411] ? asm_exc_page_fault+0x1e/0x30 [ 1390.215943] __sys_sendmmsg+0x195/0x470 [ 1390.216427] ? __ia32_sys_sendmsg+0xb0/0xb0 15:08:24 executing program 0: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffd000/0x1000)=nil, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) r1 = fork() ptrace(0x10, r1) ioprio_set$pid(0x2, 0x0, 0x6000) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace$setsig(0x4203, r1, 0x8ced, &(0x7f00000002c0)={0x2d, 0x4, 0x6}) [ 1390.216953] ? lock_downgrade+0x6d0/0x6d0 [ 1390.225511] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1390.226142] ? wait_for_completion_io+0x270/0x270 [ 1390.226772] ? rcu_read_lock_any_held+0x75/0xa0 [ 1390.227376] ? vfs_write+0x354/0xb10 [ 1390.227861] ? fput_many+0x2f/0x1a0 [ 1390.228343] ? ksys_write+0x1a9/0x260 [ 1390.228841] ? __ia32_sys_read+0xb0/0xb0 [ 1390.229395] __x64_sys_sendmmsg+0x99/0x100 [ 1390.229946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1390.230614] do_syscall_64+0x33/0x40 [ 1390.231107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1390.231767] RIP: 0033:0x7fd3a7c24b19 [ 1390.232249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1390.234620] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1390.235605] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1390.236534] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1390.237476] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1390.238401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1390.239326] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:08:24 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000040)=0x4) 15:08:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x60, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xd) 15:08:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 29) 15:08:37 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 30) 15:08:37 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:08:37 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0xc020660b, &(0x7f0000000040)=0x4) 15:08:37 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x300, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x11) 15:08:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x300, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:37 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xff, 0x7f, 0xa1, 0x2, 0x0, 0x84d, 0x12008, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x6001, 0x7, 0x3, 0x3, 0x4, 0x5b0, 0xff, 0x0, 0x5, 0x0, 0x1}, r1, 0xb, r2, 0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) [ 1403.494934] FAULT_INJECTION: forcing a failure. [ 1403.494934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1403.496439] CPU: 0 PID: 16671 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1403.496447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.496450] Call Trace: [ 1403.496469] dump_stack+0x107/0x167 [ 1403.496483] should_fail.cold+0x5/0xa [ 1403.496502] _copy_from_user+0x2e/0x1b0 [ 1403.496520] __copy_msghdr_from_user+0x91/0x4b0 [ 1403.496534] ? __ia32_sys_shutdown+0x80/0x80 [ 1403.496549] ? udp_v6_push_pending_frames+0x360/0x360 [ 1403.496565] ? inet6_sendmsg+0xbd/0x140 [ 1403.496578] ? inet6_compat_ioctl+0x320/0x320 [ 1403.496589] ? __sock_sendmsg+0x55/0x190 [ 1403.496606] sendmsg_copy_msghdr+0xa1/0x160 [ 1403.496618] ? do_recvmmsg+0x6d0/0x6d0 [ 1403.496635] ? __lock_acquire+0x1657/0x5b00 [ 1403.496655] ___sys_sendmsg+0xc6/0x170 [ 1403.496668] ? sendmsg_copy_msghdr+0x160/0x160 [ 1403.496681] ? vmacache_find+0x55/0x2a0 [ 1403.496701] ? lock_acquire+0x197/0x470 [ 1403.496712] ? find_held_lock+0x2c/0x110 [ 1403.496727] ? __might_fault+0xd3/0x180 [ 1403.496739] ? lock_downgrade+0x6d0/0x6d0 [ 1403.496751] ? asm_exc_page_fault+0x1e/0x30 [ 1403.496774] __sys_sendmmsg+0x195/0x470 [ 1403.496790] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1403.496802] ? lock_downgrade+0x6d0/0x6d0 [ 1403.496826] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1403.496842] ? wait_for_completion_io+0x270/0x270 15:08:37 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) 15:08:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xf00, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1403.496857] ? rcu_read_lock_any_held+0x75/0xa0 [ 1403.496869] ? vfs_write+0x354/0xb10 [ 1403.496881] ? fput_many+0x2f/0x1a0 [ 1403.496894] ? ksys_write+0x1a9/0x260 [ 1403.496906] ? __ia32_sys_read+0xb0/0xb0 [ 1403.496923] __x64_sys_sendmmsg+0x99/0x100 [ 1403.496936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.496946] do_syscall_64+0x33/0x40 [ 1403.496958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1403.496966] RIP: 0033:0x7f87fda10b19 [ 1403.496978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.496985] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1403.496999] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1403.497006] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1403.497013] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.497020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.497027] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1403.563372] FAULT_INJECTION: forcing a failure. [ 1403.563372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1403.563387] CPU: 1 PID: 16695 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1403.563395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.563398] Call Trace: [ 1403.563417] dump_stack+0x107/0x167 [ 1403.563431] should_fail.cold+0x5/0xa [ 1403.563449] _copy_from_user+0x2e/0x1b0 [ 1403.563467] __copy_msghdr_from_user+0x91/0x4b0 [ 1403.563480] ? __ia32_sys_shutdown+0x80/0x80 [ 1403.563495] ? udp_v6_push_pending_frames+0x360/0x360 [ 1403.563511] ? inet6_sendmsg+0xbd/0x140 [ 1403.563524] ? inet6_compat_ioctl+0x320/0x320 [ 1403.563535] ? __sock_sendmsg+0x55/0x190 [ 1403.563551] sendmsg_copy_msghdr+0xa1/0x160 [ 1403.563563] ? do_recvmmsg+0x6d0/0x6d0 [ 1403.563579] ? __lock_acquire+0x1657/0x5b00 [ 1403.563599] ___sys_sendmsg+0xc6/0x170 [ 1403.563612] ? sendmsg_copy_msghdr+0x160/0x160 [ 1403.563624] ? vmacache_find+0x55/0x2a0 [ 1403.563643] ? lock_acquire+0x197/0x470 [ 1403.563654] ? find_held_lock+0x2c/0x110 [ 1403.563670] ? __might_fault+0xd3/0x180 [ 1403.563681] ? lock_downgrade+0x6d0/0x6d0 [ 1403.563693] ? asm_exc_page_fault+0x1e/0x30 [ 1403.563716] __sys_sendmmsg+0x195/0x470 [ 1403.563731] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1403.563743] ? lock_downgrade+0x6d0/0x6d0 [ 1403.563767] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1403.563782] ? wait_for_completion_io+0x270/0x270 [ 1403.563798] ? rcu_read_lock_any_held+0x75/0xa0 [ 1403.563809] ? vfs_write+0x354/0xb10 [ 1403.563821] ? fput_many+0x2f/0x1a0 [ 1403.563834] ? ksys_write+0x1a9/0x260 [ 1403.563845] ? __ia32_sys_read+0xb0/0xb0 [ 1403.563862] __x64_sys_sendmmsg+0x99/0x100 [ 1403.563874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.563884] do_syscall_64+0x33/0x40 [ 1403.563896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1403.563904] RIP: 0033:0x7fd3a7c24b19 [ 1403.563916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.563923] RSP: 002b:00007fd3a5179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1403.563937] RAX: ffffffffffffffda RBX: 00007fd3a7d38020 RCX: 00007fd3a7c24b19 [ 1403.563944] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1403.563951] RBP: 00007fd3a51791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.563963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.563970] R13: 00007ffe7824451f R14: 00007fd3a5179300 R15: 0000000000022000 15:08:51 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xf00, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x12) 15:08:51 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 15:08:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c00, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:08:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 30) 15:08:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 31) 15:08:51 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:08:51 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) rt_sigqueueinfo(r1, 0xf, &(0x7f0000000000)={0x16, 0x41a4, 0xd75}) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:08:51 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xd) [ 1416.828893] FAULT_INJECTION: forcing a failure. [ 1416.828893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1416.830400] CPU: 1 PID: 16818 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1416.831243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1416.832252] Call Trace: [ 1416.832579] dump_stack+0x107/0x167 [ 1416.833030] should_fail.cold+0x5/0xa [ 1416.833508] _copy_from_user+0x2e/0x1b0 [ 1416.833526] __copy_msghdr_from_user+0x91/0x4b0 [ 1416.833540] ? __ia32_sys_shutdown+0x80/0x80 [ 1416.833553] ? udp_v6_push_pending_frames+0x360/0x360 [ 1416.833569] ? inet6_sendmsg+0xbd/0x140 [ 1416.833581] ? inet6_compat_ioctl+0x320/0x320 [ 1416.833592] ? __sock_sendmsg+0x55/0x190 [ 1416.833607] sendmsg_copy_msghdr+0xa1/0x160 [ 1416.833619] ? do_recvmmsg+0x6d0/0x6d0 [ 1416.833636] ? __lock_acquire+0x1657/0x5b00 [ 1416.833655] ___sys_sendmsg+0xc6/0x170 [ 1416.833668] ? sendmsg_copy_msghdr+0x160/0x160 [ 1416.833679] ? vmacache_find+0x55/0x2a0 [ 1416.833699] ? lock_acquire+0x197/0x470 [ 1416.833709] ? find_held_lock+0x2c/0x110 15:08:51 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c00, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1416.833724] ? __might_fault+0xd3/0x180 15:08:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 31) [ 1416.833736] ? lock_downgrade+0x6d0/0x6d0 [ 1416.833748] ? asm_exc_page_fault+0x1e/0x30 [ 1416.833770] __sys_sendmmsg+0x195/0x470 [ 1416.833786] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1416.833797] ? lock_downgrade+0x6d0/0x6d0 [ 1416.833821] ? __mutex_unlock_slowpath+0xe1/0x600 15:08:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2000, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1416.833835] ? wait_for_completion_io+0x270/0x270 [ 1416.833850] ? rcu_read_lock_any_held+0x75/0xa0 [ 1416.833862] ? vfs_write+0x354/0xb10 [ 1416.833873] ? fput_many+0x2f/0x1a0 [ 1416.833885] ? ksys_write+0x1a9/0x260 [ 1416.833897] ? __ia32_sys_read+0xb0/0xb0 [ 1416.833914] __x64_sys_sendmmsg+0x99/0x100 [ 1416.833926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1416.833936] do_syscall_64+0x33/0x40 [ 1416.833947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1416.833955] RIP: 0033:0x7fd3a7c24b19 [ 1416.833967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1416.833974] RSP: 002b:00007fd3a5179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1416.833987] RAX: ffffffffffffffda RBX: 00007fd3a7d38020 RCX: 00007fd3a7c24b19 [ 1416.833994] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1416.834001] RBP: 00007fd3a51791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1416.834007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1416.834014] R13: 00007ffe7824451f R14: 00007fd3a5179300 R15: 0000000000022000 [ 1416.850564] FAULT_INJECTION: forcing a failure. [ 1416.850564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1416.850579] CPU: 0 PID: 16814 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1416.850586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1416.850590] Call Trace: [ 1416.850609] dump_stack+0x107/0x167 15:08:51 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) [ 1416.850622] should_fail.cold+0x5/0xa [ 1416.850640] _copy_from_user+0x2e/0x1b0 [ 1416.850658] __copy_msghdr_from_user+0x91/0x4b0 [ 1416.850672] ? __ia32_sys_shutdown+0x80/0x80 [ 1416.850688] ? udp_v6_push_pending_frames+0x360/0x360 [ 1416.850704] ? inet6_sendmsg+0xbd/0x140 [ 1416.850717] ? inet6_compat_ioctl+0x320/0x320 [ 1416.850729] ? __sock_sendmsg+0x55/0x190 [ 1416.850748] sendmsg_copy_msghdr+0xa1/0x160 [ 1416.850760] ? do_recvmmsg+0x6d0/0x6d0 [ 1416.850776] ? __lock_acquire+0x1657/0x5b00 [ 1416.850796] ___sys_sendmsg+0xc6/0x170 [ 1416.850810] ? sendmsg_copy_msghdr+0x160/0x160 [ 1416.850822] ? vmacache_find+0x55/0x2a0 [ 1416.850841] ? lock_acquire+0x197/0x470 [ 1416.850852] ? find_held_lock+0x2c/0x110 [ 1416.850867] ? __might_fault+0xd3/0x180 [ 1416.850879] ? lock_downgrade+0x6d0/0x6d0 [ 1416.850891] ? asm_exc_page_fault+0x1e/0x30 [ 1416.850914] __sys_sendmmsg+0x195/0x470 [ 1416.850930] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1416.850941] ? lock_downgrade+0x6d0/0x6d0 [ 1416.850965] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1416.850980] ? wait_for_completion_io+0x270/0x270 [ 1416.850995] ? rcu_read_lock_any_held+0x75/0xa0 [ 1416.851007] ? vfs_write+0x354/0xb10 [ 1416.851018] ? fput_many+0x2f/0x1a0 [ 1416.851031] ? ksys_write+0x1a9/0x260 [ 1416.851043] ? __ia32_sys_read+0xb0/0xb0 [ 1416.851059] __x64_sys_sendmmsg+0x99/0x100 [ 1416.851071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1416.851081] do_syscall_64+0x33/0x40 [ 1416.851093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1416.851101] RIP: 0033:0x7f87fda10b19 [ 1416.851113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1416.851120] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1416.851133] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1416.851140] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1416.851148] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1416.851154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1416.851162] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1416.977547] FAULT_INJECTION: forcing a failure. [ 1416.977547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1417.018828] CPU: 1 PID: 16899 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1417.018835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1417.018840] Call Trace: [ 1417.018859] dump_stack+0x107/0x167 [ 1417.018873] should_fail.cold+0x5/0xa [ 1417.018891] _copy_from_user+0x2e/0x1b0 [ 1417.018909] __copy_msghdr_from_user+0x91/0x4b0 [ 1417.018922] ? __ia32_sys_shutdown+0x80/0x80 [ 1417.018937] ? udp_v6_push_pending_frames+0x360/0x360 [ 1417.018953] ? inet6_sendmsg+0xbd/0x140 [ 1417.018966] ? inet6_compat_ioctl+0x320/0x320 [ 1417.018976] ? __sock_sendmsg+0x55/0x190 [ 1417.018992] sendmsg_copy_msghdr+0xa1/0x160 [ 1417.019004] ? do_recvmmsg+0x6d0/0x6d0 15:08:51 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2000, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1417.019021] ? __lock_acquire+0x1657/0x5b00 [ 1417.019040] ___sys_sendmsg+0xc6/0x170 [ 1417.019053] ? sendmsg_copy_msghdr+0x160/0x160 15:08:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 32) [ 1417.019064] ? vmacache_find+0x55/0x2a0 [ 1417.019088] ? lock_acquire+0x197/0x470 [ 1417.019101] ? find_held_lock+0x2c/0x110 [ 1417.019120] ? __might_fault+0xd3/0x180 [ 1417.019134] ? lock_downgrade+0x6d0/0x6d0 [ 1417.019153] ? asm_exc_page_fault+0x1e/0x30 [ 1417.019186] __sys_sendmmsg+0x195/0x470 15:08:51 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3000, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1417.019205] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1417.019220] ? lock_downgrade+0x6d0/0x6d0 [ 1417.019250] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1417.019269] ? wait_for_completion_io+0x270/0x270 [ 1417.019286] ? rcu_read_lock_any_held+0x75/0xa0 [ 1417.019301] ? vfs_write+0x354/0xb10 [ 1417.019312] ? fput_many+0x2f/0x1a0 15:08:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8, 0x80000) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000040)={@msf={0x4, 0x80, 0x1}}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f00000000c0)=0xffffffaa, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r2 = epoll_create(0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x20000000}) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000180)=""/225, 0xe1}], 0x2, 0x1, 0x5b64a69d) r4 = fork() ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x4, &(0x7f00000002c0)={0x24, 0x2, 0x9}) [ 1417.019325] ? ksys_write+0x1a9/0x260 [ 1417.019337] ? __ia32_sys_read+0xb0/0xb0 [ 1417.019354] __x64_sys_sendmmsg+0x99/0x100 [ 1417.019366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1417.019377] do_syscall_64+0x33/0x40 [ 1417.019388] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1417.019397] RIP: 0033:0x7f87fda10b19 [ 1417.019409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1417.019416] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1417.019429] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1417.019436] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1417.019443] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1417.019450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1417.019457] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1417.111962] FAULT_INJECTION: forcing a failure. [ 1417.111962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1417.111978] CPU: 0 PID: 16945 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1417.111985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1417.111989] Call Trace: [ 1417.112008] dump_stack+0x107/0x167 [ 1417.112021] should_fail.cold+0x5/0xa [ 1417.112039] _copy_from_user+0x2e/0x1b0 [ 1417.112105] __copy_msghdr_from_user+0x91/0x4b0 [ 1417.112119] ? __ia32_sys_shutdown+0x80/0x80 [ 1417.112134] ? udp_v6_push_pending_frames+0x360/0x360 [ 1417.112155] ? inet6_sendmsg+0xbd/0x140 [ 1417.112167] ? inet6_compat_ioctl+0x320/0x320 [ 1417.112178] ? __sock_sendmsg+0x55/0x190 [ 1417.112194] sendmsg_copy_msghdr+0xa1/0x160 [ 1417.112206] ? do_recvmmsg+0x6d0/0x6d0 [ 1417.112222] ? __lock_acquire+0x1657/0x5b00 [ 1417.112242] ___sys_sendmsg+0xc6/0x170 [ 1417.112256] ? sendmsg_copy_msghdr+0x160/0x160 [ 1417.112268] ? vmacache_find+0x55/0x2a0 [ 1417.112289] ? lock_acquire+0x197/0x470 [ 1417.112300] ? find_held_lock+0x2c/0x110 [ 1417.112316] ? __might_fault+0xd3/0x180 [ 1417.112328] ? lock_downgrade+0x6d0/0x6d0 [ 1417.112340] ? asm_exc_page_fault+0x1e/0x30 [ 1417.112363] __sys_sendmmsg+0x195/0x470 [ 1417.112379] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1417.112390] ? lock_downgrade+0x6d0/0x6d0 [ 1417.112413] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1417.112428] ? wait_for_completion_io+0x270/0x270 [ 1417.112444] ? rcu_read_lock_any_held+0x75/0xa0 [ 1417.112456] ? vfs_write+0x354/0xb10 [ 1417.112468] ? fput_many+0x2f/0x1a0 [ 1417.112480] ? ksys_write+0x1a9/0x260 [ 1417.112492] ? __ia32_sys_read+0xb0/0xb0 [ 1417.112508] __x64_sys_sendmmsg+0x99/0x100 [ 1417.112520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1417.112530] do_syscall_64+0x33/0x40 [ 1417.112542] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1417.112550] RIP: 0033:0x7fd3a7c24b19 [ 1417.112563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1417.112570] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1417.112583] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1417.112590] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1417.112598] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1417.112604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1417.112612] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:09:04 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 32) 15:09:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x11) 15:09:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) 15:09:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3000, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:04 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 33) 15:09:04 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:09:04 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4000, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:04 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) fork() 15:09:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x12) 15:09:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4000, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x15) [ 1430.380297] FAULT_INJECTION: forcing a failure. [ 1430.380297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.382057] CPU: 1 PID: 17072 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1430.383080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1430.384261] Call Trace: [ 1430.384633] dump_stack+0x107/0x167 [ 1430.385121] should_fail.cold+0x5/0xa [ 1430.385655] _copy_from_user+0x2e/0x1b0 [ 1430.386196] __copy_msghdr_from_user+0x91/0x4b0 [ 1430.386844] ? __ia32_sys_shutdown+0x80/0x80 [ 1430.387448] ? udp_v6_push_pending_frames+0x360/0x360 [ 1430.388166] ? inet6_sendmsg+0xbd/0x140 [ 1430.388712] ? inet6_compat_ioctl+0x320/0x320 [ 1430.389325] ? __sock_sendmsg+0x55/0x190 [ 1430.389888] sendmsg_copy_msghdr+0xa1/0x160 [ 1430.390487] ? do_recvmmsg+0x6d0/0x6d0 [ 1430.391081] ? __lock_acquire+0x1657/0x5b00 [ 1430.391752] ___sys_sendmsg+0xc6/0x170 [ 1430.392357] ? sendmsg_copy_msghdr+0x160/0x160 [ 1430.393044] ? vmacache_find+0x55/0x2a0 [ 1430.393676] ? lock_acquire+0x197/0x470 [ 1430.394291] ? find_held_lock+0x2c/0x110 [ 1430.394917] ? __might_fault+0xd3/0x180 [ 1430.395499] ? lock_downgrade+0x6d0/0x6d0 [ 1430.396106] ? asm_exc_page_fault+0x1e/0x30 [ 1430.396745] __sys_sendmmsg+0x195/0x470 [ 1430.397344] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1430.398001] ? lock_downgrade+0x6d0/0x6d0 [ 1430.398655] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1430.399362] ? wait_for_completion_io+0x270/0x270 [ 1430.400083] ? rcu_read_lock_any_held+0x75/0xa0 [ 1430.400783] ? vfs_write+0x354/0xb10 [ 1430.406883] ? fput_many+0x2f/0x1a0 [ 1430.407418] ? ksys_write+0x1a9/0x260 [ 1430.407993] ? __ia32_sys_read+0xb0/0xb0 [ 1430.408605] __x64_sys_sendmmsg+0x99/0x100 [ 1430.409236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1430.409957] do_syscall_64+0x33/0x40 [ 1430.410521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1430.411304] RIP: 0033:0x7f87fda10b19 [ 1430.411852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.414573] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1430.415723] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1430.416800] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1430.417848] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1430.418896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1430.419929] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:09:04 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6000, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1430.483125] FAULT_INJECTION: forcing a failure. [ 1430.483125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.484884] CPU: 0 PID: 17063 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1430.485781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1430.486913] Call Trace: [ 1430.487277] dump_stack+0x107/0x167 [ 1430.487774] should_fail.cold+0x5/0xa [ 1430.488297] _copy_from_user+0x2e/0x1b0 [ 1430.488805] __copy_msghdr_from_user+0x91/0x4b0 [ 1430.489441] ? __ia32_sys_shutdown+0x80/0x80 15:09:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) [ 1430.490039] ? udp_v6_push_pending_frames+0x360/0x360 [ 1430.498789] ? inet6_sendmsg+0xbd/0x140 [ 1430.499378] ? inet6_compat_ioctl+0x320/0x320 [ 1430.500037] ? __sock_sendmsg+0x55/0x190 [ 1430.500644] sendmsg_copy_msghdr+0xa1/0x160 [ 1430.501277] ? do_recvmmsg+0x6d0/0x6d0 [ 1430.501856] ? __lock_acquire+0x1657/0x5b00 [ 1430.502503] ___sys_sendmsg+0xc6/0x170 [ 1430.503088] ? sendmsg_copy_msghdr+0x160/0x160 [ 1430.503744] ? vmacache_find+0x55/0x2a0 [ 1430.504283] ? lock_acquire+0x197/0x470 [ 1430.504807] ? find_held_lock+0x2c/0x110 [ 1430.505402] ? __might_fault+0xd3/0x180 [ 1430.505933] ? lock_downgrade+0x6d0/0x6d0 [ 1430.506475] ? asm_exc_page_fault+0x1e/0x30 [ 1430.507117] __sys_sendmmsg+0x195/0x470 [ 1430.507701] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1430.508327] ? lock_downgrade+0x6d0/0x6d0 [ 1430.508941] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1430.509581] ? wait_for_completion_io+0x270/0x270 [ 1430.510277] ? rcu_read_lock_any_held+0x75/0xa0 [ 1430.510957] ? vfs_write+0x354/0xb10 [ 1430.511499] ? fput_many+0x2f/0x1a0 [ 1430.512032] ? ksys_write+0x1a9/0x260 [ 1430.512586] ? __ia32_sys_read+0xb0/0xb0 [ 1430.513176] __x64_sys_sendmmsg+0x99/0x100 [ 1430.513782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1430.514533] do_syscall_64+0x33/0x40 [ 1430.515049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1430.515712] RIP: 0033:0x7fd3a7c24b19 [ 1430.516213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.518726] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1430.519849] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1430.520891] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1430.521939] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1430.523004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1430.524046] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:09:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) 15:09:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6000, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:18 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x15) 15:09:18 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @none, 0x7ff}, 0xe) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r3 = epoll_create(0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x20000000}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x440d80, 0x0) kcmp(r1, r2, 0x2, r4, r5) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000100)) r6 = fork() ptrace$setopts(0x4206, r0, 0x4, 0x100000) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:09:18 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 34) 15:09:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x17) 15:09:18 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffff, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:18 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:09:18 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 33) 15:09:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffff, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1443.682788] FAULT_INJECTION: forcing a failure. [ 1443.682788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.684299] CPU: 1 PID: 17206 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1443.685152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.686180] Call Trace: [ 1443.686510] dump_stack+0x107/0x167 [ 1443.686959] should_fail.cold+0x5/0xa [ 1443.687471] _copy_from_user+0x2e/0x1b0 [ 1443.687968] __copy_msghdr_from_user+0x91/0x4b0 [ 1443.688553] ? __ia32_sys_shutdown+0x80/0x80 [ 1443.689105] ? udp_v6_push_pending_frames+0x360/0x360 [ 1443.689741] ? inet6_sendmsg+0xbd/0x140 [ 1443.690236] ? inet6_compat_ioctl+0x320/0x320 [ 1443.690787] ? __sock_sendmsg+0x55/0x190 [ 1443.691346] sendmsg_copy_msghdr+0xa1/0x160 [ 1443.691885] ? do_recvmmsg+0x6d0/0x6d0 [ 1443.692396] ? __lock_acquire+0x1657/0x5b00 [ 1443.692935] ___sys_sendmsg+0xc6/0x170 [ 1443.693420] ? sendmsg_copy_msghdr+0x160/0x160 [ 1443.693983] ? vmacache_find+0x55/0x2a0 [ 1443.694526] ? lock_acquire+0x197/0x470 [ 1443.695045] ? find_held_lock+0x2c/0x110 [ 1443.695565] ? __might_fault+0xd3/0x180 [ 1443.696058] ? lock_downgrade+0x6d0/0x6d0 [ 1443.696569] ? asm_exc_page_fault+0x1e/0x30 [ 1443.697146] __sys_sendmmsg+0x195/0x470 [ 1443.697653] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1443.698220] ? lock_downgrade+0x6d0/0x6d0 [ 1443.698739] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1443.699352] ? wait_for_completion_io+0x270/0x270 [ 1443.699944] ? rcu_read_lock_any_held+0x75/0xa0 [ 1443.700556] ? vfs_write+0x354/0xb10 [ 1443.701036] ? fput_many+0x2f/0x1a0 [ 1443.701489] ? ksys_write+0x1a9/0x260 [ 1443.701955] ? __ia32_sys_read+0xb0/0xb0 [ 1443.702457] __x64_sys_sendmmsg+0x99/0x100 [ 1443.702976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.707663] do_syscall_64+0x33/0x40 [ 1443.708148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1443.708793] RIP: 0033:0x7f87fda10b19 [ 1443.709276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.711563] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1443.712516] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1443.713383] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1443.714295] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1443.715208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.716079] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:09:18 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:18 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) 15:09:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1a) 15:09:18 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:18 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x17) [ 1443.882482] FAULT_INJECTION: forcing a failure. [ 1443.882482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.884496] CPU: 1 PID: 17209 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1443.885343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.886353] Call Trace: [ 1443.886681] dump_stack+0x107/0x167 [ 1443.887127] should_fail.cold+0x5/0xa [ 1443.888255] _copy_from_user+0x2e/0x1b0 [ 1443.889328] __copy_msghdr_from_user+0x91/0x4b0 [ 1443.890591] ? __ia32_sys_shutdown+0x80/0x80 [ 1443.891830] ? udp_v6_push_pending_frames+0x360/0x360 [ 1443.893266] ? inet6_sendmsg+0xbd/0x140 [ 1443.894436] ? inet6_compat_ioctl+0x320/0x320 [ 1443.895707] ? __sock_sendmsg+0x55/0x190 [ 1443.896826] sendmsg_copy_msghdr+0xa1/0x160 [ 1443.898057] ? do_recvmmsg+0x6d0/0x6d0 [ 1443.899144] ? __lock_acquire+0x1657/0x5b00 [ 1443.900372] ___sys_sendmsg+0xc6/0x170 [ 1443.901534] ? sendmsg_copy_msghdr+0x160/0x160 [ 1443.902788] ? vmacache_find+0x55/0x2a0 [ 1443.903997] ? lock_acquire+0x197/0x470 [ 1443.905118] ? find_held_lock+0x2c/0x110 [ 1443.906226] ? __might_fault+0xd3/0x180 [ 1443.907262] ? lock_downgrade+0x6d0/0x6d0 [ 1443.907802] ? asm_exc_page_fault+0x1e/0x30 [ 1443.908341] __sys_sendmmsg+0x195/0x470 [ 1443.908833] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1443.909361] ? lock_downgrade+0x6d0/0x6d0 [ 1443.909930] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1443.910557] ? wait_for_completion_io+0x270/0x270 [ 1443.911210] ? rcu_read_lock_any_held+0x75/0xa0 [ 1443.912334] ? vfs_write+0x354/0xb10 [ 1443.913261] ? fput_many+0x2f/0x1a0 [ 1443.914152] ? ksys_write+0x1a9/0x260 [ 1443.915053] ? __ia32_sys_read+0xb0/0xb0 [ 1443.915648] __x64_sys_sendmmsg+0x99/0x100 [ 1443.916166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.916839] do_syscall_64+0x33/0x40 [ 1443.917295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1443.917947] RIP: 0033:0x7fd3a7c24b19 [ 1443.918401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.922501] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1443.924548] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1443.926405] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1443.928287] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1443.930153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.932196] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:09:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1c) 15:09:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:33 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1a) 15:09:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 34) 15:09:33 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:09:33 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:33 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) ptrace(0x10, 0x0) 15:09:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 35) [ 1458.842785] FAULT_INJECTION: forcing a failure. [ 1458.842785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1458.844342] CPU: 0 PID: 17356 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1458.845235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1458.846304] Call Trace: [ 1458.846655] dump_stack+0x107/0x167 [ 1458.847134] should_fail.cold+0x5/0xa [ 1458.847636] _copy_from_user+0x2e/0x1b0 [ 1458.848174] __copy_msghdr_from_user+0x91/0x4b0 [ 1458.848780] ? __ia32_sys_shutdown+0x80/0x80 [ 1458.849352] ? udp_v6_push_pending_frames+0x360/0x360 [ 1458.850029] ? inet6_sendmsg+0xbd/0x140 [ 1458.850546] ? inet6_compat_ioctl+0x320/0x320 [ 1458.851125] ? __sock_sendmsg+0x55/0x190 [ 1458.851669] sendmsg_copy_msghdr+0xa1/0x160 [ 1458.852232] ? do_recvmmsg+0x6d0/0x6d0 [ 1458.852743] ? __lock_acquire+0x1657/0x5b00 [ 1458.853312] ___sys_sendmsg+0xc6/0x170 [ 1458.853822] ? sendmsg_copy_msghdr+0x160/0x160 [ 1458.854413] ? vmacache_find+0x55/0x2a0 [ 1458.854940] ? lock_acquire+0x197/0x470 [ 1458.855455] ? find_held_lock+0x2c/0x110 [ 1458.856003] ? __might_fault+0xd3/0x180 [ 1458.856518] ? lock_downgrade+0x6d0/0x6d0 [ 1458.857055] ? asm_exc_page_fault+0x1e/0x30 [ 1458.857629] __sys_sendmmsg+0x195/0x470 [ 1458.858155] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1458.858713] ? lock_downgrade+0x6d0/0x6d0 [ 1458.859268] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1458.875932] ? wait_for_completion_io+0x270/0x270 [ 1458.876558] ? rcu_read_lock_any_held+0x75/0xa0 [ 1458.877160] ? vfs_write+0x354/0xb10 [ 1458.877643] ? fput_many+0x2f/0x1a0 [ 1458.878130] ? ksys_write+0x1a9/0x260 [ 1458.878628] ? __ia32_sys_read+0xb0/0xb0 [ 1458.879166] __x64_sys_sendmmsg+0x99/0x100 [ 1458.879735] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1458.880400] do_syscall_64+0x33/0x40 [ 1458.880883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1458.881544] RIP: 0033:0x7f87fda10b19 [ 1458.882027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.884406] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1458.885390] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1458.886309] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1458.887229] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.888168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1458.889089] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1458.925492] FAULT_INJECTION: forcing a failure. [ 1458.925492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1458.927024] CPU: 1 PID: 17355 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1458.927937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1458.929005] Call Trace: [ 1458.929355] dump_stack+0x107/0x167 [ 1458.929827] should_fail.cold+0x5/0xa [ 1458.930326] _copy_from_user+0x2e/0x1b0 [ 1458.930846] __copy_msghdr_from_user+0x91/0x4b0 [ 1458.931448] ? __ia32_sys_shutdown+0x80/0x80 [ 1458.932033] ? udp_v6_push_pending_frames+0x360/0x360 [ 1458.932703] ? inet6_sendmsg+0xbd/0x140 [ 1458.933217] ? inet6_compat_ioctl+0x320/0x320 [ 1458.933796] ? __sock_sendmsg+0x55/0x190 [ 1458.934326] sendmsg_copy_msghdr+0xa1/0x160 [ 1458.934885] ? do_recvmmsg+0x6d0/0x6d0 [ 1458.935392] ? __lock_acquire+0x1657/0x5b00 [ 1458.935974] ___sys_sendmsg+0xc6/0x170 [ 1458.936480] ? sendmsg_copy_msghdr+0x160/0x160 [ 1458.937068] ? vmacache_find+0x55/0x2a0 [ 1458.937595] ? lock_acquire+0x197/0x470 [ 1458.938114] ? find_held_lock+0x2c/0x110 [ 1458.938643] ? __might_fault+0xd3/0x180 [ 1458.939157] ? lock_downgrade+0x6d0/0x6d0 [ 1458.939714] ? asm_exc_page_fault+0x1e/0x30 [ 1458.940296] __sys_sendmmsg+0x195/0x470 [ 1458.940819] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1458.941387] ? lock_downgrade+0x6d0/0x6d0 [ 1458.941941] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1458.942572] ? wait_for_completion_io+0x270/0x270 [ 1458.943200] ? rcu_read_lock_any_held+0x75/0xa0 [ 1458.943822] ? vfs_write+0x354/0xb10 [ 1458.944314] ? fput_many+0x2f/0x1a0 [ 1458.944794] ? ksys_write+0x1a9/0x260 [ 1458.945295] ? __ia32_sys_read+0xb0/0xb0 [ 1458.945835] __x64_sys_sendmmsg+0x99/0x100 [ 1458.946387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1458.947056] do_syscall_64+0x33/0x40 [ 1458.947546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1458.948216] RIP: 0033:0x7fd3a7c24b19 [ 1458.948701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.951069] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1458.952075] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1458.952996] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1458.953917] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.954845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1458.955794] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:09:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:33 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1c) 15:09:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create(0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20000000}) fcntl$dupfd(r0, 0x406, r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x0) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000000)) 15:09:33 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0x0, 0xd0, 0x3, @buffer={0x0, 0x9c, &(0x7f00000000c0)=""/156}, &(0x7f0000000180)="3380f7c9300799d4a5a634d8c888338e14803b61b1e8f6d554e4694817ea6ac664b2a3f234f544fcf834f3605be7c2c96048138aa3167a632a782e0168c3b337ba8923ee2b0b703b8d2342cf07196c7591af19307d9a2038de051561bc86558dd3e5a557236d4af3ca9733279035a2a8bbfb32a88c17eca1f240b7364c7a43dc2bd7d35802cfc411fb69c26b72f7591ed69b32751bf15d1354eee190d9098caf92e462f62739862e0e5b49ed415cea5afa7d6460725375be9fafaf559975ee2af6f2c775ae031dd71d162a16f47ac74d", &(0x7f0000000340)=""/162, 0xcb9, 0x7, 0xffffffffffffffff}) ptrace(0x10, r0) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0xfffffffc, 0x89}) move_pages(r1, 0x2000000000000111, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x37, 0x93de, 0x6}) 15:09:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:33 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:33 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f00000000c0)=""/229, 0xe5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) 15:09:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) recvmmsg$unix(r0, &(0x7f00000031c0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000280)=""/180, 0xb4}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/37, 0x25}, {&(0x7f0000000600)=""/110, 0x6e}, {&(0x7f0000000680)=""/79, 0x4f}], 0x9, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/6, 0x6}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/147, 0x93}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)=""/38, 0x26}, {&(0x7f0000001c40)=""/174, 0xae}, {&(0x7f0000001d00)=""/29, 0x1d}], 0x5, &(0x7f0000001dc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/130, 0x82}], 0x1}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000002200)=[{&(0x7f0000002000)=""/242, 0xf2}, {&(0x7f0000002100)=""/214, 0xd6}], 0x2, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002380)=""/250, 0xfa}, {&(0x7f0000002480)=""/8, 0x8}, {&(0x7f00000024c0)=""/208, 0xd0}, {&(0x7f00000025c0)=""/127, 0x7f}, {&(0x7f0000002640)=""/233, 0xe9}, {&(0x7f0000002740)=""/38, 0x26}, {&(0x7f0000002780)=""/45, 0x2d}, {&(0x7f00000027c0)=""/204, 0xcc}, {&(0x7f00000028c0)=""/137, 0x89}, {&(0x7f0000002980)=""/248, 0xf8}], 0xa, &(0x7f0000002b40)}}, {{&(0x7f0000002b80)=@abs, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002c00)=""/210, 0xd2}, {&(0x7f0000002d00)=""/3, 0x3}, {&(0x7f0000002d40)=""/189, 0xbd}, {&(0x7f0000002e00)=""/230, 0xe6}, {&(0x7f0000002f00)=""/10, 0xa}], 0x5, &(0x7f0000002fc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003040)=@abs, 0x6e, &(0x7f00000030c0), 0x0, &(0x7f0000003100)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x8, 0x2000, &(0x7f00000033c0)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000003400)={0x7ff, 0x6d, 0x0, 0x9a78, 0x81, "34927ba1d7a50cd061f2f8f76fe7c490ab587a", 0x400, 0x9e}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) 15:09:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 35) [ 1459.154775] FAULT_INJECTION: forcing a failure. [ 1459.154775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.156340] CPU: 0 PID: 17457 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1459.157184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.158192] Call Trace: [ 1459.158518] dump_stack+0x107/0x167 [ 1459.158965] should_fail.cold+0x5/0xa [ 1459.159434] _copy_from_user+0x2e/0x1b0 [ 1459.163967] __copy_msghdr_from_user+0x91/0x4b0 [ 1459.164536] ? __ia32_sys_shutdown+0x80/0x80 [ 1459.165074] ? udp_v6_push_pending_frames+0x360/0x360 [ 1459.165709] ? inet6_sendmsg+0xbd/0x140 [ 1459.166192] ? inet6_compat_ioctl+0x320/0x320 [ 1459.166737] ? __sock_sendmsg+0x55/0x190 [ 1459.167235] sendmsg_copy_msghdr+0xa1/0x160 [ 1459.167778] ? do_recvmmsg+0x6d0/0x6d0 [ 1459.168254] ? __lock_acquire+0x1657/0x5b00 [ 1459.168789] ___sys_sendmsg+0xc6/0x170 [ 1459.169264] ? sendmsg_copy_msghdr+0x160/0x160 [ 1459.169822] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.170459] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1459.171003] ? trace_hardirqs_on+0x5b/0x180 [ 1459.171530] ? lock_acquire+0x197/0x470 [ 1459.172028] ? find_held_lock+0x2c/0x110 [ 1459.172526] ? __might_fault+0xd3/0x180 [ 1459.173012] ? lock_downgrade+0x6d0/0x6d0 [ 1459.173520] ? io_schedule_timeout+0x140/0x140 [ 1459.174084] __sys_sendmmsg+0x195/0x470 [ 1459.174571] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1459.175098] ? lock_downgrade+0x6d0/0x6d0 [ 1459.175613] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1459.176231] ? wait_for_completion_io+0x270/0x270 [ 1459.176821] ? rcu_read_lock_any_held+0x75/0xa0 [ 1459.177385] ? vfs_write+0x354/0xb10 [ 1459.177839] ? fput_many+0x2f/0x1a0 [ 1459.178282] ? ksys_write+0x1a9/0x260 [ 1459.178745] ? __ia32_sys_read+0xb0/0xb0 [ 1459.179242] __x64_sys_sendmmsg+0x99/0x100 [ 1459.179771] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.180396] do_syscall_64+0x33/0x40 [ 1459.180850] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1459.181473] RIP: 0033:0x7f87fda10b19 [ 1459.181928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.184188] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1459.185120] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1459.185986] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1459.186850] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.187743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.188610] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:09:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xf, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1472.872679] FAULT_INJECTION: forcing a failure. [ 1472.872679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1472.872697] CPU: 1 PID: 17498 Comm: syz-executor.5 Not tainted 5.10.230 #1 15:09:47 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 36) 15:09:47 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = fork() ptrace$getsig(0x4202, r0, 0x8, &(0x7f0000000040)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x307) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:09:47 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="1a0dd1f95bc2e877df72c01509ba32ac76c66e97bf6701c84986c84f6a4ae0a255f90d6ec86f7b9c08ce3b6b6a454f37b8c7d66eb154b0a376761757c78059df0b6d9d027f3f3ab45e9e31cfd51970e53297935fd8238ba5b5d16701e2d8b018fe544d29ff82930747149ffaaf8641e029822337d378be9f531e92c3dd78b15def66aca5243bae374a346db3be928dd55aa34e8f88500b51a11a128e3c31c41b58463d3aebd9a9ad9304f629c95bc1ed57e2da8502ef6bc24ef3f93b12e1091ed46971307c29a90deb3db86a508846a441826252", 0xd4}, {&(0x7f0000000180)="71d95d9fd69cf76bd7d255504bca636ebb8bfef55f5748948bca37fe560d56df196df23e3ec32678cfc4cdb4f903aaf89b50068089ac266e3c3289fc7267bbe1e80877007cbb365223fe183a5e6bf0f2e768e6d8665069b7aeff6c9b6ac0098e07749820173d7c3d84d285e0025ff17a3fc4e468e6567d2fdcbb1270a0777485576dea62eda1", 0x86}, {&(0x7f0000000240)="aa646d0e4c3c9209a8c8ea0fd145f3ad96b4f78137734b1ae88ffaa2f725f2d5a8ef8f94161cbdfbdd66bc528f472ff24ffb14bb629d34d2b032c11c43a74a891ed00892de072838a14b0fe34e79261aade7e6771db7048fd50d106744a41f81701e9f04b88e8cde5a320aaa563d298fb9bbffc822600ee17d0bcc52045ef209aaf7d31d45a30fcc56f1de04b13eec56c7af21bf01181dcfb405eaca2b702e79cc8b48d72b0b7948cb233ee40736997288a11cef3430e0ba618fc5b5ed5e29de7623426ef74e290a83dd696a45ac53", 0xcf}, {&(0x7f0000000340)="a90b9468391ae8a8e08b96cdad1fc03a6abd63cef433866d6014d09dd20761a87e18a78a895581658c4030fe514ae98d0bcb6360ec65ca2d006ba7d372ba9519fc2d754d04dc907017545ab1", 0x4c}, {&(0x7f00000003c0)="a322bff0b20f54e924fb65e8465daa9c7f5d40e9c7bf3372f4bd83d2e9263b5fedfe94fa9c529371e2029736b38c7c20b130e0b56aaddd09094cf2bbff91246efa10e5fab0be4ba37507c0ee858448049355727d762ee0fcecf5e722089b19f566602403d1975916ebbf8be492344cadf8865c6e50f5b0e7687f1b35765a449c04e90c99abc6b1d3ab2fb325ec5d855ca7104ac696cec83cc55f51c610556ddbf9d29819dd3d", 0xe1}, {&(0x7f0000000000)="fa153e33026b61d976fadc7ebf026823b30662b08326b1129774", 0x1a}, {&(0x7f0000000480)="c419dd0738d32b587857bf91781442e86125c4ab243a486c96d416a181c3a026d95c01", 0x23}, {&(0x7f00000004c0)="9e3b84d3e60073874548f4dccaaabba2f9f770d3cf77671d67346dc268d767be1260e7b5410ee3c97fba84ed093c38e125ca2f307c81bd3263068417dadb140102c5e24dd08e75097ff3bf7ed3cfa35d7a8237e18dbf7c1c487355a6f3191d37aeac28d9657b48", 0x67}, {&(0x7f0000000540)="a6db9e17ffe5e15a2d3793286c8e3a720b47b93e852f52fbea150a21c2c138a3488bd80702322e1b521db68b6564968896fbf64cce955b90072c837b06c39d3a9cbee3137358446ecea3fbabc8d9527529fa466fb68eefa00e28dbc1f5f927bfbbd7c46cfe74303dac6235f7bb9eec4b16f4462765454e064bd5d3d2998d8cd1d8ca03a732a902a425039f96bc848e8bb38564a9b25bd3bbf538f106d5b1a45a886922b7dc97907db2a81554f8c1b04fccd24634ef68f656b9bc7ddb0cd056821d15a3f36e346c3120221f", 0xcb}], 0x9) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000700)={0x9, 0x401}) r1 = epoll_create(0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20000000}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ftruncate(r0, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) write$binfmt_elf64(r2, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x0, 0x83, 0x2, 0x1, 0x3, 0x3, 0x0, 0x7, 0x40, 0x202, 0x1, 0x3627, 0x38, 0x2, 0x0, 0x8, 0x9}, [{0x5, 0x0, 0x1, 0x467, 0x0, 0x7, 0xb362, 0x7}, {0x6474e552, 0x2, 0x8, 0x8, 0x744d, 0x47, 0x9, 0x6}], "66fe337959040df953ada506886f930e99a557907b866c9304423d01cdcda3fefd6cf3f5731ecda39d5d64d1d7892efb5844dce01ce8b0dcb7996bd44e9d919e3911874573ecb153d0994444b44f1795985131d437d59e12622ab69d27b34952b0e2172cca20f356c1a49a1b42494e383dfb4c3abad2cad874104e13094eaa6c8df2fcd04e0e31f82f0ce6211af69e6c86deb2d19ab4db4cacdd3f4e52cb42007ccdfb6ae9d811a8493a016ad96d86502002d4cef2989cef05e9c0c1c64be720ba6a3fc6ab652a17da201168d7b743afe72fb0c54e63edd42c8f483dc095d9", ['\x00']}, 0x28f) 15:09:47 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:09:47 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 1472.872705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 36) 15:09:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x119000, 0x11) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000100)) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000080)=0x1) 15:09:47 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xf, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1472.872710] Call Trace: [ 1472.872731] dump_stack+0x107/0x167 [ 1472.872747] should_fail.cold+0x5/0xa [ 1472.872769] _copy_from_user+0x2e/0x1b0 [ 1472.872790] __copy_msghdr_from_user+0x91/0x4b0 [ 1472.872806] ? __ia32_sys_shutdown+0x80/0x80 [ 1472.872823] ? udp_v6_push_pending_frames+0x360/0x360 [ 1472.872841] ? inet6_sendmsg+0xbd/0x140 [ 1472.872856] ? inet6_compat_ioctl+0x320/0x320 [ 1472.872868] ? __sock_sendmsg+0x55/0x190 [ 1472.872885] sendmsg_copy_msghdr+0xa1/0x160 [ 1472.872897] ? do_recvmmsg+0x6d0/0x6d0 [ 1472.872915] ? __lock_acquire+0x1657/0x5b00 [ 1472.872940] ___sys_sendmsg+0xc6/0x170 [ 1472.872957] ? sendmsg_copy_msghdr+0x160/0x160 15:09:47 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1c, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1c, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1472.872970] ? vmacache_find+0x55/0x2a0 [ 1472.872995] ? lock_acquire+0x197/0x470 [ 1472.873007] ? find_held_lock+0x2c/0x110 [ 1472.873025] ? __might_fault+0xd3/0x180 [ 1472.873040] ? lock_downgrade+0x6d0/0x6d0 15:09:47 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 37) [ 1472.873054] ? asm_exc_page_fault+0x1e/0x30 [ 1472.873082] __sys_sendmmsg+0x195/0x470 [ 1472.873102] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1472.873116] ? lock_downgrade+0x6d0/0x6d0 [ 1472.873146] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1472.873170] ? wait_for_completion_io+0x270/0x270 [ 1472.873188] ? rcu_read_lock_any_held+0x75/0xa0 [ 1472.873205] ? vfs_write+0x354/0xb10 [ 1472.873220] ? fput_many+0x2f/0x1a0 [ 1472.873235] ? ksys_write+0x1a9/0x260 [ 1472.873250] ? __ia32_sys_read+0xb0/0xb0 [ 1472.873271] __x64_sys_sendmmsg+0x99/0x100 [ 1472.873286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1472.873299] do_syscall_64+0x33/0x40 [ 1472.873313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1472.873323] RIP: 0033:0x7f87fda10b19 [ 1472.873339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.873347] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1472.873364] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1472.873373] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1472.873382] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1472.873391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1472.873400] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1472.989404] FAULT_INJECTION: forcing a failure. [ 1472.989404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.005610] CPU: 1 PID: 17574 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1473.005619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.005623] Call Trace: [ 1473.005645] dump_stack+0x107/0x167 [ 1473.005661] should_fail.cold+0x5/0xa [ 1473.005683] _copy_from_user+0x2e/0x1b0 [ 1473.005704] __copy_msghdr_from_user+0x91/0x4b0 [ 1473.005720] ? __ia32_sys_shutdown+0x80/0x80 [ 1473.005737] ? udp_v6_push_pending_frames+0x360/0x360 [ 1473.005756] ? inet6_sendmsg+0xbd/0x140 [ 1473.005772] ? inet6_compat_ioctl+0x320/0x320 [ 1473.005785] ? __sock_sendmsg+0x55/0x190 [ 1473.005805] sendmsg_copy_msghdr+0xa1/0x160 [ 1473.005820] ? do_recvmmsg+0x6d0/0x6d0 15:09:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x30, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1473.005839] ? __lock_acquire+0x1657/0x5b00 [ 1473.005865] ___sys_sendmsg+0xc6/0x170 [ 1473.005884] ? sendmsg_copy_msghdr+0x160/0x160 [ 1473.005899] ? vmacache_find+0x55/0x2a0 [ 1473.005925] ? lock_acquire+0x197/0x470 [ 1473.005938] ? find_held_lock+0x2c/0x110 [ 1473.005956] ? __might_fault+0xd3/0x180 [ 1473.005971] ? lock_downgrade+0x6d0/0x6d0 [ 1473.005986] ? asm_exc_page_fault+0x1e/0x30 [ 1473.006015] __sys_sendmmsg+0x195/0x470 [ 1473.006034] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1473.006048] ? lock_downgrade+0x6d0/0x6d0 [ 1473.006079] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.006098] ? wait_for_completion_io+0x270/0x270 [ 1473.006115] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.006130] ? vfs_write+0x354/0xb10 [ 1473.006144] ? fput_many+0x2f/0x1a0 [ 1473.006160] ? ksys_write+0x1a9/0x260 [ 1473.006179] ? __ia32_sys_read+0xb0/0xb0 [ 1473.006199] __x64_sys_sendmmsg+0x99/0x100 [ 1473.006214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.006225] do_syscall_64+0x33/0x40 [ 1473.006239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1473.006250] RIP: 0033:0x7f87fda10b19 [ 1473.006264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.006272] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1473.006289] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1473.006297] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1473.006305] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.006312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.006322] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1473.036519] FAULT_INJECTION: forcing a failure. [ 1473.036519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.036536] CPU: 0 PID: 17511 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1473.036544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.036548] Call Trace: [ 1473.036565] dump_stack+0x107/0x167 [ 1473.036580] should_fail.cold+0x5/0xa [ 1473.036600] _copy_from_user+0x2e/0x1b0 [ 1473.036619] __copy_msghdr_from_user+0x91/0x4b0 [ 1473.036635] ? __ia32_sys_shutdown+0x80/0x80 [ 1473.036651] ? udp_v6_push_pending_frames+0x360/0x360 [ 1473.036671] ? inet6_sendmsg+0xbd/0x140 [ 1473.036690] ? inet6_compat_ioctl+0x320/0x320 [ 1473.036703] ? __sock_sendmsg+0x55/0x190 [ 1473.036722] sendmsg_copy_msghdr+0xa1/0x160 [ 1473.036736] ? do_recvmmsg+0x6d0/0x6d0 [ 1473.036753] ? __lock_acquire+0x1657/0x5b00 [ 1473.036777] ___sys_sendmsg+0xc6/0x170 [ 1473.036794] ? sendmsg_copy_msghdr+0x160/0x160 [ 1473.036810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1473.036822] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1473.036835] ? trace_hardirqs_on+0x5b/0x180 [ 1473.036854] ? lock_acquire+0x197/0x470 [ 1473.036867] ? find_held_lock+0x2c/0x110 [ 1473.036884] ? __might_fault+0xd3/0x180 [ 1473.036899] ? lock_downgrade+0x6d0/0x6d0 [ 1473.036916] ? io_schedule_timeout+0x140/0x140 [ 1473.036942] __sys_sendmmsg+0x195/0x470 [ 1473.036961] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1473.036975] ? lock_downgrade+0x6d0/0x6d0 [ 1473.037003] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.037021] ? wait_for_completion_io+0x270/0x270 [ 1473.037038] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.037052] ? vfs_write+0x354/0xb10 [ 1473.037066] ? fput_many+0x2f/0x1a0 [ 1473.037081] ? ksys_write+0x1a9/0x260 [ 1473.037095] ? __ia32_sys_read+0xb0/0xb0 [ 1473.037115] __x64_sys_sendmmsg+0x99/0x100 [ 1473.037129] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.037146] do_syscall_64+0x33/0x40 [ 1473.080156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1473.080166] RIP: 0033:0x7fd3a7c24b19 [ 1473.080180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.080188] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1473.080204] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 15:09:47 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 38) 15:09:47 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x30, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1473.080213] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1473.080221] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.080229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:09:47 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0x6, 0x7a5, 0x7f, 0x2}}) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) [ 1473.080238] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1473.141000] FAULT_INJECTION: forcing a failure. [ 1473.141000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.141017] CPU: 1 PID: 17634 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1473.141025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.141030] Call Trace: [ 1473.141049] dump_stack+0x107/0x167 [ 1473.141064] should_fail.cold+0x5/0xa [ 1473.141086] _copy_from_user+0x2e/0x1b0 [ 1473.141107] __copy_msghdr_from_user+0x91/0x4b0 [ 1473.141123] ? __ia32_sys_shutdown+0x80/0x80 [ 1473.141139] ? udp_v6_push_pending_frames+0x360/0x360 [ 1473.141164] ? inet6_sendmsg+0xbd/0x140 [ 1473.141178] ? inet6_compat_ioctl+0x320/0x320 [ 1473.141191] ? __sock_sendmsg+0x55/0x190 [ 1473.141211] sendmsg_copy_msghdr+0xa1/0x160 [ 1473.141223] ? do_recvmmsg+0x6d0/0x6d0 [ 1473.141242] ? __lock_acquire+0x1657/0x5b00 [ 1473.141266] ___sys_sendmsg+0xc6/0x170 [ 1473.141283] ? sendmsg_copy_msghdr+0x160/0x160 [ 1473.141296] ? vmacache_find+0x55/0x2a0 [ 1473.141321] ? lock_acquire+0x197/0x470 [ 1473.141334] ? find_held_lock+0x2c/0x110 [ 1473.141352] ? __might_fault+0xd3/0x180 [ 1473.141366] ? lock_downgrade+0x6d0/0x6d0 [ 1473.141380] ? asm_exc_page_fault+0x1e/0x30 [ 1473.141409] __sys_sendmmsg+0x195/0x470 [ 1473.141428] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1473.141442] ? lock_downgrade+0x6d0/0x6d0 [ 1473.141470] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.174939] ? wait_for_completion_io+0x270/0x270 [ 1473.174962] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.174980] ? vfs_write+0x354/0xb10 [ 1473.176639] ? fput_many+0x2f/0x1a0 [ 1473.176652] ? ksys_write+0x1a9/0x260 [ 1473.176664] ? __ia32_sys_read+0xb0/0xb0 [ 1473.176683] __x64_sys_sendmmsg+0x99/0x100 [ 1473.176698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.176710] do_syscall_64+0x33/0x40 [ 1473.176723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1473.176737] RIP: 0033:0x7f87fda10b19 [ 1473.176749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.176757] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1473.183546] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1473.183554] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1473.183567] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.187249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.187258] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:09:47 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:09:47 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 37) [ 1473.324957] FAULT_INJECTION: forcing a failure. [ 1473.324957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.326574] CPU: 0 PID: 17667 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1473.327477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.328572] Call Trace: [ 1473.328929] dump_stack+0x107/0x167 [ 1473.329409] should_fail.cold+0x5/0xa [ 1473.329930] _copy_from_user+0x2e/0x1b0 [ 1473.330475] __copy_msghdr_from_user+0x91/0x4b0 [ 1473.331091] ? __ia32_sys_shutdown+0x80/0x80 [ 1473.331685] ? udp_v6_push_pending_frames+0x360/0x360 [ 1473.332400] ? inet6_sendmsg+0xbd/0x140 [ 1473.332931] ? inet6_compat_ioctl+0x320/0x320 [ 1473.333516] ? __sock_sendmsg+0x55/0x190 [ 1473.334056] sendmsg_copy_msghdr+0xa1/0x160 [ 1473.334636] ? do_recvmmsg+0x6d0/0x6d0 [ 1473.335159] ? __lock_acquire+0x1657/0x5b00 [ 1473.335735] ___sys_sendmsg+0xc6/0x170 [ 1473.336264] ? sendmsg_copy_msghdr+0x160/0x160 [ 1473.336864] ? vmacache_find+0x55/0x2a0 [ 1473.337397] ? lock_acquire+0x197/0x470 [ 1473.337928] ? find_held_lock+0x2c/0x110 [ 1473.338473] ? __might_fault+0xd3/0x180 [ 1473.339000] ? lock_downgrade+0x6d0/0x6d0 [ 1473.339562] ? asm_exc_page_fault+0x1e/0x30 [ 1473.340171] __sys_sendmmsg+0x195/0x470 [ 1473.340675] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1473.341202] ? lock_downgrade+0x6d0/0x6d0 [ 1473.341722] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.342313] ? wait_for_completion_io+0x270/0x270 [ 1473.342907] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.343472] ? vfs_write+0x354/0xb10 [ 1473.343924] ? fput_many+0x2f/0x1a0 [ 1473.344416] ? ksys_write+0x1a9/0x260 [ 1473.344923] ? __ia32_sys_read+0xb0/0xb0 [ 1473.345470] __x64_sys_sendmmsg+0x99/0x100 [ 1473.346020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.346694] do_syscall_64+0x33/0x40 [ 1473.347184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1473.347863] RIP: 0033:0x7fd3a7c24b19 [ 1473.348368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.350730] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1473.351711] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1473.352652] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1473.353585] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.354516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.355443] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:10:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 38) 15:10:00 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() r1 = epoll_create(0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x20000000}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) r3 = pidfd_open(0xffffffffffffffff, 0x0) sendfile(r1, r3, &(0x7f0000000000)=0x400, 0x8) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:10:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81, 0x10) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) 15:10:00 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xff, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:00 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:10:00 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000000}) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000300)='\x00', 0x22e304b2ee6be063) r1 = epoll_create(0x4000009) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0xe0000003}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000080)=""/69, &(0x7f0000000000)=0x45) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', r3, 0x4, 0x1, 0x14, 0x8, 0x53, @mcast1, @remote, 0x10, 0x8000, 0x2afb9bfe, 0x3}}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000340)=0x5) r5 = epoll_create(0x8000) r6 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x40002004}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000000c0)={0x20000000}) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0) epoll_wait(r5, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x6, 0x2) 15:10:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 39) 15:10:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) [ 1486.524270] FAULT_INJECTION: forcing a failure. [ 1486.524270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.552700] CPU: 0 PID: 17761 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1486.553566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.554597] Call Trace: [ 1486.554958] dump_stack+0x107/0x167 [ 1486.555405] should_fail.cold+0x5/0xa [ 1486.555878] _copy_from_user+0x2e/0x1b0 [ 1486.556371] __copy_msghdr_from_user+0x91/0x4b0 [ 1486.556958] ? __ia32_sys_shutdown+0x80/0x80 [ 1486.557500] ? udp_v6_push_pending_frames+0x360/0x360 [ 1486.558147] ? inet6_sendmsg+0xbd/0x140 [ 1486.558635] ? inet6_compat_ioctl+0x320/0x320 [ 1486.559189] ? __sock_sendmsg+0x55/0x190 [ 1486.559690] sendmsg_copy_msghdr+0xa1/0x160 [ 1486.560229] ? do_recvmmsg+0x6d0/0x6d0 [ 1486.560731] ? __lock_acquire+0x1657/0x5b00 [ 1486.561270] ___sys_sendmsg+0xc6/0x170 [ 1486.561749] ? sendmsg_copy_msghdr+0x160/0x160 [ 1486.562309] ? vmacache_find+0x55/0x2a0 [ 1486.562813] ? lock_acquire+0x197/0x470 [ 1486.563340] ? find_held_lock+0x2c/0x110 [ 1486.563877] ? __might_fault+0xd3/0x180 [ 1486.564364] ? lock_downgrade+0x6d0/0x6d0 [ 1486.564889] ? asm_exc_page_fault+0x1e/0x30 [ 1486.565429] __sys_sendmmsg+0x195/0x470 [ 1486.565931] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1486.566464] ? lock_downgrade+0x6d0/0x6d0 [ 1486.566990] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1486.567584] ? wait_for_completion_io+0x270/0x270 [ 1486.568182] ? rcu_read_lock_any_held+0x75/0xa0 [ 1486.568770] ? vfs_write+0x354/0xb10 [ 1486.569275] ? fput_many+0x2f/0x1a0 [ 1486.569729] ? ksys_write+0x1a9/0x260 [ 1486.570224] ? __ia32_sys_read+0xb0/0xb0 [ 1486.570726] __x64_sys_sendmmsg+0x99/0x100 [ 1486.571244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.571887] do_syscall_64+0x33/0x40 [ 1486.572373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.573045] RIP: 0033:0x7fd3a7c24b19 [ 1486.573502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.575751] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1486.576748] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1486.577647] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1486.578520] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.579442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.580347] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1486.598395] FAULT_INJECTION: forcing a failure. [ 1486.598395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.599866] CPU: 0 PID: 17757 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1486.600726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.601791] Call Trace: [ 1486.602144] dump_stack+0x107/0x167 [ 1486.602590] should_fail.cold+0x5/0xa [ 1486.603063] _copy_from_user+0x2e/0x1b0 [ 1486.603553] __copy_msghdr_from_user+0x91/0x4b0 [ 1486.604170] ? __ia32_sys_shutdown+0x80/0x80 [ 1486.604726] ? udp_v6_push_pending_frames+0x360/0x360 [ 1486.605388] ? inet6_sendmsg+0xbd/0x140 [ 1486.605876] ? inet6_compat_ioctl+0x320/0x320 [ 1486.606426] ? __sock_sendmsg+0x55/0x190 [ 1486.606929] sendmsg_copy_msghdr+0xa1/0x160 [ 1486.607457] ? do_recvmmsg+0x6d0/0x6d0 [ 1486.607955] ? __lock_acquire+0x1657/0x5b00 [ 1486.608519] ___sys_sendmsg+0xc6/0x170 [ 1486.609046] ? sendmsg_copy_msghdr+0x160/0x160 [ 1486.609603] ? vmacache_find+0x55/0x2a0 [ 1486.610098] ? lock_acquire+0x197/0x470 [ 1486.610584] ? find_held_lock+0x2c/0x110 [ 1486.611124] ? __might_fault+0xd3/0x180 [ 1486.611614] ? lock_downgrade+0x6d0/0x6d0 [ 1486.612150] ? asm_exc_page_fault+0x1e/0x30 [ 1486.612701] __sys_sendmmsg+0x195/0x470 [ 1486.613192] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1486.613719] ? lock_downgrade+0x6d0/0x6d0 [ 1486.614286] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1486.614903] ? wait_for_completion_io+0x270/0x270 [ 1486.615504] ? rcu_read_lock_any_held+0x75/0xa0 [ 1486.616074] ? vfs_write+0x354/0xb10 [ 1486.616529] ? fput_many+0x2f/0x1a0 [ 1486.617022] ? ksys_write+0x1a9/0x260 [ 1486.617506] ? __ia32_sys_read+0xb0/0xb0 [ 1486.618042] __x64_sys_sendmmsg+0x99/0x100 [ 1486.618559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.619187] do_syscall_64+0x33/0x40 [ 1486.619640] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.620266] RIP: 0033:0x7f87fda10b19 [ 1486.620978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.623285] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 15:10:00 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xff, 0x1, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1486.624257] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1486.625181] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1486.626054] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.626931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.627803] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:10:01 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 39) 15:10:01 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = dup2(r0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) [ 1486.730680] FAULT_INJECTION: forcing a failure. [ 1486.730680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.732233] CPU: 1 PID: 17893 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1486.733093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.734124] Call Trace: [ 1486.734452] dump_stack+0x107/0x167 [ 1486.734898] should_fail.cold+0x5/0xa [ 1486.735367] _copy_from_user+0x2e/0x1b0 [ 1486.735858] __copy_msghdr_from_user+0x91/0x4b0 [ 1486.736436] ? __ia32_sys_shutdown+0x80/0x80 [ 1486.736993] ? udp_v6_push_pending_frames+0x360/0x360 [ 1486.737630] ? inet6_sendmsg+0xbd/0x140 [ 1486.738116] ? inet6_compat_ioctl+0x320/0x320 [ 1486.738674] ? __sock_sendmsg+0x55/0x190 [ 1486.739179] sendmsg_copy_msghdr+0xa1/0x160 [ 1486.739705] ? do_recvmmsg+0x6d0/0x6d0 [ 1486.740185] ? __lock_acquire+0x1657/0x5b00 [ 1486.740735] ___sys_sendmsg+0xc6/0x170 [ 1486.741219] ? sendmsg_copy_msghdr+0x160/0x160 [ 1486.741780] ? vmacache_find+0x55/0x2a0 [ 1486.742280] ? lock_acquire+0x197/0x470 [ 1486.742763] ? find_held_lock+0x2c/0x110 [ 1486.743271] ? __might_fault+0xd3/0x180 [ 1486.743761] ? lock_downgrade+0x6d0/0x6d0 [ 1486.744273] ? asm_exc_page_fault+0x1e/0x30 [ 1486.744823] __sys_sendmmsg+0x195/0x470 [ 1486.745311] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1486.745836] ? lock_downgrade+0x6d0/0x6d0 [ 1486.746362] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1486.746958] ? wait_for_completion_io+0x270/0x270 [ 1486.747552] ? rcu_read_lock_any_held+0x75/0xa0 [ 1486.748118] ? vfs_write+0x354/0xb10 [ 1486.748572] ? fput_many+0x2f/0x1a0 [ 1486.749030] ? ksys_write+0x1a9/0x260 [ 1486.749506] ? __ia32_sys_read+0xb0/0xb0 [ 1486.750009] __x64_sys_sendmmsg+0x99/0x100 [ 1486.750529] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.751156] do_syscall_64+0x33/0x40 [ 1486.751609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.752244] RIP: 0033:0x7fd3a7c24b19 [ 1486.752712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1486.754976] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1486.755927] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1486.756810] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1486.757688] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.758574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.758582] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:10:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 40) 15:10:14 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./\x00\x00\x00\x000\x00']) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:10:14 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) lseek(0xffffffffffffffff, 0x7fffffff, 0x6) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0xfffffffffffffffe, 0x210000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) 15:10:14 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:14 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:10:14 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 40) 15:10:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:14 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) r1 = fork() ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x36, 0x93de, 0x5}) ptrace$getregset(0x4204, r1, 0x201, &(0x7f00000000c0)={&(0x7f0000000000)=""/124, 0x7c}) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) ptrace$getsig(0x4202, r2, 0x4, &(0x7f0000000100)) 15:10:14 executing program 7: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'vcan0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x1f, 0x6, 0x0, 0x4, 0xe31, 0x3, 0x400, 0x18}}) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1499.924151] FAULT_INJECTION: forcing a failure. [ 1499.924151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.924285] CPU: 1 PID: 17919 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1499.924294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1499.924299] Call Trace: [ 1499.924320] dump_stack+0x107/0x167 [ 1499.924336] should_fail.cold+0x5/0xa [ 1499.924357] _copy_from_user+0x2e/0x1b0 [ 1499.924378] __copy_msghdr_from_user+0x91/0x4b0 [ 1499.924395] ? __ia32_sys_shutdown+0x80/0x80 [ 1499.924412] ? udp_v6_push_pending_frames+0x360/0x360 [ 1499.924432] ? inet6_sendmsg+0xbd/0x140 [ 1499.924448] ? inet6_compat_ioctl+0x320/0x320 [ 1499.924461] ? __sock_sendmsg+0x55/0x190 [ 1499.924482] sendmsg_copy_msghdr+0xa1/0x160 [ 1499.924497] ? do_recvmmsg+0x6d0/0x6d0 [ 1499.924517] ? __lock_acquire+0x1657/0x5b00 [ 1499.924542] ___sys_sendmsg+0xc6/0x170 [ 1499.924559] ? sendmsg_copy_msghdr+0x160/0x160 [ 1499.924573] ? vmacache_find+0x55/0x2a0 [ 1499.924598] ? lock_acquire+0x197/0x470 [ 1499.924612] ? find_held_lock+0x2c/0x110 [ 1499.924631] ? __might_fault+0xd3/0x180 [ 1499.924646] ? lock_downgrade+0x6d0/0x6d0 [ 1499.924661] ? asm_exc_page_fault+0x1e/0x30 [ 1499.924691] __sys_sendmmsg+0x195/0x470 [ 1499.924711] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1499.924726] ? lock_downgrade+0x6d0/0x6d0 [ 1499.924757] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1499.924776] ? wait_for_completion_io+0x270/0x270 [ 1499.924794] ? rcu_read_lock_any_held+0x75/0xa0 [ 1499.924809] ? vfs_write+0x354/0xb10 [ 1499.924824] ? fput_many+0x2f/0x1a0 [ 1499.924840] ? ksys_write+0x1a9/0x260 [ 1499.924856] ? __ia32_sys_read+0xb0/0xb0 [ 1499.924877] __x64_sys_sendmmsg+0x99/0x100 [ 1499.924892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1499.924904] do_syscall_64+0x33/0x40 [ 1499.924918] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1499.924929] RIP: 0033:0x7f87fda10b19 [ 1499.924944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1499.924953] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1499.924970] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1499.924979] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1499.924988] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1499.924997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1499.925006] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1499.925873] FAULT_INJECTION: forcing a failure. [ 1499.925873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.966210] CPU: 1 PID: 17914 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1499.966218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1499.966225] Call Trace: [ 1499.966248] dump_stack+0x107/0x167 [ 1499.968949] should_fail.cold+0x5/0xa [ 1499.968971] _copy_from_user+0x2e/0x1b0 [ 1499.968992] __copy_msghdr_from_user+0x91/0x4b0 [ 1499.969007] ? __ia32_sys_shutdown+0x80/0x80 [ 1499.969024] ? udp_v6_push_pending_frames+0x360/0x360 [ 1499.973066] ? inet6_sendmsg+0xbd/0x140 [ 1499.973085] ? inet6_compat_ioctl+0x320/0x320 [ 1499.978113] ? __sock_sendmsg+0x55/0x190 [ 1499.978760] sendmsg_copy_msghdr+0xa1/0x160 [ 1499.979433] ? do_recvmmsg+0x6d0/0x6d0 [ 1499.980036] ? __lock_acquire+0x1657/0x5b00 [ 1499.980709] ___sys_sendmsg+0xc6/0x170 [ 1499.981308] ? sendmsg_copy_msghdr+0x160/0x160 [ 1499.982006] ? vmacache_find+0x55/0x2a0 [ 1499.982623] ? lock_acquire+0x197/0x470 [ 1499.983231] ? find_held_lock+0x2c/0x110 [ 1499.983857] ? __might_fault+0xd3/0x180 [ 1499.984473] ? lock_downgrade+0x6d0/0x6d0 [ 1499.985115] ? asm_exc_page_fault+0x1e/0x30 [ 1499.985698] __sys_sendmmsg+0x195/0x470 [ 1499.986222] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1499.986798] ? lock_downgrade+0x6d0/0x6d0 [ 1499.987361] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1499.987970] ? wait_for_completion_io+0x270/0x270 [ 1499.988599] ? rcu_read_lock_any_held+0x75/0xa0 [ 1499.989223] ? vfs_write+0x354/0xb10 [ 1499.989715] ? fput_many+0x2f/0x1a0 [ 1499.990196] ? ksys_write+0x1a9/0x260 [ 1499.990702] ? __ia32_sys_read+0xb0/0xb0 [ 1499.991237] __x64_sys_sendmmsg+0x99/0x100 [ 1499.991802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1499.992469] do_syscall_64+0x33/0x40 [ 1499.992959] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1499.997740] RIP: 0033:0x7fd3a7c24b19 [ 1499.998314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.001173] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1500.002299] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1500.003342] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1500.004385] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1500.005446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1500.006500] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:10:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:14 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7) 15:10:14 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x103000, 0x87) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 15:10:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 41) [ 1500.093499] FAULT_INJECTION: forcing a failure. [ 1500.093499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.095368] CPU: 1 PID: 17979 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1500.096437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1500.097623] Call Trace: [ 1500.097977] dump_stack+0x107/0x167 [ 1500.098454] should_fail.cold+0x5/0xa [ 1500.098964] _copy_from_user+0x2e/0x1b0 [ 1500.099488] __copy_msghdr_from_user+0x91/0x4b0 [ 1500.100100] ? __ia32_sys_shutdown+0x80/0x80 [ 1500.100670] ? udp_v6_push_pending_frames+0x360/0x360 [ 1500.101386] ? inet6_sendmsg+0xbd/0x140 [ 1500.101980] ? inet6_compat_ioctl+0x320/0x320 [ 1500.103521] ? __sock_sendmsg+0x55/0x190 [ 1500.104958] sendmsg_copy_msghdr+0xa1/0x160 [ 1500.106447] ? do_recvmmsg+0x6d0/0x6d0 [ 1500.107790] ? __lock_acquire+0x1657/0x5b00 [ 1500.109221] ___sys_sendmsg+0xc6/0x170 [ 1500.110488] ? sendmsg_copy_msghdr+0x160/0x160 [ 1500.110505] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1500.112554] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1500.113403] ? trace_hardirqs_on+0x5b/0x180 [ 1500.114781] ? lock_acquire+0x197/0x470 [ 1500.116056] ? find_held_lock+0x2c/0x110 [ 1500.117366] ? __might_fault+0xd3/0x180 [ 1500.118630] ? lock_downgrade+0x6d0/0x6d0 [ 1500.119968] ? io_schedule_timeout+0x140/0x140 [ 1500.121407] __sys_sendmmsg+0x195/0x470 [ 1500.122631] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1500.123949] ? lock_downgrade+0x6d0/0x6d0 [ 1500.125259] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1500.126766] ? wait_for_completion_io+0x270/0x270 [ 1500.128329] ? rcu_read_lock_any_held+0x75/0xa0 [ 1500.129793] ? vfs_write+0x354/0xb10 [ 1500.129808] ? fput_many+0x2f/0x1a0 [ 1500.129823] ? ksys_write+0x1a9/0x260 [ 1500.129837] ? __ia32_sys_read+0xb0/0xb0 [ 1500.129857] __x64_sys_sendmmsg+0x99/0x100 [ 1500.129872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1500.129884] do_syscall_64+0x33/0x40 [ 1500.129896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 15:10:14 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000100)={0x0, 0x2, 0x7fff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x206500, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x3, 0x1, 0xde4, 0x40, 0x80, "28adcdb6c828217ebafc416da63f37e84144ee", 0x6, 0x8}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x56) ioctl$TCFLSH(r1, 0x540b, 0x1) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x529400, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000580)={0x3, 0x1, 0x3, 0xf, 0xa8, &(0x7f0000000180)}) 15:10:14 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:10:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1500.129906] RIP: 0033:0x7f87fda10b19 [ 1500.129921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.129929] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1500.129945] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1500.129953] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 15:10:14 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1500.129961] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1500.129969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:10:14 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = fork() ptrace(0x10, r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000004c0)={0x3f, 0x101, 0x0, 0x1, 0x7, "509fb7f999915be0957fa51fb0e153064bec67", 0x2, 0x7}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x6, 0x1ff}}, './file0\x00'}) fcntl$setownex(r4, 0xf, &(0x7f0000000480)={0x2, r0}) clone3(&(0x7f0000000240)={0x40300400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x3}, &(0x7f0000000100)=""/250, 0xfa, &(0x7f0000000340)=""/249, &(0x7f0000000200)=[r1, r0], 0x2, {r3}}, 0x58) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:10:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1500.129978] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:10:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 42) [ 1500.322847] FAULT_INJECTION: forcing a failure. [ 1500.322847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.326775] CPU: 0 PID: 18076 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1500.328976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1500.331624] Call Trace: [ 1500.332476] dump_stack+0x107/0x167 [ 1500.333629] should_fail.cold+0x5/0xa [ 1500.334821] _copy_from_user+0x2e/0x1b0 [ 1500.336108] __copy_msghdr_from_user+0x91/0x4b0 [ 1500.337589] ? __ia32_sys_shutdown+0x80/0x80 [ 1500.338929] ? udp_v6_push_pending_frames+0x360/0x360 [ 1500.340523] ? inet6_sendmsg+0xbd/0x140 [ 1500.341786] ? inet6_compat_ioctl+0x320/0x320 [ 1500.343186] ? __sock_sendmsg+0x55/0x190 [ 1500.344499] sendmsg_copy_msghdr+0xa1/0x160 [ 1500.345852] ? do_recvmmsg+0x6d0/0x6d0 [ 1500.347117] ? __lock_acquire+0x1657/0x5b00 [ 1500.348547] ___sys_sendmsg+0xc6/0x170 [ 1500.349834] ? sendmsg_copy_msghdr+0x160/0x160 [ 1500.351303] ? vmacache_find+0x55/0x2a0 [ 1500.352610] ? lock_acquire+0x197/0x470 [ 1500.353912] ? find_held_lock+0x2c/0x110 [ 1500.355239] ? __might_fault+0xd3/0x180 [ 1500.356527] ? lock_downgrade+0x6d0/0x6d0 [ 1500.357894] ? asm_exc_page_fault+0x1e/0x30 [ 1500.359351] __sys_sendmmsg+0x195/0x470 [ 1500.360649] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1500.362061] ? lock_downgrade+0x6d0/0x6d0 [ 1500.363432] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1500.365013] ? wait_for_completion_io+0x270/0x270 [ 1500.366602] ? rcu_read_lock_any_held+0x75/0xa0 [ 1500.368142] ? vfs_write+0x354/0xb10 [ 1500.369368] ? fput_many+0x2f/0x1a0 [ 1500.370554] ? ksys_write+0x1a9/0x260 [ 1500.371803] ? __ia32_sys_read+0xb0/0xb0 [ 1500.373136] __x64_sys_sendmmsg+0x99/0x100 [ 1500.374541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1500.376207] do_syscall_64+0x33/0x40 [ 1500.377430] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1500.379118] RIP: 0033:0x7f87fda10b19 [ 1500.380325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.386263] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1500.388657] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1500.390827] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1500.393071] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1500.395320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1500.397609] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:10:14 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 41) 15:10:14 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:14 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = dup(r0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x8, 0x7f}) 15:10:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1500.532039] FAULT_INJECTION: forcing a failure. [ 1500.532039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.536088] CPU: 0 PID: 18140 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1500.538496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1500.541415] Call Trace: [ 1500.542281] dump_stack+0x107/0x167 [ 1500.543483] should_fail.cold+0x5/0xa [ 1500.544749] _copy_from_user+0x2e/0x1b0 [ 1500.546123] __copy_msghdr_from_user+0x91/0x4b0 [ 1500.547661] ? __ia32_sys_shutdown+0x80/0x80 [ 1500.549200] ? udp_v6_push_pending_frames+0x360/0x360 [ 1500.550980] ? inet6_sendmsg+0xbd/0x140 [ 1500.552291] ? inet6_compat_ioctl+0x320/0x320 [ 1500.553849] ? __sock_sendmsg+0x55/0x190 [ 1500.555287] sendmsg_copy_msghdr+0xa1/0x160 [ 1500.556799] ? do_recvmmsg+0x6d0/0x6d0 [ 1500.558182] ? __lock_acquire+0x1657/0x5b00 [ 1500.559730] ___sys_sendmsg+0xc6/0x170 [ 1500.561154] ? sendmsg_copy_msghdr+0x160/0x160 [ 1500.562794] ? vmacache_find+0x55/0x2a0 [ 1500.564226] ? lock_acquire+0x197/0x470 [ 1500.565702] ? find_held_lock+0x2c/0x110 [ 1500.567193] ? __might_fault+0xd3/0x180 [ 1500.568580] ? lock_downgrade+0x6d0/0x6d0 [ 1500.569966] ? asm_exc_page_fault+0x1e/0x30 [ 1500.571405] __sys_sendmmsg+0x195/0x470 [ 1500.572763] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1500.574337] ? lock_downgrade+0x6d0/0x6d0 [ 1500.575912] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1500.577728] ? wait_for_completion_io+0x270/0x270 [ 1500.579531] ? rcu_read_lock_any_held+0x75/0xa0 [ 1500.581282] ? vfs_write+0x354/0xb10 [ 1500.582665] ? fput_many+0x2f/0x1a0 [ 1500.584006] ? ksys_write+0x1a9/0x260 [ 1500.585281] ? __ia32_sys_read+0xb0/0xb0 [ 1500.586691] __x64_sys_sendmmsg+0x99/0x100 [ 1500.588111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1500.589919] do_syscall_64+0x33/0x40 [ 1500.591133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1500.592894] RIP: 0033:0x7fd3a7c24b19 [ 1500.594196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.600442] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1500.603071] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1500.605514] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1500.607912] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1500.610367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1500.612735] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:10:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/10}) 15:10:28 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 42) 15:10:28 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:28 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) pidfd_open(r1, 0x0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:10:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:28 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:10:28 executing program 7: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) syz_open_pts(0xffffffffffffffff, 0x90180) 15:10:28 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 43) [ 1513.851920] FAULT_INJECTION: forcing a failure. [ 1513.851920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1513.853472] CPU: 0 PID: 18202 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1513.855445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1513.856461] Call Trace: [ 1513.856790] dump_stack+0x107/0x167 [ 1513.857244] should_fail.cold+0x5/0xa [ 1513.857727] _copy_from_user+0x2e/0x1b0 [ 1513.858223] __copy_msghdr_from_user+0x91/0x4b0 [ 1513.858798] ? __ia32_sys_shutdown+0x80/0x80 [ 1513.859340] ? udp_v6_push_pending_frames+0x360/0x360 [ 1513.859980] ? inet6_sendmsg+0xbd/0x140 [ 1513.860469] ? inet6_compat_ioctl+0x320/0x320 [ 1513.861028] ? __sock_sendmsg+0x55/0x190 [ 1513.861535] sendmsg_copy_msghdr+0xa1/0x160 [ 1513.862078] ? do_recvmmsg+0x6d0/0x6d0 [ 1513.862566] ? __lock_acquire+0x1657/0x5b00 [ 1513.863103] ___sys_sendmsg+0xc6/0x170 [ 1513.863588] ? sendmsg_copy_msghdr+0x160/0x160 [ 1513.864158] ? vmacache_find+0x55/0x2a0 [ 1513.864660] ? lock_acquire+0x197/0x470 [ 1513.865152] ? find_held_lock+0x2c/0x110 [ 1513.865747] ? __might_fault+0xd3/0x180 [ 1513.866307] ? lock_downgrade+0x6d0/0x6d0 [ 1513.866886] ? asm_exc_page_fault+0x1e/0x30 [ 1513.867510] __sys_sendmmsg+0x195/0x470 [ 1513.869562] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1513.871421] ? lock_downgrade+0x6d0/0x6d0 [ 1513.873281] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1513.874117] ? wait_for_completion_io+0x270/0x270 [ 1513.875427] ? rcu_read_lock_any_held+0x75/0xa0 [ 1513.877377] ? vfs_write+0x354/0xb10 [ 1513.878449] ? fput_many+0x2f/0x1a0 [ 1513.880156] ? ksys_write+0x1a9/0x260 [ 1513.881244] ? __ia32_sys_read+0xb0/0xb0 [ 1513.881815] __x64_sys_sendmmsg+0x99/0x100 [ 1513.882341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1513.882985] do_syscall_64+0x33/0x40 [ 1513.883446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1513.884084] RIP: 0033:0x7fd3a7c24b19 [ 1513.884546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1513.886851] RSP: 002b:00007fd3a5179188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1513.887795] RAX: ffffffffffffffda RBX: 00007fd3a7d38020 RCX: 00007fd3a7c24b19 [ 1513.888677] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1513.889776] RBP: 00007fd3a51791d0 R08: 0000000000000000 R09: 0000000000000000 [ 1513.893027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1513.894297] R13: 00007ffe7824451f R14: 00007fd3a5179300 R15: 0000000000022000 15:10:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1513.919716] FAULT_INJECTION: forcing a failure. [ 1513.919716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1513.921217] CPU: 1 PID: 18211 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1513.922074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1513.923091] Call Trace: [ 1513.923419] dump_stack+0x107/0x167 [ 1513.923865] should_fail.cold+0x5/0xa [ 1513.924334] _copy_from_user+0x2e/0x1b0 [ 1513.924825] __copy_msghdr_from_user+0x91/0x4b0 [ 1513.925394] ? __ia32_sys_shutdown+0x80/0x80 [ 1513.926025] ? udp_v6_push_pending_frames+0x360/0x360 [ 1513.926716] ? inet6_sendmsg+0xbd/0x140 [ 1513.927200] ? inet6_compat_ioctl+0x320/0x320 [ 1513.927743] ? __sock_sendmsg+0x55/0x190 [ 1513.928246] sendmsg_copy_msghdr+0xa1/0x160 [ 1513.928770] ? do_recvmmsg+0x6d0/0x6d0 [ 1513.929247] ? __lock_acquire+0x1657/0x5b00 [ 1513.929791] ___sys_sendmsg+0xc6/0x170 [ 1513.930266] ? sendmsg_copy_msghdr+0x160/0x160 [ 1513.930823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1513.931460] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1513.932004] ? trace_hardirqs_on+0x5b/0x180 [ 1513.932533] ? lock_acquire+0x197/0x470 [ 1513.933015] ? find_held_lock+0x2c/0x110 [ 1513.933523] ? __might_fault+0xd3/0x180 [ 1513.934010] ? lock_downgrade+0x6d0/0x6d0 [ 1513.934517] ? io_schedule_timeout+0x140/0x140 [ 1513.935085] __sys_sendmmsg+0x195/0x470 [ 1513.935571] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1513.936094] ? lock_downgrade+0x6d0/0x6d0 [ 1513.936608] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1513.937196] ? wait_for_completion_io+0x270/0x270 [ 1513.937796] ? rcu_read_lock_any_held+0x75/0xa0 [ 1513.938367] ? vfs_write+0x354/0xb10 [ 1513.938818] ? fput_many+0x2f/0x1a0 [ 1513.939262] ? ksys_write+0x1a9/0x260 [ 1513.939724] ? __ia32_sys_read+0xb0/0xb0 [ 1513.940223] __x64_sys_sendmmsg+0x99/0x100 [ 1513.940736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1513.941361] do_syscall_64+0x33/0x40 [ 1513.941828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1513.942450] RIP: 0033:0x7f87fda10b19 [ 1513.942902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1513.945140] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1513.946080] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1513.946949] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1513.947819] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1513.948685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 15:10:28 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1513.949560] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:10:28 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x10000000000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) 15:10:28 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:28 executing program 7: ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r0, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000002c0)={0x7, "f588f119101ac80c51067571ac4b8b50c5503c3e943f01eaf969927a4b59db50fdd8467f772950150b165a4c426af5e3dfa64e4e93894e417979d0f3f9706e4902d3d6ccd98781d8839c345411cc6ff32c51e1479ea5c8900efc2e657cb7ed697b4ce42dc43cf41398365b9bdbd6c312823eb0da32536d4050fa925f9a4ce670f2120f78173b556111409d4aadbf523b4596414429581e4046db1e2e1f2754ab97dab0cf95fcb86a286415ddbba8b5c374fcc86015917028a4d3a99bce37596b4c9744b99a25bef7f8bccbcd3a7c26babfaeb6634df755429c90c0965cf707be7a586e781fffa7dda693a8e7c0d99f186e2b3fc27c04b247050aa7f3956acd691d0d3bf778b3d43619787598fd31a80503dc93cd298c6cc3acc01d71b2ec13474eb386bad2e144d1e454f7f259479e272c2d507faab9ad5c30d9bd3369458ad1531380f93f14180a688fbf6027513d773ab8822d527c7083fcf046f4a160cfd16c84bcc5a282734efaf656564f5cb8b4e2244cb91f3de703a3544a709f35802ab0641f79fdd2fa232700fd9695fbd2e28f085ae9b4cffd473176c5970b9c544c5ad9ba04ecfca52d96deb023225a220960af63af8a094aa29b63f1c954ad3dff5ec5e9d1b25bcf874868280de748fc00e6e1f627f2842eedd25f36f6691746040afd27c1c59ba4779325c36913cfe2c080f61fea6ed7d72af148a40aea31673d"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x80800) 15:10:28 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:10:28 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1527.360025] FAULT_INJECTION: forcing a failure. [ 1527.360025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.364022] CPU: 1 PID: 18350 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1527.366304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1527.368991] Call Trace: [ 1527.369827] dump_stack+0x107/0x167 [ 1527.370993] should_fail.cold+0x5/0xa [ 1527.372225] _copy_from_user+0x2e/0x1b0 [ 1527.373488] __copy_msghdr_from_user+0x91/0x4b0 [ 1527.383003] ? __ia32_sys_shutdown+0x80/0x80 [ 1527.384409] ? udp_v6_push_pending_frames+0x360/0x360 [ 1527.386085] ? inet6_sendmsg+0xbd/0x140 [ 1527.387357] ? inet6_compat_ioctl+0x320/0x320 [ 1527.388806] ? __sock_sendmsg+0x55/0x190 [ 1527.390125] sendmsg_copy_msghdr+0xa1/0x160 [ 1527.391510] ? do_recvmmsg+0x6d0/0x6d0 [ 1527.392752] ? __lock_acquire+0x1657/0x5b00 [ 1527.394175] ___sys_sendmsg+0xc6/0x170 [ 1527.395428] ? sendmsg_copy_msghdr+0x160/0x160 [ 1527.396897] ? vmacache_find+0x55/0x2a0 [ 1527.398178] ? lock_acquire+0x197/0x470 [ 1527.399456] ? find_held_lock+0x2c/0x110 [ 1527.400757] ? __might_fault+0xd3/0x180 [ 1527.402044] ? lock_downgrade+0x6d0/0x6d0 [ 1527.403371] ? asm_exc_page_fault+0x1e/0x30 [ 1527.404763] __sys_sendmmsg+0x195/0x470 [ 1527.410031] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1527.410568] ? lock_downgrade+0x6d0/0x6d0 [ 1527.411085] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1527.411674] ? wait_for_completion_io+0x270/0x270 [ 1527.412264] ? rcu_read_lock_any_held+0x75/0xa0 [ 1527.412831] ? vfs_write+0x354/0xb10 [ 1527.413283] ? fput_many+0x2f/0x1a0 [ 1527.413727] ? ksys_write+0x1a9/0x260 [ 1527.414226] ? __ia32_sys_read+0xb0/0xb0 [ 1527.414727] __x64_sys_sendmmsg+0x99/0x100 [ 1527.415291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1527.415945] do_syscall_64+0x33/0x40 [ 1527.416398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1527.417021] RIP: 0033:0x7f87fda10b19 15:10:41 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/igmp6\x00') fork() ptrace(0x11, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:10:41 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:10:41 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 43) 15:10:41 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="c601ab2b70cd8ef0c5") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:10:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:41 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 44) [ 1527.417475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1527.427676] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1527.428603] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1527.429473] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1527.430418] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1527.431312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1527.432179] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1527.452343] FAULT_INJECTION: forcing a failure. [ 1527.452343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.453989] CPU: 0 PID: 18347 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1527.454903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1527.456224] Call Trace: [ 1527.456558] dump_stack+0x107/0x167 [ 1527.457012] should_fail.cold+0x5/0xa [ 1527.457491] _copy_from_user+0x2e/0x1b0 [ 1527.458002] __copy_msghdr_from_user+0x91/0x4b0 [ 1527.458583] ? __ia32_sys_shutdown+0x80/0x80 [ 1527.459133] ? udp_v6_push_pending_frames+0x360/0x360 [ 1527.459776] ? inet6_sendmsg+0xbd/0x140 [ 1527.460269] ? inet6_compat_ioctl+0x320/0x320 [ 1527.460824] ? __sock_sendmsg+0x55/0x190 [ 1527.461332] sendmsg_copy_msghdr+0xa1/0x160 [ 1527.461868] ? do_recvmmsg+0x6d0/0x6d0 [ 1527.462389] ? __lock_acquire+0x1657/0x5b00 [ 1527.462935] ___sys_sendmsg+0xc6/0x170 [ 1527.463421] ? sendmsg_copy_msghdr+0x160/0x160 [ 1527.463989] ? vmacache_find+0x55/0x2a0 [ 1527.464491] ? lock_acquire+0x197/0x470 [ 1527.464983] ? find_held_lock+0x2c/0x110 [ 1527.465491] ? __might_fault+0xd3/0x180 [ 1527.465994] ? lock_downgrade+0x6d0/0x6d0 [ 1527.466524] ? asm_exc_page_fault+0x1e/0x30 [ 1527.467076] __sys_sendmmsg+0x195/0x470 [ 1527.467576] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1527.468112] ? lock_downgrade+0x6d0/0x6d0 [ 1527.468641] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1527.469244] ? wait_for_completion_io+0x270/0x270 [ 1527.469850] ? rcu_read_lock_any_held+0x75/0xa0 [ 1527.474458] ? vfs_write+0x354/0xb10 [ 1527.474919] ? fput_many+0x2f/0x1a0 [ 1527.475369] ? ksys_write+0x1a9/0x260 [ 1527.475840] ? __ia32_sys_read+0xb0/0xb0 [ 1527.476347] __x64_sys_sendmmsg+0x99/0x100 [ 1527.476868] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1527.477506] do_syscall_64+0x33/0x40 [ 1527.477966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1527.478713] RIP: 0033:0x7fd3a7c24b19 [ 1527.479178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1527.481462] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1527.482438] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1527.483325] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1527.484210] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1527.485095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1527.485990] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1527.512749] FAULT_INJECTION: forcing a failure. [ 1527.512749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.514269] CPU: 0 PID: 18397 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1527.515135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1527.516176] Call Trace: [ 1527.516521] dump_stack+0x107/0x167 [ 1527.516997] should_fail.cold+0x5/0xa [ 1527.517492] _copy_from_user+0x2e/0x1b0 [ 1527.518019] __copy_msghdr_from_user+0x91/0x4b0 [ 1527.518631] ? __ia32_sys_shutdown+0x80/0x80 [ 1527.519189] ? udp_v6_push_pending_frames+0x360/0x360 [ 1527.519839] ? inet6_sendmsg+0xbd/0x140 [ 1527.520343] ? inet6_compat_ioctl+0x320/0x320 [ 1527.520907] ? __sock_sendmsg+0x55/0x190 [ 1527.521438] sendmsg_copy_msghdr+0xa1/0x160 [ 1527.521987] ? do_recvmmsg+0x6d0/0x6d0 [ 1527.522493] ? __lock_acquire+0x1657/0x5b00 [ 1527.523053] ___sys_sendmsg+0xc6/0x170 [ 1527.523550] ? sendmsg_copy_msghdr+0x160/0x160 [ 1527.524173] ? vmacache_find+0x55/0x2a0 [ 1527.524702] ? lock_acquire+0x197/0x470 [ 1527.525238] ? find_held_lock+0x2c/0x110 [ 1527.525758] ? __might_fault+0xd3/0x180 [ 1527.526293] ? lock_downgrade+0x6d0/0x6d0 [ 1527.526812] ? asm_exc_page_fault+0x1e/0x30 [ 1527.527412] __sys_sendmmsg+0x195/0x470 [ 1527.527921] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1527.528482] ? lock_downgrade+0x6d0/0x6d0 [ 1527.529018] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1527.529638] ? wait_for_completion_io+0x270/0x270 [ 1527.529666] ? rcu_read_lock_any_held+0x75/0xa0 [ 1527.529679] ? vfs_write+0x354/0xb10 [ 1527.529695] ? fput_many+0x2f/0x1a0 [ 1527.529712] ? ksys_write+0x1a9/0x260 [ 1527.529727] ? __ia32_sys_read+0xb0/0xb0 [ 1527.529754] __x64_sys_sendmmsg+0x99/0x100 15:10:41 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x0) r3 = syz_open_pts(r0, 0x48000) r4 = dup(0xffffffffffffffff) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000017c0)) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchown(r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x64, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x1, 0x0, 0x3d}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/93, 0x5d, 0x2, 0x23}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/105, 0x69, 0x2, 0x11}}, &(0x7f0000000200)={0x0, 0x20, 0x48}}, 0x400}, @dead_binder_done], 0xb3, 0x0, &(0x7f00000002c0)="a855c084a5d16a505b94d7a365919968823cb917860b065e91d6f3a73f8979be88c51bd2c882d1d2db0383f29e56bbe0409cfe700a8d2ae2fd7a67af2fdbdde1650e16ec963344dd45c68eb1e79e0bb34b4fe0bd19b1e1d94831275cc80d8cce943bb24f6d2b45593a8e987ae2cdfe25feecce6198b58d2fc1ed2b2d7b8adbf524599e5670445c4ef777c56616e23efd995ef48de11437d5a6b7c99fd680ec0b0e728a60b73ed3723419df7f0b3d649a6bbcdd"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r3, r1, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x0) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x3, 0x9}, {0x9, 0x6}, {0x3, 0x5dd}]}) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xe6) 15:10:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:41 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 45) [ 1527.529772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1527.529789] do_syscall_64+0x33/0x40 [ 1527.529806] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1527.529821] RIP: 0033:0x7f87fda10b19 [ 1527.529849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1527.529864] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1527.529892] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1527.529906] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1527.529923] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1527.529941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1527.529959] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:10:54 executing program 7: r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semop(r0, &(0x7f0000000080)=[{0x2, 0x8001, 0x800}], 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x4) 15:10:54 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 46) 15:10:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 44) [ 1540.621657] FAULT_INJECTION: forcing a failure. [ 1540.621657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.625501] CPU: 0 PID: 18487 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1540.627808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1540.630547] Call Trace: [ 1540.631382] dump_stack+0x107/0x167 [ 1540.632393] should_fail.cold+0x5/0xa [ 1540.633446] _copy_from_user+0x2e/0x1b0 [ 1540.634619] __copy_msghdr_from_user+0x91/0x4b0 [ 1540.635940] ? __ia32_sys_shutdown+0x80/0x80 15:10:55 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r0 = fork() ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) read(0xffffffffffffffff, &(0x7f0000000000)=""/7, 0x7) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 15:10:55 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:10:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) r4 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}, 0xfffffffc) [ 1540.637283] ? udp_v6_push_pending_frames+0x360/0x360 [ 1540.642901] ? inet6_sendmsg+0xbd/0x140 [ 1540.644102] ? inet6_compat_ioctl+0x320/0x320 [ 1540.645513] ? __sock_sendmsg+0x55/0x190 [ 1540.646595] sendmsg_copy_msghdr+0xa1/0x160 [ 1540.647165] ? do_recvmmsg+0x6d0/0x6d0 [ 1540.647684] ? __lock_acquire+0x1657/0x5b00 [ 1540.648264] ___sys_sendmsg+0xc6/0x170 [ 1540.648779] ? sendmsg_copy_msghdr+0x160/0x160 [ 1540.649377] ? vmacache_find+0x55/0x2a0 [ 1540.649912] ? lock_acquire+0x197/0x470 [ 1540.650445] ? find_held_lock+0x2c/0x110 [ 1540.650990] ? __might_fault+0xd3/0x180 [ 1540.651512] ? lock_downgrade+0x6d0/0x6d0 [ 1540.652062] ? asm_exc_page_fault+0x1e/0x30 [ 1540.652636] __sys_sendmmsg+0x195/0x470 [ 1540.652911] FAULT_INJECTION: forcing a failure. [ 1540.652911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.653152] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1540.655053] ? lock_downgrade+0x6d0/0x6d0 [ 1540.655576] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1540.656171] ? wait_for_completion_io+0x270/0x270 [ 1540.656766] ? rcu_read_lock_any_held+0x75/0xa0 [ 1540.657336] ? vfs_write+0x354/0xb10 [ 1540.657795] ? fput_many+0x2f/0x1a0 [ 1540.658243] ? ksys_write+0x1a9/0x260 [ 1540.658727] ? __ia32_sys_read+0xb0/0xb0 [ 1540.659231] __x64_sys_sendmmsg+0x99/0x100 [ 1540.659751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1540.660379] do_syscall_64+0x33/0x40 [ 1540.660838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1540.661465] RIP: 0033:0x7fd3a7c24b19 [ 1540.661925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1540.664193] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1540.665126] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1540.665999] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1540.666894] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1540.667767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1540.668640] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 [ 1540.669532] CPU: 1 PID: 18493 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1540.670437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1540.671499] Call Trace: [ 1540.671839] dump_stack+0x107/0x167 [ 1540.672308] should_fail.cold+0x5/0xa [ 1540.672802] _copy_from_user+0x2e/0x1b0 [ 1540.673320] __copy_msghdr_from_user+0x91/0x4b0 [ 1540.673931] ? __ia32_sys_shutdown+0x80/0x80 [ 1540.674473] ? udp_v6_push_pending_frames+0x360/0x360 [ 1540.675100] ? inet6_sendmsg+0xbd/0x140 [ 1540.675580] ? inet6_compat_ioctl+0x320/0x320 [ 1540.676120] ? __sock_sendmsg+0x55/0x190 [ 1540.676613] sendmsg_copy_msghdr+0xa1/0x160 [ 1540.677133] ? do_recvmmsg+0x6d0/0x6d0 [ 1540.677604] ? __lock_acquire+0x1657/0x5b00 [ 1540.678132] ___sys_sendmsg+0xc6/0x170 [ 1540.678642] ? sendmsg_copy_msghdr+0x160/0x160 [ 1540.679196] ? vmacache_find+0x55/0x2a0 [ 1540.679683] ? lock_acquire+0x197/0x470 [ 1540.680161] ? find_held_lock+0x2c/0x110 [ 1540.680653] ? __might_fault+0xd3/0x180 [ 1540.681132] ? lock_downgrade+0x6d0/0x6d0 [ 1540.681630] ? asm_exc_page_fault+0x1e/0x30 [ 1540.682160] __sys_sendmmsg+0x195/0x470 [ 1540.682680] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1540.683207] ? lock_downgrade+0x6d0/0x6d0 [ 1540.683718] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1540.684301] ? wait_for_completion_io+0x270/0x270 [ 1540.684882] ? rcu_read_lock_any_held+0x75/0xa0 [ 1540.685446] ? vfs_write+0x354/0xb10 [ 1540.685894] ? fput_many+0x2f/0x1a0 [ 1540.686333] ? ksys_write+0x1a9/0x260 [ 1540.686830] ? __ia32_sys_read+0xb0/0xb0 [ 1540.687325] __x64_sys_sendmmsg+0x99/0x100 [ 1540.687834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1540.688452] do_syscall_64+0x33/0x40 [ 1540.688901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1540.689517] RIP: 0033:0x7f87fda10b19 [ 1540.689965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1540.692217] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1540.693133] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1540.693993] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1540.694884] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1540.695749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1540.696608] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:10:55 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) 15:10:55 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3c, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x8001, 0x1f, 0x5, 0x8000, 0x6, "0a5c85e22c38898012117e9ac0651ff799294b", 0x9, 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') ioctl$TCSBRK(r2, 0x5409, 0xb6) 15:10:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3c, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:10:55 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xb353, 0x2, 0x5, 0x8, 0x1, 0xda}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:11:08 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x13}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:11:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:11:08 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 47) 15:11:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x13}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:11:08 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:11:08 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 45) 15:11:08 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:11:08 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB="050000008cca14c8f05d00"/34]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x9) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x14, &(0x7f00000002c0)={0x39, 0x93da, 0x5}) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000000)={0x19, 0x20, 0x400}) [ 1553.800326] FAULT_INJECTION: forcing a failure. [ 1553.800326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.801816] CPU: 1 PID: 18635 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1553.802671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1553.803706] Call Trace: [ 1553.804039] dump_stack+0x107/0x167 [ 1553.804491] should_fail.cold+0x5/0xa [ 1553.804967] _copy_from_user+0x2e/0x1b0 [ 1553.805463] __copy_msghdr_from_user+0x91/0x4b0 [ 1553.806033] ? __ia32_sys_shutdown+0x80/0x80 [ 1553.806576] ? udp_v6_push_pending_frames+0x360/0x360 [ 1553.807234] ? inet6_sendmsg+0xbd/0x140 [ 1553.807719] ? inet6_compat_ioctl+0x320/0x320 [ 1553.808271] ? __sock_sendmsg+0x55/0x190 [ 1553.808773] sendmsg_copy_msghdr+0xa1/0x160 [ 1553.809302] ? do_recvmmsg+0x6d0/0x6d0 [ 1553.809783] ? __lock_acquire+0x1657/0x5b00 [ 1553.810320] ___sys_sendmsg+0xc6/0x170 [ 1553.810799] ? sendmsg_copy_msghdr+0x160/0x160 [ 1553.811378] ? vmacache_find+0x55/0x2a0 [ 1553.811868] ? lock_acquire+0x197/0x470 [ 1553.812350] ? find_held_lock+0x2c/0x110 [ 1553.812846] ? __might_fault+0xd3/0x180 [ 1553.813329] ? lock_downgrade+0x6d0/0x6d0 [ 1553.813835] ? asm_exc_page_fault+0x1e/0x30 [ 1553.814377] __sys_sendmmsg+0x195/0x470 [ 1553.814866] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1553.815411] ? lock_downgrade+0x6d0/0x6d0 [ 1553.815929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1553.816518] ? wait_for_completion_io+0x270/0x270 [ 1553.817108] ? rcu_read_lock_any_held+0x75/0xa0 [ 1553.817686] ? vfs_write+0x354/0xb10 [ 1553.818142] ? fput_many+0x2f/0x1a0 [ 1553.818588] ? ksys_write+0x1a9/0x260 [ 1553.819076] ? __ia32_sys_read+0xb0/0xb0 [ 1553.819578] __x64_sys_sendmmsg+0x99/0x100 [ 1553.820098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1553.820729] do_syscall_64+0x33/0x40 [ 1553.821186] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1553.821813] RIP: 0033:0x7f87fda10b19 [ 1553.822274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1553.824551] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1553.825487] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1553.825494] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1553.825501] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1553.825507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1553.825514] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 15:11:08 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x1c}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:11:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x1c}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:11:08 executing program 7: syz_open_dev$tty20(0xc, 0x4, 0x0) 15:11:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:11:08 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x107902, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:11:08 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x30}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1553.981493] FAULT_INJECTION: forcing a failure. [ 1553.981493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.983082] CPU: 0 PID: 18634 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1553.983953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1553.984978] Call Trace: [ 1553.985310] dump_stack+0x107/0x167 [ 1553.985760] should_fail.cold+0x5/0xa [ 1553.986230] _copy_from_user+0x2e/0x1b0 [ 1553.986722] __copy_msghdr_from_user+0x91/0x4b0 [ 1553.987324] ? __ia32_sys_shutdown+0x80/0x80 [ 1553.987866] ? udp_v6_push_pending_frames+0x360/0x360 [ 1553.988497] ? inet6_sendmsg+0xbd/0x140 [ 1553.988983] ? inet6_compat_ioctl+0x320/0x320 [ 1553.989530] ? __sock_sendmsg+0x55/0x190 [ 1553.990030] sendmsg_copy_msghdr+0xa1/0x160 [ 1553.990554] ? do_recvmmsg+0x6d0/0x6d0 [ 1553.991067] ? __lock_acquire+0x1657/0x5b00 [ 1553.991602] ___sys_sendmsg+0xc6/0x170 [ 1553.992077] ? sendmsg_copy_msghdr+0x160/0x160 [ 1553.992631] ? vmacache_find+0x55/0x2a0 [ 1553.993124] ? lock_acquire+0x197/0x470 [ 1553.993609] ? find_held_lock+0x2c/0x110 [ 1553.994105] ? __might_fault+0xd3/0x180 [ 1553.994676] ? lock_downgrade+0x6d0/0x6d0 [ 1553.995240] ? asm_exc_page_fault+0x1e/0x30 [ 1553.995851] __sys_sendmmsg+0x195/0x470 [ 1553.996406] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1553.997003] ? lock_downgrade+0x6d0/0x6d0 [ 1553.997594] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1553.998260] ? wait_for_completion_io+0x270/0x270 [ 1553.998955] ? rcu_read_lock_any_held+0x75/0xa0 [ 1553.999553] ? vfs_write+0x354/0xb10 [ 1554.000005] ? fput_many+0x2f/0x1a0 [ 1554.000448] ? ksys_write+0x1a9/0x260 [ 1554.000923] ? __ia32_sys_read+0xb0/0xb0 [ 1554.001425] __x64_sys_sendmmsg+0x99/0x100 [ 1554.001944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1554.002579] do_syscall_64+0x33/0x40 [ 1554.003136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1554.003829] RIP: 0033:0x7fd3a7c24b19 [ 1554.004287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1554.006625] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1554.007724] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1554.008600] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1554.009527] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1554.010504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1554.011477] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:11:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x101, 0x7fffffff, 0x1ff, 0x2, 0x4, "ee9a19efee854df6df16e66f0eedf492f36d55", 0x20, 0x138d}) 15:11:21 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_pts(r0, 0x208000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) [ 1566.950828] FAULT_INJECTION: forcing a failure. [ 1566.950828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.952321] CPU: 0 PID: 18781 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1566.953166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1566.954179] Call Trace: [ 1566.954507] dump_stack+0x107/0x167 [ 1566.954954] should_fail.cold+0x5/0xa [ 1566.955443] _copy_from_user+0x2e/0x1b0 [ 1566.955937] __copy_msghdr_from_user+0x91/0x4b0 [ 1566.956503] ? __ia32_sys_shutdown+0x80/0x80 [ 1566.957040] ? udp_v6_push_pending_frames+0x360/0x360 [ 1566.957668] ? inet6_sendmsg+0xbd/0x140 [ 1566.958151] ? inet6_compat_ioctl+0x320/0x320 [ 1566.958695] ? __sock_sendmsg+0x55/0x190 [ 1566.959192] sendmsg_copy_msghdr+0xa1/0x160 [ 1566.959732] ? do_recvmmsg+0x6d0/0x6d0 [ 1566.960209] ? __lock_acquire+0x1657/0x5b00 [ 1566.960742] ___sys_sendmsg+0xc6/0x170 [ 1566.961218] ? sendmsg_copy_msghdr+0x160/0x160 [ 1566.961773] ? vmacache_find+0x55/0x2a0 [ 1566.962265] ? lock_acquire+0x197/0x470 [ 1566.962745] ? find_held_lock+0x2c/0x110 [ 1566.963242] ? __might_fault+0xd3/0x180 [ 1566.963775] ? lock_downgrade+0x6d0/0x6d0 [ 1566.964280] ? asm_exc_page_fault+0x1e/0x30 [ 1566.964817] __sys_sendmmsg+0x195/0x470 [ 1566.965304] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1566.965830] ? lock_downgrade+0x6d0/0x6d0 [ 1566.966345] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1566.966934] ? wait_for_completion_io+0x270/0x270 [ 1566.967549] ? rcu_read_lock_any_held+0x75/0xa0 [ 1566.968118] ? vfs_write+0x354/0xb10 [ 1566.968570] ? fput_many+0x2f/0x1a0 [ 1566.969013] ? ksys_write+0x1a9/0x260 [ 1566.969477] ? __ia32_sys_read+0xb0/0xb0 [ 1566.969975] __x64_sys_sendmmsg+0x99/0x100 [ 1566.970489] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1566.971114] do_syscall_64+0x33/0x40 [ 1566.971588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1566.972217] RIP: 0033:0x7f87fda10b19 [ 1566.972671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1566.974913] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1566.975848] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1566.976718] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1566.977589] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1566.978458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1566.979341] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 [ 1566.989074] FAULT_INJECTION: forcing a failure. [ 1566.989074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.990891] CPU: 1 PID: 18776 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1566.991869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1566.992974] Call Trace: [ 1566.993302] dump_stack+0x107/0x167 [ 1566.993748] should_fail.cold+0x5/0xa [ 1566.994221] _copy_from_user+0x2e/0x1b0 [ 1566.994714] __copy_msghdr_from_user+0x91/0x4b0 [ 1566.995286] ? __ia32_sys_shutdown+0x80/0x80 [ 1566.995834] ? udp_v6_push_pending_frames+0x360/0x360 [ 1566.996470] ? inet6_sendmsg+0xbd/0x140 [ 1566.996959] ? inet6_compat_ioctl+0x320/0x320 [ 1566.997506] ? __sock_sendmsg+0x55/0x190 [ 1566.998007] sendmsg_copy_msghdr+0xa1/0x160 [ 1566.998535] ? do_recvmmsg+0x6d0/0x6d0 [ 1566.999017] ? __lock_acquire+0x1657/0x5b00 [ 1566.999560] ___sys_sendmsg+0xc6/0x170 [ 1567.000040] ? sendmsg_copy_msghdr+0x160/0x160 [ 1567.000600] ? vmacache_find+0x55/0x2a0 [ 1567.001096] ? lock_acquire+0x197/0x470 [ 1567.001586] ? find_held_lock+0x2c/0x110 [ 1567.002086] ? __might_fault+0xd3/0x180 [ 1567.002574] ? lock_downgrade+0x6d0/0x6d0 [ 1567.003082] ? asm_exc_page_fault+0x1e/0x30 [ 1567.003662] __sys_sendmmsg+0x195/0x470 [ 1567.004219] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1567.004819] ? lock_downgrade+0x6d0/0x6d0 [ 1567.005406] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1567.006079] ? wait_for_completion_io+0x270/0x270 [ 1567.006754] ? rcu_read_lock_any_held+0x75/0xa0 [ 1567.007407] ? vfs_write+0x354/0xb10 [ 1567.007930] ? fput_many+0x2f/0x1a0 [ 1567.008432] ? ksys_write+0x1a9/0x260 [ 1567.008963] ? __ia32_sys_read+0xb0/0xb0 [ 1567.009537] __x64_sys_sendmmsg+0x99/0x100 [ 1567.010127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1567.010844] do_syscall_64+0x33/0x40 [ 1567.011376] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1567.012002] RIP: 0033:0x7fd3a7c24b19 [ 1567.012459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1567.014793] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1567.015787] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1567.016825] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1567.017847] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1567.018843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1567.019870] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:11:21 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x13}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:11:21 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x3, 0xb5e46223464a3991) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) statx(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x1, &(0x7f0000000240)) shutdown(r4, 0x1) r5 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800, 0x0, {0x0, r7}}, 0x2) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$inet6(0xa, 0x4, 0x9) 15:11:21 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 48) 15:11:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x30}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:11:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x1, 0x3, 0x9, 0x0, 0x6, 0xa0020, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x14}, 0x100, 0x3f, 0x9, 0x8, 0x4, 0x8, 0x5, 0x0, 0x40, 0x0, 0x8}, r2, 0xa, 0xffffffffffffffff, 0x3) ptrace$setsig(0x4203, r1, 0x4, &(0x7f00000002c0)={0x34, 0x93de, 0x6}) 15:11:21 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 46) 15:11:21 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x1c}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:11:21 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) 15:11:21 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 47) 15:11:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x13}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:11:21 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0xf2, "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"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000)) 15:11:21 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x30}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 15:11:21 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@caif=@util, 0x0, 0x80800}, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 49) [ 1567.115339] FAULT_INJECTION: forcing a failure. [ 1567.115339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.116958] CPU: 0 PID: 18883 Comm: syz-executor.3 Not tainted 5.10.230 #1 [ 1567.117821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1567.118840] Call Trace: [ 1567.119181] dump_stack+0x107/0x167 [ 1567.119658] should_fail.cold+0x5/0xa [ 1567.120156] _copy_from_user+0x2e/0x1b0 [ 1567.120659] __copy_msghdr_from_user+0x91/0x4b0 [ 1567.121233] ? __ia32_sys_shutdown+0x80/0x80 [ 1567.121777] ? udp_v6_push_pending_frames+0x360/0x360 [ 1567.122428] ? inet6_sendmsg+0xbd/0x140 [ 1567.122926] ? inet6_compat_ioctl+0x320/0x320 [ 1567.123522] ? __sock_sendmsg+0x55/0x190 [ 1567.124035] sendmsg_copy_msghdr+0xa1/0x160 [ 1567.124569] ? do_recvmmsg+0x6d0/0x6d0 [ 1567.125055] ? __lock_acquire+0x1657/0x5b00 [ 1567.125608] ___sys_sendmsg+0xc6/0x170 [ 1567.126101] ? sendmsg_copy_msghdr+0x160/0x160 [ 1567.126683] ? vmacache_find+0x55/0x2a0 [ 1567.127184] ? lock_acquire+0x197/0x470 [ 1567.127683] ? find_held_lock+0x2c/0x110 [ 1567.128195] ? __might_fault+0xd3/0x180 [ 1567.128688] ? lock_downgrade+0x6d0/0x6d0 [ 1567.129207] ? asm_exc_page_fault+0x1e/0x30 [ 1567.129761] __sys_sendmmsg+0x195/0x470 [ 1567.130261] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1567.130796] ? lock_downgrade+0x6d0/0x6d0 [ 1567.131338] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1567.131943] ? wait_for_completion_io+0x270/0x270 [ 1567.132558] ? rcu_read_lock_any_held+0x75/0xa0 [ 1567.133138] ? vfs_write+0x354/0xb10 [ 1567.133598] ? fput_many+0x2f/0x1a0 [ 1567.134061] ? ksys_write+0x1a9/0x260 [ 1567.134554] ? __ia32_sys_read+0xb0/0xb0 [ 1567.135059] __x64_sys_sendmmsg+0x99/0x100 [ 1567.135601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1567.136252] do_syscall_64+0x33/0x40 [ 1567.136716] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1567.137355] RIP: 0033:0x7fd3a7c24b19 [ 1567.137821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1567.140100] RSP: 002b:00007fd3a519a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1567.141033] RAX: ffffffffffffffda RBX: 00007fd3a7d37f60 RCX: 00007fd3a7c24b19 [ 1567.141919] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1567.142807] RBP: 00007fd3a519a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1567.143694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1567.144577] R13: 00007ffe7824451f R14: 00007fd3a519a300 R15: 0000000000022000 15:11:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x1c}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) [ 1567.182006] FAULT_INJECTION: forcing a failure. [ 1567.182006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.183771] CPU: 0 PID: 18906 Comm: syz-executor.5 Not tainted 5.10.230 #1 [ 1567.184624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1567.185647] Call Trace: [ 1567.185981] dump_stack+0x107/0x167 [ 1567.186430] should_fail.cold+0x5/0xa [ 1567.186908] _copy_from_user+0x2e/0x1b0 [ 1567.187428] __copy_msghdr_from_user+0x91/0x4b0 [ 1567.188051] ? __ia32_sys_shutdown+0x80/0x80 [ 1567.188614] ? udp_v6_push_pending_frames+0x360/0x360 [ 1567.189264] ? inet6_sendmsg+0xbd/0x140 [ 1567.189756] ? inet6_compat_ioctl+0x320/0x320 [ 1567.190306] ? __sock_sendmsg+0x55/0x190 [ 1567.190854] sendmsg_copy_msghdr+0xa1/0x160 [ 1567.191399] ? do_recvmmsg+0x6d0/0x6d0 [ 1567.191915] ? __lock_acquire+0x1657/0x5b00 [ 1567.192455] ___sys_sendmsg+0xc6/0x170 [ 1567.192938] ? sendmsg_copy_msghdr+0x160/0x160 [ 1567.193495] ? vmacache_find+0x55/0x2a0 [ 1567.194039] ? lock_acquire+0x197/0x470 [ 1567.194527] ? find_held_lock+0x2c/0x110 [ 1567.195054] ? __might_fault+0xd3/0x180 [ 1567.195567] ? lock_downgrade+0x6d0/0x6d0 [ 1567.196078] ? asm_exc_page_fault+0x1e/0x30 [ 1567.196627] __sys_sendmmsg+0x195/0x470 [ 1567.197170] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1567.197731] ? lock_downgrade+0x6d0/0x6d0 [ 1567.198255] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1567.198857] ? wait_for_completion_io+0x270/0x270 [ 1567.199470] ? rcu_read_lock_any_held+0x75/0xa0 [ 1567.200088] ? vfs_write+0x354/0xb10 [ 1567.200557] ? fput_many+0x2f/0x1a0 [ 1567.201017] ? ksys_write+0x1a9/0x260 [ 1567.201486] ? __ia32_sys_read+0xb0/0xb0 [ 1567.201988] __x64_sys_sendmmsg+0x99/0x100 [ 1567.202506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1567.203142] do_syscall_64+0x33/0x40 [ 1567.203621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1567.204248] RIP: 0033:0x7f87fda10b19 [ 1567.204710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1567.207000] RSP: 002b:00007f87faf86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1567.207971] RAX: ffffffffffffffda RBX: 00007f87fdb23f60 RCX: 00007f87fda10b19 [ 1567.208846] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1567.209725] RBP: 00007f87faf861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1567.210639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1567.211538] R13: 00007ffe28d7dedf R14: 00007f87faf86300 R15: 0000000000022000 VM DIAGNOSIS: 15:16:22 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888047c7b480 RCX=0000000000000000 RDX=1ffff11008f8f692 RSI=00000000000003b3 RDI=ffff888047c7b490 RBP=ffffffff84469a60 RSP=ffff8880484278d0 R8 =ffffffff82268260 R9 =ffff88801b2930cf R10=0000000000000000 R11=0000000000000001 R12=00000000000003b3 R13=0000000000000000 R14=ffff888048427b30 R15=0000000000000000 RIP=ffffffff811e4155 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f143272f700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fabe72a678 CR3=0000000046ca4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=fc050340e4e98be3ce6f2c694e12105f XMM02=03cf8942fbb06eaa6ca520f902bfc9fa XMM03=2a554d2e728959f0a13b96c44ac44355 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88804a0cf9d0 RCX=0000000000000001 RDX=ffff88804a0cf9d0 RSI=ffff88801b2930e8 RDI=ffff88801b293120 RBP=ffff88801b293118 RSP=ffff88804a0cf8e0 R8 =0000000000000001 R9 =ffff88804a0cf9d0 R10=ffffed1009419f3e R11=0000000000000001 R12=ffff88801b2930c8 R13=ffff88801b293118 R14=ffff8880088b0000 R15=dffffc0000000000 RIP=ffffffff8125ad43 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f14326ed700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f30b9025010 CR3=0000000046ca4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004172d38880000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000