c309a0272798f388d2400218c5a905ccef1ea523bd34122cda9674213c40c1e0825a9b9ecaf33399b4617a23602cd438c71919e2e81c7c0fee9333c63f39c7708d2406156c2ffa318a174042f234d1b763e6ee09ee", 0x62}, {&(0x7f0000005380)='k', 0x1}, {&(0x7f00000053c0)="a5987c9fbc033e3c72badcdf3ac5c67dc6fe0ecde0bb55013cd0c90139fc6f648b83ac6e8976f19ca3c41ae2896ea101fc5987a91241", 0x36}, {&(0x7f0000005400)="f5d075ac7f88244151adfcdb6a", 0xd}, {&(0x7f0000005440)="468723d845254e9e37f1292f0a3f9d99a3f3257b84d104e093fa58a3223ef2cfd9d85a1817eed3e8bf6c4eeeb9f0daea853256bfae95ef99a8464ca4b8cf1ef4776a91fed3fa2d79940e105485bdda622cb30f6702abdb437d5ae906f12394b2aa3f85ef0043488f2797324508ef11126a3fe862e990266a4ee3fff431262990e3edbf1e02bdc220f6e9d1e95c55313c35ff74a673f26fbe8b54b65fa690ff0b9a7bb2368594077ec786158f82001fe2", 0xb0}, {&(0x7f0000005500)="bb53f4bf02f373e15dbe8b3faee9982ef07fa50c0ad90de5a0db97fb93f8f44b2854c5a7bf46cef48835bc7fc072a99fee44c1458767ea6eab7ac6a14209dca9bfa9d50a0c388dead7aa5364a2466d370c9cd61c4a8397d3ca65b5cfa5a4c71c986e41117410507257a4b9af4ae62158bd45b88a52d7e1213d69edc6d2db55e06ce6d6e4553cab9dfc035f944217268fa1997ac320d458f29d9ee2e097bbd01f79e4da0247bc0454a6f2608de49c475bea46a6", 0xb3}, {&(0x7f00000055c0)="9a2ee0815a80ccacd914606ec578f2a8aded87d7f72edde25e0b0e148c8f037bc8cec7112d61ea660abfac1f7fcd95e78db1a92e3f483a0a9708c56fa6d61beb6cb9b7c1a4b727617aed95a5a7d7b61f144a1e30", 0x54}, {&(0x7f0000005640)="d68d4af4bd6bb96908c063ff03e24974c11672c565a1e14dccba90403c7962eec791a9ada37825d3937e960da118a49b3c829732210b007e4fd87793b29033d13c3b67c000ecc73fdeeff0d1c5b442394448d87ad3d27bb5c72253d709a22789818402e25feb070f83de312dada6f58013e85a552da9430eff456a982f06918bedbedf4e0de7d33ddde5bddf40846d8a138dd30f2abdbb15cdd1345d46b092261edfa9649f33783a39e6335ee690f931d8c1c2dfbb4a861f", 0xb8}], 0x9}}], 0x7, 0x4000000) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="00010000160000012cbd7000fbdbdf2520010000000000000000000000000002fe8000000000000000000000000000434e2200004e2200050200008000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="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"], 0x100}}, 0x48000) 20:34:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:34:44 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) accept4$packet(r2, 0x0, &(0x7f0000000000), 0x1000) r3 = socket$inet_udp(0x2, 0x2, 0x0) accept(r3, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000080)={0x3f, 0x3ff, 0x3, 0x0, 0x1, [0x7fff, 0xeecc, 0x7, 0x3]}) r5 = dup(r2) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) mknodat$loop(r5, &(0x7f00000001c0)='./file0\x00', 0x800, 0x0) fcntl$setown(r5, 0x8, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) 20:34:44 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:34:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r0, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r1, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:34:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="bc0100001a00010c0000000000000000fe80000000000000000000000000000aac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e00000010000000000000000000000000000000033000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000a0000000000000000000000c400140073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0030000000000005a6855fde7707c1b7cae3c147135f9c2ba7b610ac300bd06b2f009bd0537d7580c0bb3bc4a600300009ebf1fd296cb32f8347608236c9004d559f11fac88076804527b3839e6b2eb1bfbff2583102c3acdd40d498078a0e5414843d514f7feef875b4dff0100000000000036e3fd7a983c0ce3f890c1bb4108001d00000000001c26bd25fa85bfbe5db6c65410338d4e54f85e7dd9ba75a08bd9628e8d58d549507cbf0b86e9e8b24b43564f2ee69669ca31be950703664d3072f75f969c1e74fa9a2b3173e63d9d6aa71cb2ef7658360d642d6e89f35e07b3ca7ddfb134594043b594759124b5b0658e26eb949a1550820973ff2ab14d0e98d142038b89ebbc61be8eccd8c8a2cea002115420e7d6982881f07892deeffb10d43c25a302ae3817ebd22e71db9b02642cdf8e3d7ab1347c01fb0627b959df7ac45cc2dd"], 0x1bc}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffc60) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000300)=0xfffffffd, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f00000024c0)=[{&(0x7f0000000040)=""/135, 0x87}], 0x1) io_setup(0x5, &(0x7f0000000700)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x40) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000400)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) fchmod(r0, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) dup(0xffffffffffffffff) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x190, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}, @typed={0x8, 0x37, 0x0, 0x0, @fd=r3}, @nested={0x155, 0x2a, 0x0, 0x1, [@generic="7a98955b3aa1de6de99f542e9c670c1f693a7792b5afe1e91c456c2ce0", @generic="8b2e28ed3bb42e16c7fac7a4e570af17d50b9fd3a18de41bd242d111dad914e3f902a2c199bc3abc3c1e134aa801e7da1acdee08e820f968e11a9b3ff250062edf14251fbaa495216123b9fa43d0d0a129eca935b40119a4f5fa70815ddc845701ca1166122b5deecd5d907b6ab95b4d9e1030dadb3dcfecdf0937c5d08c6a419237a444c08d06f5c96100b56d915db4", @generic="5716da9560f90c5b4f41c7a4e1df664db4f1f9ae4d8a1423222ae4a8a557217986c0de884f00799225f2c159a58046b9077325fdd6d14f534478b7367f70ec0e0fc09586b8271ba28078caca7f5a4a6f9ae3c6a484ac44947e9f1ebdc68598e710460c75e2a054c343d3aba0bfdd5683c8cc51bfb1730b65cc31531585dbbc80c10877f6c3e6e03350e9a4de8e8d8e8812dcba", @generic="d3c0ffcd7e4a4d0085d6bba9ae0140a337"]}]}, 0x190}}, 0x0) 20:34:44 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xfd, 0xfff, 0x1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x20, 0x1000, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000014c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000200)={'erspan0\x00', r0, 0x40, 0x80, 0x3e8, 0x7, {{0x2a, 0x4, 0x0, 0x4, 0xa8, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0xfe, 0x1, 0x8, [{@rand_addr=0x64010101, 0x9}, {@multicast1, 0x7}, {@rand_addr=0x64010100, 0x8000}, {@multicast1, 0x523}, {@remote}, {@remote, 0x5bdf}, {@broadcast, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0x20, 0x1, 0x7, [{@multicast2, 0x86}, {@local, 0x1}, {@empty, 0x1779}]}, @generic={0x83, 0x2}, @generic={0x83, 0x11, "b666f79ed496f4ed3ebb490545b1fc"}, @generic={0x89, 0x4, "2303"}, @ssrr={0x89, 0xf, 0x13, [@broadcast, @multicast2, @private=0xa010101]}, @end, @lsrr={0x83, 0x13, 0xb1, [@local, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f00000001c0)=0x4) 20:34:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) 20:34:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:34:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:34:44 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x9, 0x3ff, 0x2, 0xfffa, 0x10}}) 20:34:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) [ 483.015765] netlink: 368 bytes leftover after parsing attributes in process `syz-executor.4'. 20:34:45 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) 20:34:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0xb) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x4, &(0x7f0000000240)=[{&(0x7f0000000100)="1bdf70a91efc9b4cc5a16cac0b3e0283a3d6bfa1be6ab6edae904ea52f8b35", 0x1f, 0x20}, {&(0x7f0000000140)="b53b16f263743935bf05b43bcd359b7f950894345cc4c810c68a488e4b2baeb198cf1f87911744de37d8e46f8a", 0x2d, 0x5}, {&(0x7f0000000180)="966732de720fac49fdfa3e586a79b64ec333d499c3c32f0b0fa15934b9d0cc10a358b5cf0ec5bdeea64bf3dd6b44e12abf01750f7eba97bf9604393f20e2d625b9b0c548597f27653e535e27b6a80ad6ba185edf0860ce89b5e2bcbe66d9db83332ebcbdba9f7037583ec2ed8eb132", 0x6f, 0x454d}, {&(0x7f0000000200)="27cb456424447a821b502bffc6712016d02a12ca", 0x14, 0x4}], 0x80, &(0x7f00000002c0)={[{@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}], [{@fowner_lt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) close_range(r0, r1, 0x0) 20:34:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1f, 0xc, 0x1b2}) 20:34:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:34:45 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x2, 0x7ff, 0x81, 0x1ff, 0x7, 0x81}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNDETACHFILTER(r0, 0x400454d1, 0x20000000) r1 = fcntl$dupfd(r0, 0x406, r0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3f, 0xff, 0x3, 0x5, 0x0, 0x5, 0x20011, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x8020, 0x5, 0x9, 0x9, 0x100, 0xde7, 0x1, 0x0, 0x36, 0x0, 0x7ff}, 0x0, 0x8, r1, 0x1) 20:34:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r0, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r1, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:34:45 executing program 4: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7}, 0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x200) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) fallocate(r0, 0x11, 0x0, 0x8000) 20:34:58 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) 20:34:58 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000000)={0x6, 0x6}) 20:34:58 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:34:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000001b40)={&(0x7f0000001a40), 0xc, &(0x7f0000001b00)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x8014) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c01}, 0x4008850) 20:34:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:34:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) 20:34:58 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:34:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r0, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r1, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 496.947668] perf: interrupt took too long (4002 > 3982), lowering kernel.perf_event_max_sample_rate to 49000 [ 496.950008] perf: interrupt took too long (5074 > 5002), lowering kernel.perf_event_max_sample_rate to 39000 [ 496.952881] perf: interrupt took too long (6373 > 6342), lowering kernel.perf_event_max_sample_rate to 31000 [ 496.973119] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:34:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) 20:34:58 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000080)=""/23, 0x17}], 0x2, 0x9, 0xfffffffb) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 497.001703] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:34:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast1, @local}}}], 0x20}}], 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2201, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x140, 0x31713}, 0x1f7) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x80000, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0xffffffb6}}, './file2\x00'}) r5 = accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0x800) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x6) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40086607, &(0x7f0000000080)) 20:34:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:34:59 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) [ 497.043662] perf: interrupt took too long (7970 > 7966), lowering kernel.perf_event_max_sample_rate to 25000 20:34:59 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 497.053765] perf: interrupt took too long (9964 > 9962), lowering kernel.perf_event_max_sample_rate to 20000 20:34:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 497.064595] perf: interrupt took too long (12476 > 12455), lowering kernel.perf_event_max_sample_rate to 16000 20:34:59 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:34:59 executing program 2: ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x428c0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x1, 0x3, 0x7f, 0x4}) [ 497.335173] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:35:12 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:35:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:35:12 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:35:12 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:35:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) unshare(0x48020200) 20:35:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:35:12 executing program 2: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:35:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file1\x00'}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x6e6, 0xa, &(0x7f0000001800)=[{&(0x7f00000002c0)="808178c00fef1c98834fd5abd9e89a61097192e8e2411044e6723f830169d5b1a444df7f4c74ad19890760c8dd208c2d75a3f317a9098907ddc69f0f81d7fb62ed63e0a0da91cbcebbc7ce097d3f970ece5fc8bf832d0912e2730541dcae33fe4c033519be0510dcd8ce02823f193a42caae0fb3aa5fc865191445fdc6f64ac93fdc22152f935b269a2213d61316cd966fefe9c2245b44daa53e904882e565e3fbc0f00c3b371d6b", 0xa8, 0xffffffffffffff09}, {&(0x7f0000000380)="8291a1ee436c7fc1c7fbf83325097210f7f908f1a105ec87338b9bc424f3912cf888e1f3b533a32bce017a9f046bd0e5783a8062bd871e1b164e8b6a87e7fb09985f527c774692103b9d2fc2bef979138bead442ca62dfd2923834eea53045c95413284803482cad37ff4fc7cfe8fca70f68cce0138aaa5da1378fb9", 0x7c, 0x17b7}, {&(0x7f0000000400)="072b4286715429e9fff6587f219ff339d54be47a2555100ceb61ba75c81d200e1f8ecbc798f16ce97abfdf5a0e068758c3a31f571b9208f17d9df14acdd8fea366ba93fc687d9fdb3e25144e4567a42c7bac16e508eda10923514278a340609091b5492de947d8be2bb763abbe785251f36478b02a71a4c41832cd5b70e385ca9803f544879b35ab20b25f5aaa3c9d8b19ce22db9a01e4b91d0aeae95d5ba310207428ea180cefdb46caf3e9d1994518ff3825ade300f14b71a2af16070ee3e1748ed35ee72993044078472322e0ff3902fa8ffeb5f509151efd", 0xda, 0x98}, {&(0x7f0000000500)="285d3794cdcbca17227ddc40dc78670f06e709f17641f9603c3ee9f92f960363ba6c888ce5b04b584b17c6e12060b0385e7b39a3c192e846ced19fcd9b1e87733f5ecdd59185ac70aa9261", 0x4b, 0x1}, {&(0x7f0000000580)="fafbde7b63a1206a53ecfa9747a4892dcc364cd1fde965f8e66105042e98b38895f242ce56ce1dd84d446acc8a2dede06adb04eac42bd44371fc285e9b3289c5f8163886eb3a91b5d05bc657344027e329bda8fa31f1d36b4cbb53cc1b420e7eca65", 0x62, 0x4d75}, {&(0x7f0000000600)="9518256440c0dc32397e4584f6c524f7873fb7ae7cdfc4", 0x17, 0x100000001}, {&(0x7f0000000640)="bb0b13c6fcb23c7edee73373350a2d61b3ec856ffe0f86d11936678f60c101fef2c324bf67190d170594f017bece3c90b2104d50c8c1c554ab0bd8b0806caa7ae1af0a53dad6ef7c", 0x48, 0x1c}, {&(0x7f00000006c0)="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", 0x1000, 0x800}, {&(0x7f00000016c0)="7d3270a836ec54e8168afd5852920ebf7ed2f9cb29451e26de620503d6", 0x1d, 0x100}, {&(0x7f0000001700)="dfb786634f03bf1d5de92311815adf547f1842270e045a07564bc465050e3ab033b40d641db39f2de342b36f349a509f22c7179f91e4b0dc2392d8e10cafa0d2dac1d22a2382cf9c636947f6748f6725afd7545197e542ccc3a28994a9ee46eb296bc9069575eeeeac7162addba840186f39010cf10b50205179e95442fcffe5d9292d4150a7155b8fdffc5da90cd6f0eac01a69b0c47a510156e2955de91a174c8500e76983f77581a28faf8aca3616c3f4ce947dcb48c152a9880c5f20184d9a004c84162bd19bbb50279b253043c01d9535d543808a4ab4e51e051c9a7008d4112cb0a1be640e9022b34d2834dfbbca50ea702b86a9573c77a8", 0xfb}], 0x1000000, &(0x7f0000001900)={[{@gid={'gid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x1}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x6a, 0x31, 0x2d, 0x67, 0x36, 0x0]}}, {@huge_within_size}, {@huge_advise}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x30, 0x25, 0x2d]}}, {@size={'size', 0x3d, [0x31]}}], [{@uid_lt={'uid<', 0xee01}}, {@dont_hash}, {@fsname={'fsname', 0x3d, ':'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@fowner_lt={'fowner<', r2}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) sendto(0xffffffffffffffff, &(0x7f0000000140)="541061a4ea5382c64b4b9d49d39a6839132b932ae829a3ede74e9b9d9ed5e3fdd27a65762ff80bb88df2f94477124a091c33c17d24e1be93339dbb8a52656778956931f784456ba47e15aafefedad4ed8c554063c7fdbd1bb2d5daab5f179b8bd87e46e12f1a163fe4d4f23199bb310ed2edc68eec9079296465987477049a9b07dbc76297d0e741f7573fe4741f6373ac0569f6933657d6310b27bcc77ae9991c0e774d25e867a78b3ee11c71dd4e34ab685e71dba95762830e224b36ddc8084d591f9a0c5adfa2cdbeafaaf9f2f0546a020a34edf55f7c48cbe8b49efa60f0a68fe55b0d57ac6860ede0a1bd37dc87ac25", 0xf2, 0x20044050, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x3, {0xa, 0x4e20, 0x59, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}}}, 0x80) 20:35:12 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 510.693725] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:35:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3f, 0x8000, 0x3, 0x3ff, 0x17, "c945811a87ab4e2e"}) 20:35:12 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:35:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:35:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:35:12 executing program 1: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) mq_notify(r0, &(0x7f0000000040)={0x20000000, 0x3, 0x2, @thr={0x0, 0x0}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000480)='mountstats\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x50, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000000000}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000f00)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/252, 0xfc}, {&(0x7f0000000900)=""/114, 0x72}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000980)=""/127, 0x7f}], 0x7) perf_event_open(&(0x7f0000000a00)={0x3, 0x80, 0x70, 0x0, 0x20, 0x4, 0x0, 0x101, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x10602, 0x0, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0xabd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001440)=ANY=[@ANYBLOB="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"]) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./file0\x00') accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40086607, &(0x7f0000000080)) syz_io_uring_setup(0x8, &(0x7f0000000080)={0x0, 0xd2b0, 0x10, 0x3, 0x2c5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/233, 0xe9) 20:35:12 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:35:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) unshare(0x48020200) 20:35:12 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:35:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x100}}, './file0\x00'}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000001d}) [ 511.131626] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:35:26 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:35:26 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:35:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) unshare(0x48020200) 20:35:26 executing program 1: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = semget(0x0, 0x3, 0x702) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x7fff, 0x1000}, {0x2, 0xff00, 0x1000}], 0x2, 0x0) unshare(0x2040200) 20:35:26 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:35:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r3 = dup(r2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x1) 20:35:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:35:26 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:35:26 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:35:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:35:26 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r2) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/90, 0x5a}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000200)=""/109, 0x6d}], 0x6, 0x0, 0x800) 20:35:37 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:35:37 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1000, 0x24000) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 20:35:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:35:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:35:37 executing program 1: unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "ebe9721bf5a36ab874eabc28af9589aa"}, 0x11, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setxattr$incfs_size(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000740)=0x8000, 0x8, 0x3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000780)=ANY=[@ANYBLOB="010100b176a228c0a2e300", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0']) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x93, 0x6, @buffer={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000800)="3dc19c9f7bc3371c512d41607b19e4ff97e6d960a09c39818f37608daed0be44e13508800a6ebc647a4976c982699309977aa7fc4c5772fc89e24125aa8e46d61f0b638068136018e8eea6d9070b6dce2a97982a5960cded403ffc4f57a948187bcd40d7b09862512ddfba11b933adfcf940990e1906573201dfdaea31fc56cf08a24d8925ff9c026e914e5300b300ee42b693", &(0x7f0000000480)=""/253, 0x3, 0x10020, 0xffffffffffffffff, &(0x7f0000000340)}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x8b\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="2021202e2f66696c6530200a867d9ccfbc3e6b07c1957f194967f6854cb6e7970395b3b37e0b74a733598467393901e592bb8aac0590d7fe008000000000000000"], 0x45) r5 = epoll_create(0x1) sendfile(r1, r5, &(0x7f0000000000), 0x7fff) unshare(0x48020200) r6 = dup(0xffffffffffffffff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xc) 20:35:37 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:35:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:35:37 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:35:37 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:35:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:35:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:35:37 executing program 2: r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r1) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@private0}, 0x14) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:35:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:35:37 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:35:37 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:35:38 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:35:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:35:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000340), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1f, &(0x7f0000000180)={0x0, 0xf81c, 0x4, 0x0, 0x57}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f00000003c0)="fe", 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0xa, 0x3, 0xff) dup(r6) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000004c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x1, 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000005e, 0x0, 0x53535d8d8a440828, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffd, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) splice(r4, &(0x7f0000000080)=0x7, r4, &(0x7f00000000c0)=0xc2a, 0x8, 0xa) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:35:38 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = socket$inet(0xa, 0x3, 0xff) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180), 0x4) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000440)) sendmsg$nl_generic(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, 0x20, 0x8, 0x70bd27, 0x25dfdbfe, {0x12}, [@generic="cc887155956db49dc4b2e6382694a0db7aaa695f1465f78bb0896e8f6d0bf1751e14bf7eae6a0f2a17392c100d2e01edc884f1a0533be6f5d3ab3c2cc663b2c034b34ce5eb9479a9b72cc4eeebdec60743a711ac75fecf4db38aac8ed904ed4d7d386903040bac1c936fc5bb3d1f21537c0c7a85351c64e152a67bc0f1b1c5498a38fc2cedb5a030dc7688f7b7139de59038e65d10a73e6ee65de5791090633398aabb60cc7735c33c4a66ff", @typed={0x8, 0x85, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x35, 0x0, 0x0, @u32=0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) dup(r1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x17, 0x11, 0xf5}) 20:35:38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) fcntl$dupfd(r0, 0x0, r0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 536.353330] perf: interrupt took too long (15629 > 15595), lowering kernel.perf_event_max_sample_rate to 12000 [ 536.391612] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:35:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:35:51 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:35:51 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000340), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1f, &(0x7f0000000180)={0x0, 0xf81c, 0x4, 0x0, 0x57}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f00000003c0)="fe", 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0xa, 0x3, 0xff) dup(r6) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000004c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x1, 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000005e, 0x0, 0x53535d8d8a440828, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffd, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) splice(r4, &(0x7f0000000080)=0x7, r4, &(0x7f00000000c0)=0xc2a, 0x8, 0xa) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:35:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) fcntl$dupfd(r0, 0x0, r0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:35:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:35:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0xa4e5) 20:35:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:35:51 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 549.778455] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:35:51 executing program 2: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x10000, 0xe9}, {0x1f, 0x2000c}]}, 0x14, 0x3) fcntl$getown(0xffffffffffffffff, 0x9) 20:35:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:35:51 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:35:51 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:35:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) fcntl$dupfd(r0, 0x0, r0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:35:51 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) 20:35:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:35:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 550.137471] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:35:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:36:06 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @generic={0x2c, "a3dd334552504ac8b5b9c6b002dc"}, @qipcrtr={0x2a, 0x0, 0x4001}, @vsock={0x28, 0x0, 0x0, @local}, 0x9, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='vlan1\x00', 0x1, 0x2, 0x7}) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:36:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:36:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:36:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:36:06 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:36:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:36:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2, 0x3}, [], "", ['\x00']}, 0x140) sendfile(r0, r1, 0x0, 0x100000001) r2 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r7 = socket$inet(0xa, 0x3, 0xff) r8 = dup(r7) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000180), 0x4) r9 = dup(r8) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) r10 = syz_io_uring_complete(0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r9, &(0x7f0000000040)={0xc0000004}, r10, 0x3, 0x0, 0x1, {0x0, r11}}, 0x8001) 20:36:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:36:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r3 = dup(r2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000240)={@empty, @local}, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000180)=0x8001, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x40) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) ioctl$KDSETLED(r0, 0x4b32, 0x9) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0x3, 0x8, 0x91}) ioctl$VT_WAITACTIVE(r0, 0x5607) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x4624) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f00000001c0)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80800, 0x69, 0x15}, 0x18) r8 = syz_open_pts(r0, 0x4004e0) ioctl$TIOCL_PASTESEL(r8, 0x541c, &(0x7f0000000100)) ioctl$FICLONE(r6, 0x40049409, r7) 20:36:06 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 564.712918] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:36:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:36:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:36:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:36:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 565.004393] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:36:21 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200441, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 20:36:21 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="6c1a7d00"}, 0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfab, 0x8, 0x1fd1, 0x100, 0x1d, 0x20, r2}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xa3}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x80, 0x5, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x7800, 0x7, 0x1}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="5240fb041288939106153eb67c14000000000000026efe5c90f3a0ad9b00"], 0x18}, 0x0) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9, 0xc, 0x5, 0x3f, 0x0, 0x4, 0xc0600, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x11, 0x7}, 0x1400, 0x3e, 0x4, 0x6, 0x0, 0xffffff03, 0x11f5, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 20:36:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:36:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:36:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:36:21 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:36:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:36:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 579.363708] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:36:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:36:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xbf) 20:36:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:36:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:36:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:36:21 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:36:21 executing program 1: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000004307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = gettid() process_vm_readv(r2, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x3, 0xfe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x8e6f3, 0x200, 0x7, 0x1, 0x49c2, 0x4, 0x200, 0x0, 0x5, 0x0, 0x8000}, r2, 0xe, r0, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000180)='./file1\x00', 0x1, 0x2000, 0x1}, 0x80000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) getresuid(&(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0xffffffffffffffff, r4}, 0xc) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @empty, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x20000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/usbcore', 0x250000, 0x2) 20:36:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r2) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="2eacd4fdaaf873536736fde222da703f7bf964405fe7db518b5911602e5a12c37a96091be562a17b699d45a52b4f1782fb1a42a00c930186ef43d5cfe466c7530f7732fcdf92f39cd4ae5a0d0ee7c030ae02e29bc3b1a52b2f5635e06a4b80646cfcb3649b748f6a1d9368b620c1ec2e6158a68d6ed66f894727fdd2e287269856517a946520d7a3cabc68851e06ae375437232c34491253b4aae20d1a0b7878c01c3b2fcbaa02f0bfc4c11701dc5615b6d14478882f55052109a60269ce33cc0973f24c") 20:36:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) [ 579.721123] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:36:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:36:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block', 0x280800, 0x160) sendmsg$nl_generic(r1, 0x0, 0x40001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80d00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000180), 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000001) r5 = dup(r4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001600)={&(0x7f00000016c0)={0xb0, 0x0, 0x1, 0xecae0a8012e21a9b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x95}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}, @CTA_ID={0x8}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000012c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) readv(r0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/233, 0xe9}, {&(0x7f0000001100)=""/25, 0x19}, {&(0x7f0000001140)=""/121, 0x79}, {&(0x7f00000011c0)=""/119, 0x77}], 0x5) 20:36:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:36:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 579.987712] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 580.103344] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 580.808245] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. 20:36:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:36:35 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:36:35 executing program 2: ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='net/ptype\x00') r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000180), 0x4) dup(r1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000ac0)={0x0, 0x4, 0x2, 0x3f, 0x0, [@remote, @mcast2]}, 0x28) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x2) 20:36:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:36:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, 0x0, 0x0, 0x10062, 0x0) 20:36:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:36:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:36:35 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000040)=0x1, 0x4) fallocate(0xffffffffffffffff, 0x21, 0x8000, 0x80000000) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) sendmsg$inet6(r4, &(0x7f0000000500)={&(0x7f0000000140)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f00000001c0)="2ac99f1d1e75cfdd45c94ed257b470", 0xf}, {&(0x7f0000000240)="3d6aa133884e8f4bfdb04bf79f4b2bd8b9d54f2f0333732b6fccd9c8ea4d5e7756909306e5816b8d988ce294411fa2b2c56dd1c8118974e77b770582b316ec", 0x3f}, {&(0x7f0000000280)="96b200e6154086e2a50149184d7ebe15eefdb2feca69605094389e7d6ab02935c00877828ef5fd178cfeef714d1f232ced1df6e9c5cddb1eafcd3d00a096272a", 0x40}, {&(0x7f0000000400)="ced5bfc4c80507d89536da9bc9bf8af84192f0fb6a1751c7a5409449c6ae86bb7f2df53e28412d4959ffeb175dbf3f0c6a976059522f416c1c0c4a", 0x3b}], 0x5, &(0x7f0000001900)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x88, 0x6, 0x0, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2]}}}, @dstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@pad1]}}}, @dstopts_2292={{0x180, 0x29, 0x4, {0x87, 0x2c, '\x00', [@hao={0xc9, 0x10, @local}, @generic={0xf7, 0x5e, "d200469487ee70d9851117e95f029d0eb0457975b6703fd3bda683dee664d8f309d4ae6043c626a734dfc853724d2e1710e8f16a6edc787ceb5161e8b35f5851704ec045c379f6e608e3b7b5766e41527f860204baff9815ce32bd24c8e9"}, @hao={0xc9, 0x10, @loopback}, @generic={0x7, 0xb1, "2caf46cc1419b969b4c9c69143c0f817c58ad1d971bd7f9fcc70f0eb3bbd386e0fe7b57b6d66f336a4b6b98a82bb889200598ffff3154ddbc833f116b9f593b1a428e2a784227119461426bf3d1b3c9559e713feec76b033200ec1958153fc6903feeb537f33f24809fda8c04c43393373bf5f683f01cfb539a1ee7bc69b5372aa5589aaf29f753ebc4293eff634eb73f9a7beb71375211eda681830363f8d46abeb6a75f14120231ac0c9ab76349b5ac8"}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x81}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0xfffc}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x7fff}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts={{0xd8, 0x29, 0x37, {0x2f, 0x17, '\x00', [@generic={0x9, 0xb6, "170e181b2d67e48c22f51f18a1caa00ed200b406f73860f90a76f91818b1deac09a41fd59d9b7a0dbd23a4adc04f36345429d0a38c58e42c839edf8e48b155e4d867b2c2bb2226d38e8fadfca5378acbfa11656089db18a70dbe09044b8dc7fd5b760a89cc50219393d0b9e37a90c9a31cbc55a83b85ca3533221964ce2a09d48e70a002caa7039e817aaab6ae83d8d268851549400b09f6390409c05aad7b33df7630b2a5394f961df3b94efcf93c6f892e1e7618bd"}, @ra={0x5, 0x2, 0xbe6f}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x33, 0xa, 0x2, 0x2, 0x0, [@empty, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8000}}, @flowinfo={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x388}, 0x11) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 593.745708] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:36:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:36:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:36:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, 0x0, 0x0, 0x10062, 0x0) 20:36:35 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:36:35 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000000000)="fdc749c454a5cebf66fbf84e4152c1d25fe658a7f779c378e1b4a9243cd8a82fbae56528a098ee56ff768c2c4d2736ac46eaf8bdb8257824af715466f1da5ba0186537b16dbe736adc543d3f231aee2b435dcb18e14d38c1638a98848a1433222eac63528db2f4ca9442d2131d7d27656927985b9fcab2478b2b29f9b110a5aef49ea3f2b576de23c2caa65afaf99b51c00ce466e9d3695060adf426aeda0e240103ac984c37", 0xa6}, {&(0x7f00000000c0)="eefc456465abd53b52e0b691b2e5f69735cc4fbf84b70dbcd7471bbaa7a6756a95ec6d0a00a5156240c269c480e24c184104da7bdd1a4e7271090a4dea57ff751f35c7a448b6e4c014f78b103b28bfa1b86739b39377fedbba9a29ca4c7b77a32228af19fc83026e32db1ef57978afffcd51dac116f5f91d4e32daf9f85be20fdab714f765b5dfad0024327e2c4b620ef0a3698ee8667f71e05058b12b3714c8639ca9149b365650c8b7e948ec8fb6c15a6b7ec0b55fe4eb2354b2a05d9f29ed5470190862b534daffcd3fd5b51240938f657826564e8d", 0xd7}, {&(0x7f00000001c0)="d269a4def0759bed560f28f2a134437abe36abf071169e753c9ea10aafe5", 0x1e}, {&(0x7f0000000200)="4a053401654a401cdfbb4755b96ffdc4bbb24f0aea39a51ee54c46095566593da503cc4b40c2ae49410e5ae24aa56401611c1685cd7da14b74d35b4783310f07235b39bce94040c067611fb9f2d39c13fcedddfb", 0x54}, {&(0x7f0000000280)="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", 0x1000}], 0x5) [ 593.970332] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:36:52 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:36:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:36:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:36:52 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:36:52 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:36:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, 0x0, 0x0, 0x10062, 0x0) 20:36:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet(0xa, 0x8, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x4, 0x4, 0x5, 0x2, 0xc20b, 0xffff}) socket$inet(0x2, 0x3, 0xeca) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$dupfd(r0, 0x406, r4) 20:36:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 610.544905] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:36:52 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:36:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00), 0x0, 0x10062, 0x0) 20:36:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:36:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:36:52 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:36:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:36:52 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_setup(0x66f4, &(0x7f0000000000)={0x0, 0xe176, 0x10, 0x2, 0xbb}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:36:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00), 0x0, 0x10062, 0x0) [ 610.904205] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:36:52 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:36:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:37:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:37:08 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:37:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:37:08 executing program 2: r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x1138}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:37:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:37:08 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:37:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00), 0x0, 0x10062, 0x0) 20:37:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 626.268471] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:37:21 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x0, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:37:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 20:37:21 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9989352caed36a44, 0x109) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x402200, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000001c0)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000240)) r2 = socket$inet(0xa, 0x3, 0xff) dup(r2) io_submit(0x0, 0x2, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f0000000000)="c0ad0017b464dd15b0139d89361d44265c307696400256985f1ea0ca6c0ac5c9ece4b32e14a3a7123c1b3285b4ff506e643edfac428bebdd1a758b19a6d8160e21ede72311c9e1da80e7f61eb2f775ba60df776d768257455b9a11e05d5919e32b2bc8654f3a7c9551fc00bf52ed24784ab1b7f8fe3c3709d78c41c3fffabc215509beadbfb4d4531d60955dbdaa2cb5a228343cd29217d783488f5b83ac6a47244d6a2f779f2ad31e34fb40e177588bbf8a80cefb27c456aa08a03d7eb7d90968867aec2969573ed5ea97fdae2925eabaaa9968fba5b98ab39d857f4982ebe2e3f99a7896e7ca920b58b1c95d9574ee6939", 0xf2, 0x0, 0x0, 0x2}]) 20:37:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:37:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:37:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:37:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:37:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x169}}, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={&(0x7f00000001c0)=""/91, 0x5b}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64]) fdatasync(r0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000ac0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "46dacd8396fe92"}) readv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000780)=""/125, 0x7d}], 0x7) sendmsg$inet6(r2, 0x0, 0x0) socket$inet(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 639.226205] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:37:21 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:37:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:37:21 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) 20:37:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:37:21 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x0, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:37:21 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x2, 0x7, 0x0, 0x0, 0xffffffffffffffbf, 0x20, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x9, 0x1f, 0xa, 0x1, 0x6, 0x9, 0x0, 0x7, 0x0, 0x80000001}, r2, 0x3, r0, 0x1) ustat(0x1, &(0x7f0000000000)) 20:37:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:37:21 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:37:21 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) 20:37:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 20:37:35 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x0, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:37:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:37:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:37:35 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x2, 0x7, 0x0, 0x0, 0xffffffffffffffbf, 0x20, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x9, 0x1f, 0xa, 0x1, 0x6, 0x9, 0x0, 0x7, 0x0, 0x80000001}, r2, 0x3, r0, 0x1) ustat(0x1, &(0x7f0000000000)) 20:37:35 executing program 2: r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad, 0x0, 0x20000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0xa}, 0x80000001) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7fffffff}, 0xef7) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x400, 0x70bd27, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000088) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) listen(r6, 0xd289) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x77359400}}, 0x7) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$INCFS_IOC_PERMIT_FILL(r8, 0x40046721, &(0x7f0000000140)={r7}) 20:37:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:37:35 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:37:35 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x2, 0x7, 0x0, 0x0, 0xffffffffffffffbf, 0x20, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x9, 0x1f, 0xa, 0x1, 0x6, 0x9, 0x0, 0x7, 0x0, 0x80000001}, r2, 0x3, r0, 0x1) ustat(0x1, &(0x7f0000000000)) 20:37:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:37:35 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:37:35 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:37:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:37:35 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xc4) 20:37:35 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x2, 0x7, 0x0, 0x0, 0xffffffffffffffbf, 0x20, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x9, 0x1f, 0xa, 0x1, 0x6, 0x9, 0x0, 0x7, 0x0, 0x80000001}, r2, 0x3, r0, 0x1) ustat(0x1, &(0x7f0000000000)) 20:37:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:37:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:37:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_io_uring_setup(0x4e5b, &(0x7f0000000000)={0x0, 0xf6f9, 0x8, 0x1, 0x144}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0xf4e, 0x80000001, 0x3, 0x0, 0x0, [{{r0}, 0x100000000}, {{r2}, 0xd4}, {{}, 0x80}]}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x111000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000240)=ANY=[@ANYBLOB="e4d86d49a1dadde946f343b6c208ad84709a18e2afebd96d", @ANYRES32=r3, @ANYBLOB="80000000800000002e2f66696c653000"]) 20:37:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:37:49 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:37:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 20:37:49 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:37:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:37:49 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x2, 0x7, 0x0, 0x0, 0xffffffffffffffbf, 0x20, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x9, 0x1f, 0xa, 0x1, 0x6, 0x9, 0x0, 0x7, 0x0, 0x80000001}, r2, 0x3, r0, 0x1) 20:37:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:37:49 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:37:50 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) 20:37:50 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x2, 0x7, 0x0, 0x0, 0xffffffffffffffbf, 0x20, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x9, 0x1f, 0xa, 0x1, 0x6, 0x9, 0x0, 0x7, 0x0, 0x80000001}, r2, 0x3, r0, 0x1) 20:37:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:37:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:37:50 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:37:50 executing program 2: r0 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @dev}}) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) close(r2) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:37:50 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:37:50 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:37:50 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x2, 0x7, 0x0, 0x0, 0xffffffffffffffbf, 0x20, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x9, 0x1f, 0xa, 0x1, 0x6, 0x9, 0x0, 0x7, 0x0, 0x80000001}, r2, 0x3, r0, 0x1) 20:37:50 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 668.403503] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:38:05 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:38:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(0x0, &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:38:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:38:05 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:38:05 executing program 2: r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r1) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=r3, @ANYBLOB="ebcacb992ef1dbfa5fbd5f65aaf0a17b565685957491b38edba252c66567a8896f0ba598dbd859c6f2db91b5a86aeb78521af6fb56b36817e8b6023029f64663ed7c1bc2d5341a615b115ff94df1542aa563354336e62649691b43525ac6cabe673e7a290e39ef69a33aaa67e81f713cbe4ebf51f04ad4cc9ebfcc45a3bf0432ca0820a724572bc1391114ca59f1ac64f93a0a7cee7f8742f5844ecd98a9d50454afcdd5d2c9c6a43303836610aa1749398840e5e8acec96ccde59c4225c68f7559b77244da5073fe3564d321fb7a083eb828154685185b58d9d3f5c952364f26b908dea1c8e79c69564d7ea40b9aa31324b019ea8c1b4196383b82ab27d73ff0777f6e76f87694f522d6d6006bad743fa2153effe1094061cf9047eb2e292e89312acdd799635b3855c6e2258ed92f832df48098313b6da5556c9f60a0ab17cc7841fc3f50ef58d2365a6d93fe12411815caee2013277008b45c9bddfcae87a5d6eecf1cd"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000700000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='./file0\x00']) 20:38:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:38:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) getpgrp(r0) 20:38:05 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x2, 0x7, 0x0, 0x0, 0xffffffffffffffbf, 0x20, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x9, 0x1f, 0xa, 0x1, 0x6, 0x9, 0x0, 0x7, 0x0, 0x80000001}, r2, 0x3, r0, 0x1) [ 683.347010] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:38:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:38:05 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:38:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = getpgrp(r1) perf_event_open(&(0x7f0000002500)={0x5, 0x80, 0x81, 0x5, 0x22, 0x0, 0x0, 0x93d, 0xc0008, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xffffffff, 0x3}, 0x400, 0xffff, 0x2, 0x7, 0x6, 0x10001, 0x8001, 0x0, 0x8, 0x0, 0x5db}, r2, 0x7, 0xffffffffffffffff, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002480)={&(0x7f0000000040)={0x14, 0x3c, 0x100, 0x70bd27, 0x25dfdbf7, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) 20:38:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:38:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(0x0, &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:38:05 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:38:05 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 683.543304] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:38:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:38:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:38:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) 20:38:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 20:38:05 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 683.877989] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:38:05 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:38:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(0x0, &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:38:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 684.157571] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:38:26 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 1) 20:38:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xff) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x1) r3 = socket$inet(0xa, 0x3, 0xff) dup(r3) ioctl$int_out(r3, 0x5462, &(0x7f0000000080)) 20:38:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:38:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:38:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:38:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:38:26 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:38:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) [ 704.506491] FAULT_INJECTION: forcing a failure. [ 704.506491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.509046] CPU: 1 PID: 6414 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 704.510488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 704.512257] Call Trace: [ 704.512822] dump_stack+0x107/0x167 [ 704.513593] should_fail.cold+0x5/0xa [ 704.514405] _copy_from_user+0x2e/0x1b0 [ 704.515261] __copy_msghdr_from_user+0x91/0x4b0 [ 704.515287] ? __ia32_sys_shutdown+0x80/0x80 [ 704.516992] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 704.518115] ? SOFTIRQ_verbose+0x10/0x10 [ 704.518133] ? mark_lock+0xf5/0x2df0 [ 704.518158] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 704.520671] ? SOFTIRQ_verbose+0x10/0x10 [ 704.521549] ___sys_recvmsg+0xd5/0x200 [ 704.522382] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 704.523422] ? __fget_files+0x2cf/0x520 [ 704.524269] ? lock_downgrade+0x6d0/0x6d0 [ 704.525156] ? lock_downgrade+0x6d0/0x6d0 [ 704.526046] ? __fget_files+0x2f8/0x520 [ 704.526902] ? __fget_light+0xea/0x290 [ 704.527732] do_recvmmsg+0x24c/0x6d0 [ 704.528535] ? ___sys_recvmsg+0x200/0x200 [ 704.529416] ? lock_downgrade+0x6d0/0x6d0 [ 704.530309] ? ksys_write+0x12d/0x260 [ 704.531125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 704.532160] ? wait_for_completion_io+0x270/0x270 [ 704.533187] ? rcu_read_lock_any_held+0x75/0xa0 [ 704.534174] ? vfs_write+0x354/0xb10 [ 704.534970] __x64_sys_recvmmsg+0x20f/0x260 [ 704.535884] ? ksys_write+0x1a9/0x260 [ 704.536839] ? __do_sys_socketcall+0x600/0x600 [ 704.538022] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 704.539301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 704.540780] do_syscall_64+0x33/0x40 [ 704.541580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 704.542670] RIP: 0033:0x7f9a8d697b19 [ 704.543457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 704.548207] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 704.549852] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 704.551372] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 704.553307] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 704.555118] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001 [ 704.556772] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 704.566410] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:38:26 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = socket$inet(0xa, 0x3, 0xff) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r3) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x7fffffff}, 0x8) dup(r1) syz_io_uring_setup(0x7112, &(0x7f0000000000)={0x0, 0xb0dc, 0x4, 0x3, 0x29c, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:38:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 20:38:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) 20:38:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:38:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:38:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:38:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:38:40 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:38:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:38:40 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 2) [ 718.679049] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:38:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) [ 718.707164] FAULT_INJECTION: forcing a failure. [ 718.707164] name fail_usercopy, interval 1, probability 0, space 0, times 0 20:38:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 718.710009] CPU: 0 PID: 6442 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 718.711706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 718.713577] Call Trace: [ 718.714176] dump_stack+0x107/0x167 [ 718.714997] should_fail.cold+0x5/0xa [ 718.715857] _copy_from_user+0x2e/0x1b0 [ 718.716772] __copy_msghdr_from_user+0x91/0x4b0 [ 718.717817] ? __ia32_sys_shutdown+0x80/0x80 [ 718.718809] ? __lock_acquire+0x1657/0x5b00 [ 718.719802] ___sys_recvmsg+0xd5/0x200 [ 718.720687] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 718.721783] ? __fget_files+0x2cf/0x520 [ 718.722670] ? lock_acquire+0x197/0x470 [ 718.723552] ? find_held_lock+0x2c/0x110 20:38:40 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 718.724480] ? __might_fault+0xd3/0x180 [ 718.725398] ? lock_downgrade+0x6d0/0x6d0 [ 718.726308] do_recvmmsg+0x24c/0x6d0 [ 718.727112] ? ___sys_recvmsg+0x200/0x200 [ 718.727997] ? lock_downgrade+0x6d0/0x6d0 [ 718.728900] ? ksys_write+0x12d/0x260 [ 718.729721] ? wait_for_completion_io+0x270/0x270 [ 718.730762] ? rcu_read_lock_any_held+0x75/0xa0 [ 718.731762] ? vfs_write+0x354/0xb10 [ 718.732574] __x64_sys_recvmmsg+0x20f/0x260 [ 718.733502] ? ksys_write+0x1a9/0x260 [ 718.734341] ? __do_sys_socketcall+0x600/0x600 [ 718.735333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 718.736507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 718.737658] do_syscall_64+0x33/0x40 [ 718.738485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 718.739613] RIP: 0033:0x7f9a8d697b19 [ 718.740451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 718.744613] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 718.746333] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 718.747940] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 718.749552] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 718.751163] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001 [ 718.752777] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:38:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pread64(r0, &(0x7f0000000000)=""/135, 0x87, 0x742) 20:38:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:38:40 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 3) 20:38:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:38:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 718.960653] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 718.990062] FAULT_INJECTION: forcing a failure. [ 718.990062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.992535] CPU: 0 PID: 6457 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 718.993974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 718.995724] Call Trace: [ 718.996298] dump_stack+0x107/0x167 [ 718.997069] should_fail.cold+0x5/0xa [ 718.997978] _copy_from_user+0x2e/0x1b0 [ 718.998974] __copy_msghdr_from_user+0x91/0x4b0 [ 718.999959] ? __ia32_sys_shutdown+0x80/0x80 [ 719.000898] ? __lock_acquire+0x1657/0x5b00 [ 719.001826] ___sys_recvmsg+0xd5/0x200 [ 719.002651] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 719.003691] ? __fget_files+0x2cf/0x520 [ 719.004548] ? lock_acquire+0x197/0x470 [ 719.005382] ? find_held_lock+0x2c/0x110 [ 719.006249] ? __might_fault+0xd3/0x180 [ 719.007085] ? lock_downgrade+0x6d0/0x6d0 [ 719.007979] do_recvmmsg+0x24c/0x6d0 [ 719.008820] ? ___sys_recvmsg+0x200/0x200 [ 719.009807] ? lock_downgrade+0x6d0/0x6d0 [ 719.010812] ? ksys_write+0x12d/0x260 [ 719.011751] ? wait_for_completion_io+0x270/0x270 [ 719.012970] ? rcu_read_lock_any_held+0x75/0xa0 [ 719.014099] ? vfs_write+0x354/0xb10 [ 719.014991] __x64_sys_recvmmsg+0x20f/0x260 [ 719.016036] ? ksys_write+0x1a9/0x260 [ 719.016967] ? __do_sys_socketcall+0x600/0x600 [ 719.018063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 719.019330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 719.020580] do_syscall_64+0x33/0x40 [ 719.021484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 719.022730] RIP: 0033:0x7f9a8d697b19 [ 719.023629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 719.028071] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 719.029913] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 719.031633] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 719.033369] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 719.035066] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001 [ 719.036766] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:38:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:38:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:38:55 executing program 1: r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:38:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 4) 20:38:55 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r1) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000000)="0c9e53a1cbc8b8faef37e17ed66a5b82c8df546f159ca0aa0d6fd598628af54ecf3f1b39471c74a81655797ef7541b63fab6de6cca139e57e826527b6a32729458120b", 0x43}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="23ccf726b2310f19a66bb770e274b0ed870176749203467262", 0x19}, {&(0x7f00000010c0)="9f3e03063fda483b63bd41496b68d2ac6e0f59ef7a2b58ed786ed93405452e", 0x1f}, {&(0x7f0000001100)="fc657ba9ebaad38fad7a846d98012d88b245b2a2c088f9a222c43f5d1e277b4e4d0d77d8d4b0f23b835ecfad9532a98937ede0081ebe8bc3e9ebe7117d394fd6b8f420f49104c49d9b77ae2979d79d15a9318a81ef22f856ed177186d3bcb5483fa1db98aebf45313de2f8b06dfb0b0f9079a02e64f885597432052012007e7755a19fa013a19514a4ccb9e962d94366cba1f2b973b0e8257ff15d06b1d59b812ab9b2dc75cfe9e46c7cc70a6ede01ac7de6ad9a714e90768ca4d29595", 0xbd}, {&(0x7f00000011c0)="1396a75971c0af6c0d277af2f2d5c0c26108e41e74233d8e12fe8ec2ab5cab71ca972bd4012739eaf9358adaab4d2025fe294b81a859d863790516844dc7ca8d58104065a3de743b1ed1e49af44e9a6b5b6a3f9c7620353e20e50e4c76ae4a5ccf9914a89191d048b426a12fb9922262f235a4e0bdfce756ee", 0x79}, {&(0x7f0000001240)="89f33f5344f551d243f6c4fd25baa04c0a7200da27368bd3", 0x18}, {&(0x7f0000001280)="78f9b1e89ee3504338849b0e4483be9f46b82bfd33bdc5d695839325f12444c3f96303acbb6f47c965081ef29b80cba558b9c08d32ed1eba9fb3c75e4e0989f3a3b5b6c0d96ac8a9a6", 0x49}], 0x8) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000001380)={{0x1, @local, 0x4e24, 0x2, 'nq\x00', 0x0, 0xc6c, 0x4}, {@empty, 0x4e22, 0x1, 0x4, 0xfffffffa, 0x3f}}, 0x44) 20:38:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:38:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:38:55 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 733.268022] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 733.275426] FAULT_INJECTION: forcing a failure. [ 733.275426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.278004] CPU: 1 PID: 6472 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 733.279454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 733.281218] Call Trace: [ 733.281784] dump_stack+0x107/0x167 [ 733.282553] should_fail.cold+0x5/0xa [ 733.283370] _copy_from_user+0x2e/0x1b0 [ 733.284214] __copy_msghdr_from_user+0x91/0x4b0 [ 733.285201] ? __ia32_sys_shutdown+0x80/0x80 [ 733.286124] ? __lock_acquire+0x1657/0x5b00 [ 733.287055] ___sys_recvmsg+0xd5/0x200 [ 733.287884] ? __copy_msghdr_from_user+0x4b0/0x4b0 20:38:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 733.289034] ? __fget_files+0x2cf/0x520 [ 733.289885] ? lock_acquire+0x197/0x470 [ 733.290925] ? find_held_lock+0x2c/0x110 [ 733.292057] ? __might_fault+0xd3/0x180 [ 733.292904] ? lock_downgrade+0x6d0/0x6d0 [ 733.293797] do_recvmmsg+0x24c/0x6d0 [ 733.294597] ? ___sys_recvmsg+0x200/0x200 [ 733.295472] ? lock_downgrade+0x6d0/0x6d0 [ 733.296363] ? ksys_write+0x12d/0x260 [ 733.297179] ? wait_for_completion_io+0x270/0x270 [ 733.298201] ? rcu_read_lock_any_held+0x75/0xa0 [ 733.299179] ? vfs_write+0x354/0xb10 [ 733.299971] __x64_sys_recvmmsg+0x20f/0x260 [ 733.300895] ? ksys_write+0x1a9/0x260 [ 733.301700] ? __do_sys_socketcall+0x600/0x600 [ 733.302673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 733.303783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 733.304889] do_syscall_64+0x33/0x40 [ 733.305683] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 733.306762] RIP: 0033:0x7f9a8d697b19 [ 733.307544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 733.311439] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 733.313049] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 733.314548] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 733.316054] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 733.317562] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001 [ 733.319067] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:38:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:38:55 executing program 1: r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:38:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:38:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"]) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 733.427708] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:38:55 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:38:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 5) [ 733.620983] FAULT_INJECTION: forcing a failure. [ 733.620983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.622344] CPU: 0 PID: 6496 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 733.623111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 733.624042] Call Trace: [ 733.624346] dump_stack+0x107/0x167 [ 733.624767] should_fail.cold+0x5/0xa [ 733.625209] _copy_from_user+0x2e/0x1b0 [ 733.625664] __copy_msghdr_from_user+0x91/0x4b0 [ 733.626187] ? __ia32_sys_shutdown+0x80/0x80 [ 733.626679] ? __lock_acquire+0x1657/0x5b00 [ 733.627184] ___sys_recvmsg+0xd5/0x200 [ 733.627622] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 733.628188] ? __fget_files+0x2cf/0x520 [ 733.628647] ? lock_acquire+0x197/0x470 [ 733.629099] ? find_held_lock+0x2c/0x110 [ 733.629563] ? __might_fault+0xd3/0x180 [ 733.630008] ? lock_downgrade+0x6d0/0x6d0 [ 733.630484] do_recvmmsg+0x24c/0x6d0 [ 733.630906] ? ___sys_recvmsg+0x200/0x200 [ 733.631371] ? lock_downgrade+0x6d0/0x6d0 [ 733.631844] ? ksys_write+0x12d/0x260 [ 733.632281] ? wait_for_completion_io+0x270/0x270 [ 733.632838] ? rcu_read_lock_any_held+0x75/0xa0 [ 733.633360] ? vfs_write+0x354/0xb10 [ 733.633782] __x64_sys_recvmmsg+0x20f/0x260 [ 733.634267] ? ksys_write+0x1a9/0x260 [ 733.634695] ? __do_sys_socketcall+0x600/0x600 [ 733.635216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 733.635804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 733.636393] do_syscall_64+0x33/0x40 [ 733.636812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 733.637394] RIP: 0033:0x7f9a8d697b19 [ 733.637817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 733.639875] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 733.640734] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 733.641541] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 733.642345] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 733.643146] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001 [ 733.643944] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:39:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 6) 20:39:09 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:39:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:39:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:39:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:39:09 executing program 1: r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:39:09 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r1) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={r3, 0x5, 0x80000001}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000000)={r3, "514a3a103280b527c7f246abd8d09b68"}) 20:39:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 747.614783] FAULT_INJECTION: forcing a failure. [ 747.614783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.617957] CPU: 1 PID: 6506 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 747.619604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 747.621685] Call Trace: [ 747.622321] dump_stack+0x107/0x167 [ 747.623326] should_fail.cold+0x5/0xa [ 747.624258] _copy_from_user+0x2e/0x1b0 [ 747.625222] __copy_msghdr_from_user+0x91/0x4b0 [ 747.626336] ? __ia32_sys_shutdown+0x80/0x80 [ 747.627472] ? __lock_acquire+0x1657/0x5b00 [ 747.628709] ___sys_recvmsg+0xd5/0x200 [ 747.629631] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 747.630797] ? __fget_files+0x2cf/0x520 [ 747.631740] ? lock_acquire+0x197/0x470 [ 747.632681] ? find_held_lock+0x2c/0x110 [ 747.633644] ? __might_fault+0xd3/0x180 [ 747.634592] ? lock_downgrade+0x6d0/0x6d0 [ 747.635619] do_recvmmsg+0x24c/0x6d0 [ 747.636584] ? ___sys_recvmsg+0x200/0x200 [ 747.637555] ? lock_downgrade+0x6d0/0x6d0 [ 747.638708] ? ksys_write+0x12d/0x260 [ 747.639629] ? wait_for_completion_io+0x270/0x270 [ 747.640775] ? rcu_read_lock_any_held+0x75/0xa0 [ 747.641870] ? vfs_write+0x354/0xb10 [ 747.642754] __x64_sys_recvmmsg+0x20f/0x260 [ 747.643761] ? ksys_write+0x1a9/0x260 [ 747.644650] ? __do_sys_socketcall+0x600/0x600 [ 747.645886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 747.647245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 747.648558] do_syscall_64+0x33/0x40 [ 747.649562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 747.650822] RIP: 0033:0x7f9a8d697b19 [ 747.651695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 747.656045] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 747.657850] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 747.659522] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 747.661207] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.662859] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001 [ 747.664531] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:39:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:39:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 747.687243] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:39:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 7) 20:39:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:39:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_pts(r0, 0x8000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x7) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000340)={0xff, 0xb3, 0x10000, 0x2, 0x10, "b1de697f7607e249d2faac9ea7281899ac280e"}) 20:39:09 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:39:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:39:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:39:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 747.901374] FAULT_INJECTION: forcing a failure. [ 747.901374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.903100] CPU: 0 PID: 6522 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 747.904066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 747.905246] Call Trace: [ 747.905624] dump_stack+0x107/0x167 [ 747.906139] should_fail.cold+0x5/0xa [ 747.906682] _copy_from_user+0x2e/0x1b0 [ 747.907252] __copy_msghdr_from_user+0x91/0x4b0 [ 747.907914] ? __ia32_sys_shutdown+0x80/0x80 [ 747.908544] ? __lock_acquire+0x1657/0x5b00 [ 747.909175] ___sys_recvmsg+0xd5/0x200 [ 747.909747] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 747.910446] ? __fget_files+0x2cf/0x520 [ 747.911015] ? lock_acquire+0x197/0x470 [ 747.911581] ? find_held_lock+0x2c/0x110 [ 747.912167] ? __might_fault+0xd3/0x180 [ 747.912790] ? lock_downgrade+0x6d0/0x6d0 [ 747.913390] do_recvmmsg+0x24c/0x6d0 [ 747.913922] ? ___sys_recvmsg+0x200/0x200 [ 747.914504] ? lock_downgrade+0x6d0/0x6d0 [ 747.915105] ? ksys_write+0x12d/0x260 [ 747.915651] ? wait_for_completion_io+0x270/0x270 [ 747.916342] ? rcu_read_lock_any_held+0x75/0xa0 [ 747.917004] ? vfs_write+0x354/0xb10 [ 747.917533] __x64_sys_recvmmsg+0x20f/0x260 [ 747.918137] ? ksys_write+0x1a9/0x260 [ 747.918674] ? __do_sys_socketcall+0x600/0x600 [ 747.919317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 747.920054] ? syscall_enter_from_user_mode+0x1d/0x50 [ 747.920783] do_syscall_64+0x33/0x40 [ 747.921309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 747.922026] RIP: 0033:0x7f9a8d697b19 [ 747.922555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 747.925146] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 747.926221] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 747.927223] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 747.928228] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.929257] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001 [ 747.930258] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 748.037404] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:39:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:39:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:39:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x6, 0x73}, 0x100, './file0\x00'}) ioctl$KDDELIO(r0, 0x4b35, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:39:25 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:39:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 8) 20:39:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:39:25 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:39:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 763.359741] FAULT_INJECTION: forcing a failure. [ 763.359741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.362309] CPU: 0 PID: 6545 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 763.363746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 763.365503] Call Trace: [ 763.366069] dump_stack+0x107/0x167 [ 763.366831] should_fail.cold+0x5/0xa [ 763.367644] _copy_from_user+0x2e/0x1b0 [ 763.368538] __copy_msghdr_from_user+0x91/0x4b0 [ 763.369612] ? __ia32_sys_shutdown+0x80/0x80 [ 763.370576] ? __lock_acquire+0x1657/0x5b00 [ 763.371516] ___sys_recvmsg+0xd5/0x200 [ 763.372349] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 763.373406] ? __fget_files+0x2cf/0x520 [ 763.374253] ? lock_acquire+0x197/0x470 [ 763.375092] ? find_held_lock+0x2c/0x110 [ 763.375958] ? __might_fault+0xd3/0x180 [ 763.376808] ? lock_downgrade+0x6d0/0x6d0 [ 763.377720] do_recvmmsg+0x24c/0x6d0 [ 763.378513] ? ___sys_recvmsg+0x200/0x200 [ 763.379393] ? lock_downgrade+0x6d0/0x6d0 [ 763.380275] ? ksys_write+0x12d/0x260 [ 763.381101] ? wait_for_completion_io+0x270/0x270 [ 763.382120] ? rcu_read_lock_any_held+0x75/0xa0 [ 763.383103] ? vfs_write+0x354/0xb10 [ 763.383897] __x64_sys_recvmmsg+0x20f/0x260 [ 763.384835] ? ksys_write+0x1a9/0x260 [ 763.385642] ? __do_sys_socketcall+0x600/0x600 [ 763.386610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 763.387720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 763.388818] do_syscall_64+0x33/0x40 [ 763.389606] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 763.390690] RIP: 0033:0x7f9a8d697b19 [ 763.391478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 763.395486] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 763.397115] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 763.398635] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 763.400146] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 763.401662] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001 [ 763.403171] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 763.445621] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:39:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:39:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:39:25 executing program 2: r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r4, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 20:39:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:39:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 9) 20:39:25 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:39:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 763.729850] FAULT_INJECTION: forcing a failure. [ 763.729850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.732831] CPU: 0 PID: 6561 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 763.734375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 763.736146] Call Trace: [ 763.736727] dump_stack+0x107/0x167 [ 763.737507] should_fail.cold+0x5/0xa [ 763.738331] _copy_from_user+0x2e/0x1b0 [ 763.739186] __copy_msghdr_from_user+0x91/0x4b0 [ 763.740185] ? __ia32_sys_shutdown+0x80/0x80 [ 763.741129] ? __lock_acquire+0x1657/0x5b00 [ 763.742065] ___sys_recvmsg+0xd5/0x200 [ 763.742896] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 763.743945] ? __fget_files+0x2cf/0x520 [ 763.744803] ? lock_acquire+0x197/0x470 [ 763.745646] ? find_held_lock+0x2c/0x110 [ 763.746518] ? __might_fault+0xd3/0x180 [ 763.747372] ? lock_downgrade+0x6d0/0x6d0 [ 763.748272] do_recvmmsg+0x24c/0x6d0 [ 763.749081] ? ___sys_recvmsg+0x200/0x200 [ 763.749949] ? lock_downgrade+0x6d0/0x6d0 [ 763.750837] ? ksys_write+0x12d/0x260 [ 763.751658] ? wait_for_completion_io+0x270/0x270 [ 763.752688] ? rcu_read_lock_any_held+0x75/0xa0 [ 763.753686] ? vfs_write+0x354/0xb10 [ 763.754479] __x64_sys_recvmmsg+0x20f/0x260 [ 763.755403] ? ksys_write+0x1a9/0x260 [ 763.756217] ? __do_sys_socketcall+0x600/0x600 [ 763.757203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 763.758325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 763.759503] do_syscall_64+0x33/0x40 [ 763.760325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 763.761486] RIP: 0033:0x7f9a8d697b19 [ 763.762323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 763.766483] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 763.768213] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 763.769824] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 763.771451] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 763.773066] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000001 [ 763.774672] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 763.838767] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:39:40 executing program 2: fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x400000, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 20:39:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:39:40 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:39:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:39:40 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 10) 20:39:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:39:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:39:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 778.550312] FAULT_INJECTION: forcing a failure. [ 778.550312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.551964] CPU: 1 PID: 6581 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 778.552913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 778.553847] Call Trace: [ 778.554159] dump_stack+0x107/0x167 [ 778.554667] should_fail.cold+0x5/0xa [ 778.555196] _copy_from_user+0x2e/0x1b0 [ 778.555752] __copy_msghdr_from_user+0x91/0x4b0 [ 778.556400] ? __ia32_sys_shutdown+0x80/0x80 [ 778.557009] ? __lock_acquire+0x1657/0x5b00 [ 778.557617] ___sys_recvmsg+0xd5/0x200 [ 778.558162] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 778.558853] ? __fget_files+0x2cf/0x520 [ 778.559404] ? lock_acquire+0x197/0x470 [ 778.559959] ? find_held_lock+0x2c/0x110 [ 778.560523] ? __might_fault+0xd3/0x180 [ 778.561074] ? lock_downgrade+0x6d0/0x6d0 [ 778.561658] do_recvmmsg+0x24c/0x6d0 [ 778.562179] ? ___sys_recvmsg+0x200/0x200 [ 778.562759] ? lock_downgrade+0x6d0/0x6d0 [ 778.563338] ? ksys_write+0x12d/0x260 [ 778.563872] ? wait_for_completion_io+0x270/0x270 [ 778.564546] ? rcu_read_lock_any_held+0x75/0xa0 [ 778.565196] ? vfs_write+0x354/0xb10 [ 778.565704] __x64_sys_recvmmsg+0x20f/0x260 [ 778.566303] ? ksys_write+0x1a9/0x260 [ 778.566824] ? __do_sys_socketcall+0x600/0x600 [ 778.567461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 778.568183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 778.568903] do_syscall_64+0x33/0x40 [ 778.569418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 778.570124] RIP: 0033:0x7f9a8d697b19 [ 778.570549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 778.573218] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 778.574437] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 778.575469] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 778.576452] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 778.577452] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 778.578452] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 778.602820] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:39:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:39:40 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0x4, 0x4) r3 = dup(r2) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) 20:39:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:39:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:39:40 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 11) 20:39:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:39:40 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:39:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:39:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) [ 778.843472] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 778.853262] FAULT_INJECTION: forcing a failure. [ 778.853262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.855568] CPU: 0 PID: 6605 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 778.856852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 778.858406] Call Trace: [ 778.858897] dump_stack+0x107/0x167 [ 778.859559] should_fail.cold+0x5/0xa [ 778.860263] _copy_from_user+0x2e/0x1b0 [ 778.861126] __copy_msghdr_from_user+0x91/0x4b0 [ 778.861971] ? __ia32_sys_shutdown+0x80/0x80 [ 778.862766] ? __lock_acquire+0x1657/0x5b00 [ 778.863568] ___sys_recvmsg+0xd5/0x200 [ 778.864280] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 778.865200] ? __lockdep_reset_lock+0x180/0x180 [ 778.866054] ? __fget_files+0x2cf/0x520 [ 778.866784] ? lock_acquire+0x197/0x470 [ 778.867513] ? find_held_lock+0x2c/0x110 [ 778.868267] ? __might_fault+0xd3/0x180 [ 778.868998] ? lock_downgrade+0x6d0/0x6d0 [ 778.869781] do_recvmmsg+0x24c/0x6d0 [ 778.870479] ? ___sys_recvmsg+0x200/0x200 [ 778.871234] ? lock_downgrade+0x6d0/0x6d0 [ 778.872004] ? ksys_write+0x12d/0x260 [ 778.872719] ? wait_for_completion_io+0x270/0x270 [ 778.873619] ? rcu_read_lock_any_held+0x75/0xa0 [ 778.874470] ? vfs_write+0x354/0xb10 [ 778.875153] __x64_sys_recvmmsg+0x20f/0x260 [ 778.875941] ? ksys_write+0x1a9/0x260 [ 778.876638] ? __do_sys_socketcall+0x600/0x600 [ 778.877482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 778.878445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 778.879394] do_syscall_64+0x33/0x40 [ 778.880077] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 778.881020] RIP: 0033:0x7f9a8d697b19 [ 778.881698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 778.885075] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 778.886440] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 778.887697] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 778.888966] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 778.890225] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 778.891497] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:39:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 12) 20:39:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:39:54 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x0, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:39:54 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) 20:39:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 20:39:54 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:39:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:39:54 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 792.566063] FAULT_INJECTION: forcing a failure. [ 792.566063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.567918] CPU: 0 PID: 6625 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 792.568997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 792.570283] Call Trace: [ 792.570703] dump_stack+0x107/0x167 [ 792.571274] should_fail.cold+0x5/0xa [ 792.571871] _copy_from_user+0x2e/0x1b0 [ 792.572531] __copy_msghdr_from_user+0x91/0x4b0 [ 792.573256] ? __ia32_sys_shutdown+0x80/0x80 [ 792.573954] ? __lock_acquire+0x1657/0x5b00 [ 792.574615] ___sys_recvmsg+0xd5/0x200 [ 792.575227] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 792.576010] ? __fget_files+0x2cf/0x520 [ 792.576650] ? lock_acquire+0x197/0x470 [ 792.577282] ? find_held_lock+0x2c/0x110 [ 792.577927] ? __might_fault+0xd3/0x180 [ 792.578543] ? lock_downgrade+0x6d0/0x6d0 [ 792.579213] do_recvmmsg+0x24c/0x6d0 [ 792.579799] ? ___sys_recvmsg+0x200/0x200 [ 792.580466] ? lock_downgrade+0x6d0/0x6d0 [ 792.581121] ? ksys_write+0x12d/0x260 [ 792.581733] ? wait_for_completion_io+0x270/0x270 [ 792.582488] ? rcu_read_lock_any_held+0x75/0xa0 [ 792.583231] ? vfs_write+0x354/0xb10 [ 792.583803] __x64_sys_recvmmsg+0x20f/0x260 [ 792.584472] ? ksys_write+0x1a9/0x260 [ 792.585074] ? __do_sys_socketcall+0x600/0x600 [ 792.585782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 792.586609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 792.587408] do_syscall_64+0x33/0x40 [ 792.587996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 792.588804] RIP: 0033:0x7f9a8d697b19 [ 792.589383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.592201] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 792.593380] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 792.594442] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 792.595544] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 792.596666] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 792.597746] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 792.635451] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:39:54 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600), 0x0) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:39:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:39:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 20:39:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x8001, 0x8001, 0x712, 0x2684, 0x8000, 0x6eaf}) 20:39:54 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x0, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:39:54 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:39:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 13) 20:39:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 792.888500] FAULT_INJECTION: forcing a failure. [ 792.888500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.890196] CPU: 0 PID: 6645 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 792.891167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 792.892334] Call Trace: [ 792.892715] dump_stack+0x107/0x167 [ 792.893241] should_fail.cold+0x5/0xa [ 792.893783] _copy_from_user+0x2e/0x1b0 [ 792.894350] __copy_msghdr_from_user+0x91/0x4b0 [ 792.895005] ? __ia32_sys_shutdown+0x80/0x80 [ 792.895622] ? __lock_acquire+0x1657/0x5b00 [ 792.896276] ___sys_recvmsg+0xd5/0x200 [ 792.896823] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 792.897598] ? __fget_files+0x2cf/0x520 [ 792.898163] ? lock_acquire+0x197/0x470 [ 792.898720] ? find_held_lock+0x2c/0x110 [ 792.899292] ? __might_fault+0xd3/0x180 [ 792.899847] ? lock_downgrade+0x6d0/0x6d0 [ 792.900441] do_recvmmsg+0x24c/0x6d0 [ 792.900973] ? ___sys_recvmsg+0x200/0x200 [ 792.901562] ? lock_downgrade+0x6d0/0x6d0 [ 792.902155] ? ksys_write+0x12d/0x260 [ 792.902702] ? wait_for_completion_io+0x270/0x270 [ 792.903382] ? rcu_read_lock_any_held+0x75/0xa0 [ 792.904034] ? vfs_write+0x354/0xb10 [ 792.904557] __x64_sys_recvmmsg+0x20f/0x260 [ 792.905197] ? ksys_write+0x1a9/0x260 [ 792.905727] ? __do_sys_socketcall+0x600/0x600 [ 792.906373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 792.907109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 792.907841] do_syscall_64+0x33/0x40 [ 792.908361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 792.909091] RIP: 0033:0x7f9a8d697b19 [ 792.909608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.912216] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 792.913280] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 792.914278] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 792.915276] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 792.916270] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 792.917282] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:40:08 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) 20:40:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600), 0x0) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:40:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:40:08 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x0, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:40:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 14) 20:40:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:40:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 20:40:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(0x0, 0x0) [ 806.332690] FAULT_INJECTION: forcing a failure. [ 806.332690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.335257] CPU: 1 PID: 6659 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 806.336719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 806.338472] Call Trace: [ 806.339027] dump_stack+0x107/0x167 [ 806.339792] should_fail.cold+0x5/0xa [ 806.340621] _copy_from_user+0x2e/0x1b0 [ 806.341497] __copy_msghdr_from_user+0x91/0x4b0 [ 806.342482] ? __ia32_sys_shutdown+0x80/0x80 [ 806.343419] ? __lock_acquire+0x1657/0x5b00 [ 806.344360] ___sys_recvmsg+0xd5/0x200 [ 806.345208] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 806.346257] ? __fget_files+0x2cf/0x520 [ 806.347116] ? lock_acquire+0x197/0x470 [ 806.347961] ? find_held_lock+0x2c/0x110 [ 806.348836] ? __might_fault+0xd3/0x180 [ 806.349688] ? lock_downgrade+0x6d0/0x6d0 [ 806.350591] do_recvmmsg+0x24c/0x6d0 [ 806.351392] ? ___sys_recvmsg+0x200/0x200 [ 806.352275] ? lock_downgrade+0x6d0/0x6d0 [ 806.353164] ? ksys_write+0x12d/0x260 [ 806.353996] ? wait_for_completion_io+0x270/0x270 [ 806.355022] ? rcu_read_lock_any_held+0x75/0xa0 [ 806.356008] ? vfs_write+0x354/0xb10 [ 806.356807] __x64_sys_recvmmsg+0x20f/0x260 [ 806.357734] ? ksys_write+0x1a9/0x260 [ 806.358758] ? __do_sys_socketcall+0x600/0x600 [ 806.359736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 806.361154] ? syscall_enter_from_user_mode+0x1d/0x50 [ 806.362281] do_syscall_64+0x33/0x40 [ 806.363080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 806.364167] RIP: 0033:0x7f9a8d697b19 [ 806.364958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 806.369299] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 806.370921] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 806.372439] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 806.373960] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 806.375478] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 806.377000] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:40:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(0x0, 0x0) 20:40:08 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) 20:40:08 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x0, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:40:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:40:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x10, r0, 0x0) 20:40:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600), 0x0) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:40:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 15) 20:40:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 806.587334] FAULT_INJECTION: forcing a failure. [ 806.587334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.588714] CPU: 0 PID: 6678 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 806.589507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 806.590696] Call Trace: [ 806.591008] dump_stack+0x107/0x167 [ 806.591430] should_fail.cold+0x5/0xa [ 806.591871] _copy_from_user+0x2e/0x1b0 [ 806.592331] __copy_msghdr_from_user+0x91/0x4b0 [ 806.592863] ? __ia32_sys_shutdown+0x80/0x80 [ 806.593375] ? __lock_acquire+0x1657/0x5b00 [ 806.593881] ___sys_recvmsg+0xd5/0x200 [ 806.594330] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 806.594895] ? __fget_files+0x2cf/0x520 [ 806.595358] ? lock_acquire+0x197/0x470 [ 806.595827] ? find_held_lock+0x2c/0x110 [ 806.596303] ? __might_fault+0xd3/0x180 [ 806.596764] ? lock_downgrade+0x6d0/0x6d0 [ 806.597257] do_recvmmsg+0x24c/0x6d0 [ 806.597696] ? ___sys_recvmsg+0x200/0x200 [ 806.598175] ? lock_downgrade+0x6d0/0x6d0 [ 806.598659] ? ksys_write+0x12d/0x260 [ 806.599101] ? wait_for_completion_io+0x270/0x270 [ 806.599653] ? rcu_read_lock_any_held+0x75/0xa0 [ 806.600187] ? vfs_write+0x354/0xb10 [ 806.600616] __x64_sys_recvmmsg+0x20f/0x260 [ 806.601109] ? ksys_write+0x1a9/0x260 [ 806.601555] ? __do_sys_socketcall+0x600/0x600 [ 806.602081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 806.602677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 806.603271] do_syscall_64+0x33/0x40 [ 806.603703] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 806.604293] RIP: 0033:0x7f9a8d697b19 [ 806.604716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 806.606827] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 806.607711] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 806.608528] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 806.609351] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 806.610164] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 806.610985] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:40:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(0x0, 0x0) 20:40:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xff) r1 = socket$inet(0xa, 0x3, 0xff) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x11, 0x1e, 0x51, &(0x7f00000001c0)="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"}) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000140), 0x4) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="d4819b325449bf4e5f7b756430da927c8a360e543d9501244097925d322ec4298c25c7b4d6b3f4195fa495332cb0bb459b06189ae0e4e1ad8f88fc0e269133d5d4e858dbd96d72e48c7c1575cfdd1f7b133a", 0x52}], 0x1, 0xfffffffb, 0x200, 0x2) dup(r2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000600)=""/4096) 20:40:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:40:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x10, r0, 0x0) 20:40:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:40:21 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x0, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:40:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 16) 20:40:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{0x0}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 819.588581] FAULT_INJECTION: forcing a failure. [ 819.588581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.590232] CPU: 0 PID: 6695 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 819.591203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 819.592261] Call Trace: [ 819.592606] dump_stack+0x107/0x167 [ 819.593080] should_fail.cold+0x5/0xa [ 819.593591] _copy_from_user+0x2e/0x1b0 [ 819.594117] __copy_msghdr_from_user+0x91/0x4b0 [ 819.594716] ? __ia32_sys_shutdown+0x80/0x80 [ 819.595281] ? __lock_acquire+0x1657/0x5b00 [ 819.595841] ___sys_recvmsg+0xd5/0x200 [ 819.596339] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 819.596964] ? __fget_files+0x2cf/0x520 [ 819.597478] ? lock_acquire+0x197/0x470 [ 819.597985] ? find_held_lock+0x2c/0x110 [ 819.598512] ? __might_fault+0xd3/0x180 [ 819.599013] ? lock_downgrade+0x6d0/0x6d0 [ 819.599545] do_recvmmsg+0x24c/0x6d0 [ 819.600016] ? ___sys_recvmsg+0x200/0x200 [ 819.600549] ? lock_downgrade+0x6d0/0x6d0 [ 819.601083] ? ksys_write+0x12d/0x260 [ 819.601584] ? wait_for_completion_io+0x270/0x270 [ 819.602202] ? rcu_read_lock_any_held+0x75/0xa0 [ 819.602791] ? vfs_write+0x354/0xb10 [ 819.603261] __x64_sys_recvmmsg+0x20f/0x260 [ 819.603805] ? ksys_write+0x1a9/0x260 [ 819.604284] ? __do_sys_socketcall+0x600/0x600 [ 819.604876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 819.605543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 819.606200] do_syscall_64+0x33/0x40 [ 819.606673] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 819.607326] RIP: 0033:0x7f9a8d697b19 [ 819.607806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 819.610175] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 819.611160] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 819.612073] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 819.612993] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 819.613914] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 819.614824] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:40:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:40:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="7a971634dc7d38b5fcf7c13dcf6dc2cbb9f12576b1c4a6fb44d50086695131ab") syz_open_pts(r0, 0x4000) r1 = socket$inet(0xa, 0x4, 0xffffffff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x3, 0x7, 0x200, 0xa}) 20:40:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{0x0}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:40:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 17) 20:40:21 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x0, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:40:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:40:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x10, r0, 0x0) 20:40:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 819.862963] FAULT_INJECTION: forcing a failure. [ 819.862963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.866010] CPU: 1 PID: 6714 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 819.867467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 819.869235] Call Trace: [ 819.869817] dump_stack+0x107/0x167 [ 819.870594] should_fail.cold+0x5/0xa [ 819.871520] _copy_from_user+0x2e/0x1b0 [ 819.872679] __copy_msghdr_from_user+0x91/0x4b0 [ 819.873686] ? __ia32_sys_shutdown+0x80/0x80 [ 819.874627] ? __lock_acquire+0x1657/0x5b00 [ 819.875562] ___sys_recvmsg+0xd5/0x200 [ 819.876390] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 819.877446] ? __fget_files+0x2cf/0x520 [ 819.878298] ? lock_acquire+0x197/0x470 [ 819.879143] ? find_held_lock+0x2c/0x110 [ 819.880011] ? __might_fault+0xd3/0x180 [ 819.880857] ? lock_downgrade+0x6d0/0x6d0 [ 819.881769] do_recvmmsg+0x24c/0x6d0 [ 819.882569] ? ___sys_recvmsg+0x200/0x200 [ 819.883449] ? lock_downgrade+0x6d0/0x6d0 [ 819.884338] ? ksys_write+0x12d/0x260 [ 819.885163] ? wait_for_completion_io+0x270/0x270 [ 819.886195] ? rcu_read_lock_any_held+0x75/0xa0 [ 819.887180] ? vfs_write+0x354/0xb10 [ 819.887973] __x64_sys_recvmmsg+0x20f/0x260 [ 819.888876] ? ksys_write+0x1a9/0x260 [ 819.889696] ? __do_sys_socketcall+0x600/0x600 [ 819.890674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 819.891799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 819.892899] do_syscall_64+0x33/0x40 [ 819.893695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 819.894783] RIP: 0033:0x7f9a8d697b19 [ 819.895569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 819.899483] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 819.901101] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 819.902623] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 819.904138] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 819.905664] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 819.907178] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:40:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:40:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:40:36 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 18) 20:40:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{0x0}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:40:36 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x40) 20:40:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) 20:40:36 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:40:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 834.423851] FAULT_INJECTION: forcing a failure. [ 834.423851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.427170] CPU: 0 PID: 6735 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 834.429006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 834.431144] Call Trace: [ 834.431815] dump_stack+0x107/0x167 [ 834.432770] should_fail.cold+0x5/0xa [ 834.433776] _copy_from_user+0x2e/0x1b0 [ 834.434804] __copy_msghdr_from_user+0x91/0x4b0 [ 834.436035] ? __ia32_sys_shutdown+0x80/0x80 [ 834.437164] ? __lock_acquire+0x1657/0x5b00 [ 834.438305] ___sys_recvmsg+0xd5/0x200 [ 834.439298] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 834.439325] ? __fget_files+0x2cf/0x520 [ 834.441359] ? lock_acquire+0x197/0x470 [ 834.442383] ? find_held_lock+0x2c/0x110 [ 834.443419] ? __might_fault+0xd3/0x180 [ 834.444435] ? lock_downgrade+0x6d0/0x6d0 [ 834.445523] do_recvmmsg+0x24c/0x6d0 [ 834.446482] ? ___sys_recvmsg+0x200/0x200 [ 834.447536] ? lock_downgrade+0x6d0/0x6d0 [ 834.448611] ? ksys_write+0x12d/0x260 [ 834.449611] ? wait_for_completion_io+0x270/0x270 [ 834.450828] ? rcu_read_lock_any_held+0x75/0xa0 [ 834.452020] ? vfs_write+0x354/0xb10 [ 834.452974] __x64_sys_recvmmsg+0x20f/0x260 [ 834.454155] ? ksys_write+0x1a9/0x260 [ 834.454978] ? __do_sys_socketcall+0x600/0x600 [ 834.455803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 834.456742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 834.457690] do_syscall_64+0x33/0x40 [ 834.458391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 834.459341] RIP: 0033:0x7f9a8d697b19 [ 834.460016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.463385] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 834.464769] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 834.466080] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 834.467492] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 834.468826] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 834.470185] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:40:36 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) 20:40:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:40:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:40:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) 20:40:36 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:40:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() clone3(&(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0], 0x1}, 0x58) 20:40:36 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 19) 20:40:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 834.814703] FAULT_INJECTION: forcing a failure. [ 834.814703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.817557] CPU: 1 PID: 6757 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 834.819160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 834.821086] Call Trace: [ 834.821715] dump_stack+0x107/0x167 [ 834.822564] should_fail.cold+0x5/0xa [ 834.823457] _copy_from_user+0x2e/0x1b0 [ 834.824397] __copy_msghdr_from_user+0x91/0x4b0 [ 834.825490] ? __ia32_sys_shutdown+0x80/0x80 [ 834.826531] ? __lock_acquire+0x1657/0x5b00 [ 834.827565] ___sys_recvmsg+0xd5/0x200 [ 834.828475] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 834.829629] ? __fget_files+0x2cf/0x520 [ 834.830569] ? lock_acquire+0x197/0x470 [ 834.831500] ? find_held_lock+0x2c/0x110 [ 834.832463] ? __might_fault+0xd3/0x180 [ 834.833398] ? lock_downgrade+0x6d0/0x6d0 [ 834.834397] do_recvmmsg+0x24c/0x6d0 [ 834.835276] ? ___sys_recvmsg+0x200/0x200 [ 834.836248] ? lock_downgrade+0x6d0/0x6d0 [ 834.837245] ? ksys_write+0x12d/0x260 [ 834.838158] ? wait_for_completion_io+0x270/0x270 [ 834.839289] ? rcu_read_lock_any_held+0x75/0xa0 [ 834.840377] ? vfs_write+0x354/0xb10 [ 834.841250] __x64_sys_recvmmsg+0x20f/0x260 [ 834.842273] ? ksys_write+0x1a9/0x260 [ 834.843179] ? __do_sys_socketcall+0x600/0x600 [ 834.844265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 834.845501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 834.846745] do_syscall_64+0x33/0x40 [ 834.847627] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 834.848842] RIP: 0033:0x7f9a8d697b19 [ 834.849734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.854092] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 834.855900] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 834.857590] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 834.859285] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 834.860982] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 834.862700] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:40:52 executing program 0: setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:40:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0x2) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000480)={0x0, 0xd47, @start={0x0, 0x0, "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", "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"}, [0x7f, 0x2, 0x9, 0x9, 0x7fff, 0x5, 0x5, 0x86, 0x3ff, 0x2, 0x7, 0x80000001, 0x1, 0x7, 0x0, 0x401, 0x400, 0xf1, 0xfffffffffffffbff, 0x5, 0x3, 0x5f67, 0x9, 0x2, 0x20, 0x3, 0xffffffff, 0x0, 0xfffffffffffffffe, 0x1, 0xffff, 0x42, 0x3, 0x200, 0x3, 0x3, 0x8, 0xd894, 0x8001, 0x0, 0x2, 0x200, 0x3ff, 0x3, 0x8, 0xfffffffffffffffc, 0x513be588, 0x2, 0x7876, 0xa5, 0x3, 0x2, 0x3, 0x43f, 0x7, 0x7ff, 0x7, 0x4, 0x100000001, 0x9, 0x3, 0x6, 0xe7, 0x401]}) r1 = dup3(r0, r0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x10, 0x12f}) 20:40:52 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:40:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:40:52 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:40:52 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:40:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) 20:40:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 20) 20:40:52 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 850.255211] FAULT_INJECTION: forcing a failure. [ 850.255211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.258201] CPU: 1 PID: 6773 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 850.259932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 850.262035] Call Trace: [ 850.262708] dump_stack+0x107/0x167 [ 850.263636] should_fail.cold+0x5/0xa [ 850.264603] _copy_from_user+0x2e/0x1b0 [ 850.265629] __copy_msghdr_from_user+0x91/0x4b0 [ 850.266828] ? __ia32_sys_shutdown+0x80/0x80 [ 850.267953] ? __lock_acquire+0x1657/0x5b00 [ 850.269071] ___sys_recvmsg+0xd5/0x200 [ 850.270074] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 850.271446] ? __fget_files+0x2cf/0x520 [ 850.272685] ? lock_acquire+0x197/0x470 [ 850.273711] ? find_held_lock+0x2c/0x110 [ 850.274761] ? __might_fault+0xd3/0x180 [ 850.275762] ? lock_downgrade+0x6d0/0x6d0 [ 850.276846] do_recvmmsg+0x24c/0x6d0 [ 850.277821] ? ___sys_recvmsg+0x200/0x200 [ 850.278710] ? lock_downgrade+0x6d0/0x6d0 [ 850.279596] ? ksys_write+0x12d/0x260 [ 850.280413] ? wait_for_completion_io+0x270/0x270 [ 850.281433] ? rcu_read_lock_any_held+0x75/0xa0 [ 850.282419] ? vfs_write+0x354/0xb10 [ 850.283208] __x64_sys_recvmmsg+0x20f/0x260 [ 850.284124] ? ksys_write+0x1a9/0x260 [ 850.284930] ? __do_sys_socketcall+0x600/0x600 [ 850.285913] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 850.287029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 850.288125] do_syscall_64+0x33/0x40 [ 850.288910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 850.290004] RIP: 0033:0x7f9a8d697b19 [ 850.290786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 850.294708] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 850.296317] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 850.297827] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 850.299334] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 850.300834] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 850.302343] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:40:52 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) r2 = getpid() r3 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x28c001, 0xe2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x7) clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2], 0x1}, 0x58) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x2, 0xe2, 0x4, 0x0, 0xc9, 0x20, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x1140, 0x9, 0x4, 0x9, 0x40, 0x93, 0x200, 0x0, 0x44de, 0x0, 0x12}, r2, 0x7, r1, 0x2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x3e, &(0x7f0000000040), 0xffffffc1) dup(r1) 20:40:52 executing program 0: setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:40:52 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:40:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:41:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:41:06 executing program 0: setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:41:06 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:41:06 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:41:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 21) 20:41:06 executing program 2: fsmount(0xffffffffffffffff, 0x1, 0x9) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x5, 0x7, 0xc0, 0x8000, 0x5, "37920818ffac3a5c"}) ioctl$KDDELIO(r0, 0x4b35, 0x100000000) 20:41:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:41:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 864.110737] FAULT_INJECTION: forcing a failure. [ 864.110737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.113631] CPU: 0 PID: 6809 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 864.115305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.117215] Call Trace: [ 864.117825] dump_stack+0x107/0x167 [ 864.118691] should_fail.cold+0x5/0xa [ 864.119587] _copy_from_user+0x2e/0x1b0 [ 864.120532] __copy_msghdr_from_user+0x91/0x4b0 [ 864.121596] ? __ia32_sys_shutdown+0x80/0x80 [ 864.122627] ? __lock_acquire+0x1657/0x5b00 [ 864.123644] ___sys_recvmsg+0xd5/0x200 [ 864.124564] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 864.125688] ? __lockdep_reset_lock+0x180/0x180 [ 864.126748] ? __fget_files+0x2cf/0x520 [ 864.127680] ? lock_acquire+0x197/0x470 [ 864.128725] ? find_held_lock+0x2c/0x110 [ 864.129674] ? __might_fault+0xd3/0x180 [ 864.130607] ? lock_downgrade+0x6d0/0x6d0 [ 864.131591] do_recvmmsg+0x24c/0x6d0 [ 864.132480] ? ___sys_recvmsg+0x200/0x200 [ 864.133439] ? lock_downgrade+0x6d0/0x6d0 20:41:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 864.134421] ? ksys_write+0x12d/0x260 [ 864.135454] ? wait_for_completion_io+0x270/0x270 [ 864.136565] ? rcu_read_lock_any_held+0x75/0xa0 [ 864.137622] ? vfs_write+0x354/0xb10 [ 864.138525] __x64_sys_recvmmsg+0x20f/0x260 [ 864.139509] ? ksys_write+0x1a9/0x260 [ 864.140425] ? __do_sys_socketcall+0x600/0x600 [ 864.141514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 864.142768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.144002] do_syscall_64+0x33/0x40 [ 864.144874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 864.146132] RIP: 0033:0x7f9a8d697b19 [ 864.147015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.151390] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 864.153199] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 864.155157] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 864.156990] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.158720] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 864.160247] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:41:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 20:41:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:41:06 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:41:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:41:06 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:41:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 22) 20:41:06 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) [ 864.345341] FAULT_INJECTION: forcing a failure. [ 864.345341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.346766] CPU: 1 PID: 6824 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 864.347546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.348512] Call Trace: [ 864.348828] dump_stack+0x107/0x167 [ 864.349259] should_fail.cold+0x5/0xa [ 864.349710] _copy_from_user+0x2e/0x1b0 [ 864.350189] copy_clone_args_from_user+0x147/0x790 [ 864.350767] ? lock_acquire+0x197/0x470 [ 864.351221] ? sighand_ctor+0x40/0x40 [ 864.351675] ? find_held_lock+0x2c/0x110 [ 864.352145] ? ksys_write+0x21a/0x260 [ 864.352588] ? lock_downgrade+0x6d0/0x6d0 [ 864.353064] __do_sys_clone3+0x9d/0x320 [ 864.353534] ? __do_sys_clone+0x110/0x110 [ 864.354020] ? __mutex_unlock_slowpath+0xe1/0x600 [ 864.354583] ? wait_for_completion_io+0x270/0x270 [ 864.355144] ? rcu_read_lock_any_held+0x75/0xa0 [ 864.355681] ? vfs_write+0x354/0xb10 [ 864.356112] ? fput_many+0x2f/0x1a0 [ 864.356539] ? ksys_write+0x1a9/0x260 [ 864.356982] ? __ia32_sys_read+0xb0/0xb0 [ 864.357458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 864.358088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.358680] ? trace_hardirqs_on+0x5b/0x180 [ 864.359170] do_syscall_64+0x33/0x40 [ 864.359604] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 864.360198] RIP: 0033:0x7f61f1b9eb19 [ 864.360633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.362769] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 864.363651] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 864.364477] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 864.365304] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.366152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.366992] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:41:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) (fail_nth: 1) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:41:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 20:41:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:41:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:41:06 executing program 2: syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x10000000) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r5) syz_io_uring_submit(r0, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5, 0x1, 0x0, 0x7fff, 0x3, 0x1}, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 864.465566] FAULT_INJECTION: forcing a failure. [ 864.465566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.466992] CPU: 1 PID: 6837 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 864.467791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.468761] Call Trace: [ 864.469077] dump_stack+0x107/0x167 [ 864.469495] should_fail.cold+0x5/0xa [ 864.469954] _copy_from_user+0x2e/0x1b0 [ 864.470431] __copy_msghdr_from_user+0x91/0x4b0 [ 864.470975] ? __ia32_sys_shutdown+0x80/0x80 [ 864.471491] ? __lock_acquire+0x1657/0x5b00 [ 864.472003] ___sys_recvmsg+0xd5/0x200 [ 864.472457] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 864.473032] ? __fget_files+0x2cf/0x520 [ 864.473505] ? lock_acquire+0x197/0x470 [ 864.473983] ? find_held_lock+0x2c/0x110 [ 864.474451] ? __might_fault+0xd3/0x180 [ 864.474921] ? lock_downgrade+0x6d0/0x6d0 [ 864.475407] do_recvmmsg+0x24c/0x6d0 [ 864.475846] ? ___sys_recvmsg+0x200/0x200 [ 864.476329] ? lock_downgrade+0x6d0/0x6d0 [ 864.476823] ? ksys_write+0x12d/0x260 [ 864.477276] ? wait_for_completion_io+0x270/0x270 [ 864.477850] ? rcu_read_lock_any_held+0x75/0xa0 [ 864.478392] ? vfs_write+0x354/0xb10 [ 864.478832] __x64_sys_recvmmsg+0x20f/0x260 [ 864.479335] ? ksys_write+0x1a9/0x260 [ 864.479780] ? __do_sys_socketcall+0x600/0x600 [ 864.480318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 864.480940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.481547] do_syscall_64+0x33/0x40 [ 864.481989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 864.482594] RIP: 0033:0x7f9a8d697b19 [ 864.483029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.485340] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 864.486465] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 864.487469] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 864.488302] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.489137] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 864.489973] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:41:06 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 864.596118] FAULT_INJECTION: forcing a failure. [ 864.596118] name failslab, interval 1, probability 0, space 0, times 0 [ 864.597471] CPU: 1 PID: 6841 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 864.598290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.599279] Call Trace: [ 864.599599] dump_stack+0x107/0x167 [ 864.600033] should_fail.cold+0x5/0xa [ 864.600470] ? copy_process+0x3301/0x78b0 [ 864.601133] should_failslab+0x5/0x20 [ 864.601568] kmem_cache_alloc_node+0x55/0x330 [ 864.602115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 864.602926] copy_process+0x3301/0x78b0 [ 864.603526] ? SOFTIRQ_verbose+0x10/0x10 [ 864.603991] ? mark_lock+0xf5/0x2df0 [ 864.604440] ? lock_acquire+0x197/0x470 [ 864.604940] ? find_held_lock+0x2c/0x110 [ 864.605554] ? __cleanup_sighand+0xb0/0xb0 [ 864.606226] ? _copy_from_user+0xfb/0x1b0 [ 864.606883] kernel_clone+0xe7/0x980 [ 864.607348] ? lock_acquire+0x197/0x470 [ 864.607824] ? create_io_thread+0xf0/0xf0 [ 864.608327] ? ksys_write+0x21a/0x260 [ 864.608778] ? lock_downgrade+0x6d0/0x6d0 [ 864.609273] __do_sys_clone3+0x1e5/0x320 [ 864.609755] ? __do_sys_clone+0x110/0x110 [ 864.610276] ? rcu_read_lock_any_held+0x75/0xa0 [ 864.610827] ? vfs_write+0x354/0xb10 [ 864.611271] ? fput_many+0x2f/0x1a0 [ 864.611704] ? ksys_write+0x1a9/0x260 [ 864.612158] ? __ia32_sys_read+0xb0/0xb0 [ 864.612644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 864.613272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.613887] ? trace_hardirqs_on+0x5b/0x180 [ 864.614403] do_syscall_64+0x33/0x40 [ 864.614991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 864.615722] RIP: 0033:0x7f61f1b9eb19 [ 864.616289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.618827] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 864.619927] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 864.620913] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 864.621949] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.622942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.623924] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:41:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/85}) 20:41:18 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:41:18 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:41:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r1, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:41:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:41:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 20:41:18 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:41:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 23) 20:41:19 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0xa, 0x800, 0x7) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) dup(r1) ioctl$KDDELIO(r1, 0x4b35, 0xb8e) [ 877.041981] FAULT_INJECTION: forcing a failure. [ 877.041981] name failslab, interval 1, probability 0, space 0, times 0 [ 877.044434] CPU: 1 PID: 6867 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 877.045867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.047624] Call Trace: [ 877.048179] dump_stack+0x107/0x167 [ 877.048949] should_fail.cold+0x5/0xa [ 877.049754] ? create_object.isra.0+0x3a/0xa20 [ 877.050722] should_failslab+0x5/0x20 [ 877.051516] kmem_cache_alloc+0x5b/0x310 [ 877.052382] create_object.isra.0+0x3a/0xa20 [ 877.053304] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 877.054400] kmem_cache_alloc_node+0x169/0x330 [ 877.055357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.056462] copy_process+0x3301/0x78b0 [ 877.057300] ? SOFTIRQ_verbose+0x10/0x10 [ 877.058165] ? mark_lock+0xf5/0x2df0 [ 877.058956] ? lock_acquire+0x197/0x470 [ 877.059805] ? find_held_lock+0x2c/0x110 [ 877.060677] ? __cleanup_sighand+0xb0/0xb0 [ 877.061598] ? _copy_from_user+0xfb/0x1b0 [ 877.062497] kernel_clone+0xe7/0x980 [ 877.063280] ? lock_acquire+0x197/0x470 [ 877.064111] ? create_io_thread+0xf0/0xf0 [ 877.064995] ? ksys_write+0x21a/0x260 [ 877.065808] ? lock_downgrade+0x6d0/0x6d0 [ 877.066689] __do_sys_clone3+0x1e5/0x320 [ 877.067543] ? __do_sys_clone+0x110/0x110 [ 877.068440] ? rcu_read_lock_any_held+0x75/0xa0 [ 877.069420] ? vfs_write+0x354/0xb10 [ 877.070216] ? fput_many+0x2f/0x1a0 [ 877.070988] ? ksys_write+0x1a9/0x260 [ 877.071798] ? __ia32_sys_read+0xb0/0xb0 [ 877.072661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.073767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 877.074856] ? trace_hardirqs_on+0x5b/0x180 [ 877.075974] do_syscall_64+0x33/0x40 [ 877.076870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 877.078090] RIP: 0033:0x7f61f1b9eb19 [ 877.078868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.082973] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 877.084581] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 877.086078] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 877.087571] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 877.089057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.090562] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 [ 877.105419] FAULT_INJECTION: forcing a failure. [ 877.105419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.107984] CPU: 1 PID: 6869 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 877.109410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.111152] Call Trace: [ 877.111697] dump_stack+0x107/0x167 [ 877.112462] should_fail.cold+0x5/0xa [ 877.113264] _copy_from_user+0x2e/0x1b0 [ 877.114120] __copy_msghdr_from_user+0x91/0x4b0 [ 877.115092] ? __ia32_sys_shutdown+0x80/0x80 [ 877.116017] ? __lock_acquire+0x1657/0x5b00 [ 877.116947] ___sys_recvmsg+0xd5/0x200 [ 877.117761] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 877.118808] ? trace_hardirqs_on+0x5b/0x180 [ 877.119724] ? lock_acquire+0x197/0x470 [ 877.120566] ? find_held_lock+0x2c/0x110 [ 877.121426] ? __might_fault+0xd3/0x180 [ 877.122278] ? lock_downgrade+0x6d0/0x6d0 [ 877.123181] do_recvmmsg+0x24c/0x6d0 [ 877.123977] ? ___sys_recvmsg+0x200/0x200 [ 877.124855] ? lock_downgrade+0x6d0/0x6d0 [ 877.125745] ? ksys_write+0x12d/0x260 [ 877.126572] ? wait_for_completion_io+0x270/0x270 [ 877.127593] ? rcu_read_lock_any_held+0x75/0xa0 [ 877.128577] ? vfs_write+0x354/0xb10 [ 877.129368] __x64_sys_recvmmsg+0x20f/0x260 [ 877.130291] ? ksys_write+0x1a9/0x260 [ 877.131101] ? __do_sys_socketcall+0x600/0x600 [ 877.132077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.133189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 877.134284] do_syscall_64+0x33/0x40 [ 877.135078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 877.136160] RIP: 0033:0x7f9a8d697b19 [ 877.136948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.140858] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 877.142484] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 877.143991] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 877.145505] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 877.147021] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 877.148545] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:41:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r1, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:41:19 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:41:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x24, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:41:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 20:41:32 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) ppoll(&(0x7f0000000340)=[{r7, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r5}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:41:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r1, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:41:32 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x106) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = eventfd(0x800) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000000c0)={0x3, 0xf9}) r3 = dup(r1) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r5) sendto$inet6(r5, &(0x7f0000000100)="050904f159caa2c5c2c2fe699c63f0214383456c8302dce7fc1d714a4c695214d961c4c8c841506755198ff7f686971e0906a5689e415b0b74525687663e9e98a9154d983e6aa7aee2c2e0e6057444a27e24", 0x52, 0x20000800, &(0x7f00000001c0)={0xa, 0x4e20, 0x401, @loopback, 0x1000}, 0x1c) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x6, 0x100, 0x4, 0x6, 0x3f, 0xc3b2}) r6 = socket$inet(0xa, 0x3, 0xff) dup(r6) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='-\x00', 0x0, r6) 20:41:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 24) 20:41:32 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:41:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:41:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x1000000, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 890.891188] FAULT_INJECTION: forcing a failure. [ 890.891188] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 890.894864] CPU: 0 PID: 6901 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 890.896837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 890.899200] Call Trace: [ 890.899937] dump_stack+0x107/0x167 [ 890.900966] should_fail.cold+0x5/0xa [ 890.902031] __alloc_pages_nodemask+0x182/0x600 [ 890.903331] ? lock_downgrade+0x6d0/0x6d0 [ 890.904463] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 890.906132] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 890.907690] ? kmem_cache_alloc_node+0x2bc/0x330 [ 890.909014] copy_process+0x62b/0x78b0 [ 890.910089] ? SOFTIRQ_verbose+0x10/0x10 [ 890.911265] ? lock_acquire+0x197/0x470 [ 890.911971] FAULT_INJECTION: forcing a failure. [ 890.911971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.912358] ? find_held_lock+0x2c/0x110 [ 890.912418] ? __cleanup_sighand+0xb0/0xb0 [ 890.916158] ? _copy_from_user+0xfb/0x1b0 [ 890.917328] kernel_clone+0xe7/0x980 [ 890.918388] ? lock_acquire+0x197/0x470 [ 890.919353] ? create_io_thread+0xf0/0xf0 [ 890.920316] ? ksys_write+0x21a/0x260 [ 890.921190] ? lock_downgrade+0x6d0/0x6d0 [ 890.922133] __do_sys_clone3+0x1e5/0x320 [ 890.923124] ? __do_sys_clone+0x110/0x110 [ 890.924151] ? rcu_read_lock_any_held+0x75/0xa0 [ 890.925179] ? vfs_write+0x354/0xb10 [ 890.926038] ? fput_many+0x2f/0x1a0 [ 890.926894] ? ksys_write+0x1a9/0x260 [ 890.927744] ? __ia32_sys_read+0xb0/0xb0 [ 890.928676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 890.929944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 890.931131] ? trace_hardirqs_on+0x5b/0x180 [ 890.932146] do_syscall_64+0x33/0x40 [ 890.933010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 890.934256] RIP: 0033:0x7f61f1b9eb19 [ 890.935103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.939353] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 890.941116] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 890.942746] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 890.944404] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.946020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.947636] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 [ 890.949312] CPU: 1 PID: 6900 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 890.950267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 890.951247] Call Trace: [ 890.951580] dump_stack+0x107/0x167 [ 890.952031] should_fail.cold+0x5/0xa [ 890.952488] _copy_from_user+0x2e/0x1b0 [ 890.952966] __copy_msghdr_from_user+0x91/0x4b0 [ 890.953536] ? __ia32_sys_shutdown+0x80/0x80 [ 890.954052] ? __lock_acquire+0x1657/0x5b00 [ 890.954588] ___sys_recvmsg+0xd5/0x200 [ 890.955048] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 890.955656] ? __fget_files+0x2cf/0x520 [ 890.956135] ? lock_acquire+0x197/0x470 [ 890.956620] ? find_held_lock+0x2c/0x110 [ 890.957107] ? __might_fault+0xd3/0x180 [ 890.957593] ? lock_downgrade+0x6d0/0x6d0 [ 890.958093] do_recvmmsg+0x24c/0x6d0 [ 890.958546] ? ___sys_recvmsg+0x200/0x200 [ 890.959057] ? lock_downgrade+0x6d0/0x6d0 [ 890.959554] ? ksys_write+0x12d/0x260 [ 890.960035] ? wait_for_completion_io+0x270/0x270 [ 890.960602] ? rcu_read_lock_any_held+0x75/0xa0 [ 890.961175] ? vfs_write+0x354/0xb10 [ 890.961653] __x64_sys_recvmmsg+0x20f/0x260 [ 890.962173] ? ksys_write+0x1a9/0x260 [ 890.962642] ? __do_sys_socketcall+0x600/0x600 [ 890.963179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 890.963826] ? syscall_enter_from_user_mode+0x1d/0x50 [ 890.964444] do_syscall_64+0x33/0x40 [ 890.964902] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 890.965501] RIP: 0033:0x7f9a8d697b19 [ 890.965963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.968117] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 890.969053] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 890.969936] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 890.970834] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.971704] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 890.972589] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:41:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:41:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 25) 20:41:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x20000261, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:41:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:41:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup(0xffffffffffffffff) r1 = signalfd(r0, &(0x7f0000000740)={[0x2]}, 0x8) r2 = inotify_init1(0x800) r3 = socket$inet(0xa, 0x3, 0xff) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r4) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001980)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r8 = socket$inet(0xa, 0x3, 0xff) r9 = dup(r8) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000000180), 0x4) r10 = dup(r9) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) io_submit(0x0, 0x8, &(0x7f0000002a80)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0xa, 0x20, 0xffffffffffffffff, &(0x7f0000000480)="b434ed2f5c8114472392893d7eba94aabb69f8f226623b6b0259a1fbc60fb09890ecf7f9301ec749050e246f47cd851e6b5fef1b37b7aebcb17937ea1922fd867ebfc7c7719819229fc6884603557a0e7cdbd70f90314e6b0e227574c8cdd6a2d30c3bcfbb7158ada612066c13dbf61e57d0cfea04994e3b0c1768dbf902510fc9990521fa0073205a48ecf807e723106568c5b2446eb4878f6f2cbafcdca06aed85234af2e85597915836c770aa3b2b04f3a8aace998b63a466aeed7ea04f336f5a4d60b1867cbdd68af93861b934c154f0a7a15b6662e9b8ffa0051fcb0db680732527802bf92c90bf0b5ac830217833428cb4759a839bc9df17", 0xfb, 0x13e8, 0x0, 0x4}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x800, r0, &(0x7f00000005c0)="162595deac960884fdb229683afdd09d72caf09ac8d667a5d5b6eb6a02c65b9475972f294ec131f0187a6735050bb906e9e9e0e92c705dc428b6f4e62314c93de6fc8822ff5a3656d62dc6a2605f859f3d7776b25d58efd770b6387be0d225e127970d4fa51128a9fd3f1ff3d22a34bad0ab348a5a50d2f27fb3acba62e2cd02e01f5c8ce9a34ab18fdb7d1ce8ce739951dff6a3", 0x94, 0xffffffff}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f00000006c0)="9e32d2431e82791616b6700fc9157e1e6bafd18309933f6879b83934572bb425e0480a017d2707606a3b13f592ef2eea0140ee9764a7ab6d37ee5f5b3a6095efd7", 0x41, 0x9, 0x0, 0x3, r1}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f00000007c0)="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", 0x1000, 0x4, 0x0, 0x1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x27deffb8ae5d4886, 0x2, r0, &(0x7f0000001800)="2de1e2e0bab5ffbd90c833ab72", 0xd, 0x81, 0x0, 0x1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f0000001880)="472c95075ab8f659e120debead2bc3ca3b6223e86e2377d361eeee55fc132e303665db8225865147f4d42ba2750b8c", 0x2f, 0x5, 0x0, 0x2, r4}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x9, r6, &(0x7f0000001900)="b692e7837d7e5418911bba34a2fea8517c1c5f52083cd8917989c1a56479adfe013dff566ba843671bca0517a3e61ed0aaf6679095525281974acb221a77e988f277c6699e3f17c6b9d99feb", 0x4c, 0x9, 0x0, 0x2, r7}, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x2, 0x4f, r10, &(0x7f0000001a00)="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", 0x1000, 0x0, 0x0, 0x0, r11}]) 20:41:33 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:41:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) 20:41:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 891.179672] FAULT_INJECTION: forcing a failure. [ 891.179672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.181267] CPU: 1 PID: 6915 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 891.182317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 891.183319] Call Trace: [ 891.183636] dump_stack+0x107/0x167 [ 891.184064] should_fail.cold+0x5/0xa [ 891.184518] _copy_from_user+0x2e/0x1b0 [ 891.184993] __copy_msghdr_from_user+0x91/0x4b0 [ 891.185537] ? __ia32_sys_shutdown+0x80/0x80 [ 891.186053] ? __lock_acquire+0x1657/0x5b00 [ 891.186550] ___sys_recvmsg+0xd5/0x200 [ 891.187008] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 891.187552] ? __fget_files+0x2cf/0x520 [ 891.188021] ? lock_acquire+0x197/0x470 [ 891.188457] ? find_held_lock+0x2c/0x110 [ 891.188938] ? __might_fault+0xd3/0x180 [ 891.189375] ? lock_downgrade+0x6d0/0x6d0 [ 891.189870] do_recvmmsg+0x24c/0x6d0 [ 891.190297] ? ___sys_recvmsg+0x200/0x200 [ 891.190786] ? lock_downgrade+0x6d0/0x6d0 [ 891.191249] ? ksys_write+0x12d/0x260 [ 891.191701] ? wait_for_completion_io+0x270/0x270 [ 891.192235] ? rcu_read_lock_any_held+0x75/0xa0 [ 891.192777] ? vfs_write+0x354/0xb10 [ 891.193187] __x64_sys_recvmmsg+0x20f/0x260 [ 891.193656] ? ksys_write+0x1a9/0x260 [ 891.194099] ? __do_sys_socketcall+0x600/0x600 [ 891.194606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.195182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 891.195747] do_syscall_64+0x33/0x40 [ 891.196181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 891.196739] RIP: 0033:0x7f9a8d697b19 [ 891.197175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.199187] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 891.200014] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 891.200793] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 891.201568] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 891.202350] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 891.203125] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 891.369583] FAULT_INJECTION: forcing a failure. [ 891.369583] name failslab, interval 1, probability 0, space 0, times 0 [ 891.372122] CPU: 0 PID: 6931 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 891.373512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 891.375217] Call Trace: [ 891.375766] dump_stack+0x107/0x167 [ 891.376517] should_fail.cold+0x5/0xa [ 891.377307] ? prepare_creds+0x25/0x5e0 [ 891.378113] should_failslab+0x5/0x20 [ 891.378923] kmem_cache_alloc+0x5b/0x310 [ 891.379745] ? lock_downgrade+0x6d0/0x6d0 [ 891.380596] prepare_creds+0x25/0x5e0 [ 891.381353] copy_creds+0x72/0x580 [ 891.382093] copy_process+0xfef/0x78b0 [ 891.382890] ? SOFTIRQ_verbose+0x10/0x10 [ 891.383745] ? lock_acquire+0x197/0x470 [ 891.384524] ? find_held_lock+0x2c/0x110 [ 891.385368] ? __cleanup_sighand+0xb0/0xb0 [ 891.386277] ? _copy_from_user+0xfb/0x1b0 [ 891.387136] kernel_clone+0xe7/0x980 [ 891.387872] ? lock_acquire+0x197/0x470 [ 891.388682] ? create_io_thread+0xf0/0xf0 [ 891.389547] ? ksys_write+0x21a/0x260 [ 891.390353] ? lock_downgrade+0x6d0/0x6d0 [ 891.391202] __do_sys_clone3+0x1e5/0x320 [ 891.392029] ? __do_sys_clone+0x110/0x110 [ 891.392906] ? rcu_read_lock_any_held+0x75/0xa0 [ 891.393845] ? vfs_write+0x354/0xb10 [ 891.394643] ? fput_many+0x2f/0x1a0 [ 891.395381] ? ksys_write+0x1a9/0x260 [ 891.396147] ? __ia32_sys_read+0xb0/0xb0 [ 891.397100] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.398192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 891.399253] ? trace_hardirqs_on+0x5b/0x180 [ 891.400143] do_syscall_64+0x33/0x40 [ 891.400897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 891.401942] RIP: 0033:0x7f61f1b9eb19 [ 891.402715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.406435] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 891.407957] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 891.409388] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 891.410856] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 891.412271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.413699] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:41:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 26) 20:41:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:41:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) 20:41:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:41:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 20:41:47 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:41:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x2) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:41:47 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="40000002b223eb149af3eae03c6537b8404b1f658bd20b8148f35a2975d29edaca35e35fc34c756044ed07e29bc3ab0709db0198bcf7b0d22cf23a9955c68e684a751e4e547673cd173c3aebedb4ac4f16be2cfd3a6d9bf62266ec2b37e46239463f8ab681b932e8100cf3e71d43faa11a37683a711fc6ea32b6e1", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf252a00000008000200", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="05003700020000000a0001007770616e3000000006000400feff0000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x9201) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000cc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000001780)={0xd84, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_PROBE_RESP={0x754, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x1a4, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x81}, @device_b, @broadcast, @random="48a687045d9d", {0x4}}, 0x7, @random=0x2, 0x93011c217ba390e3, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0xf4}, {0x18}, {0x3, 0x1}, {0x5}, {0x12}, {0x6c, 0x1}, {0xc}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0xb5, 0x6c}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0xe0, 0x20}}, @val={0x76, 0x6, {0x8, 0x0, 0x2, 0xd46}}, [{0xdd, 0xd3, "cfd7eeae5a474544de4d2a733eb1231159eb64ad1056fb8040b24aabb282ea9a8d111cb7e3afa453b154fbe4de9efe84698846c352f822509fd287c23208cfc1a84ab5cfa2d787b4d572ea3cb384c58ccd9db72586223a8db04d6bb9270a035f84520cc7a8cb59f9cf5a7af1a385467e70efa1f776141fe76522bfd2ebe904eb315ba98afeb9d3c8a2f1bb7fc7d21e677da766da1027f0d804b282fa7410e18992e370ba2a4eef8b3470e09a157452cf045778162bd9970488ed20e1545efd1d959f525e1761285d9795a9065f9434a22c9e99"}, {0xdd, 0x76, "b7a5bddadfda7b69943632ae6cb3ec90272b6f24680ed235938ec8ce7a5e74453535a9f4a6674ec7d1dad627b2bbd03e199b310fac88a57220024032f4cc2d446dd777254416c7441f305f5ed439adfd0e0c05a24a50a8d9ec23d326ca34c738342c06e3aadae2007a7021632bbd5207bd9ea08ef8e7"}]}}, @NL80211_ATTR_BEACON_TAIL={0xe, 0xf, [@peer_mgmt={0x75, 0x8, {0x1, 0xff, @val=0xffff, @val=0x3e, @void}}]}, @NL80211_ATTR_FTM_RESPONDER={0x44c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xf5, 0x2, "d268b61f87b8107cad02b12ca14e69313ca44908b6c5bf323ede4521afba5a436b4896e27432a0d966c98ae90f2f0ab53f96980114c28785ae3b6865018d98c7212aad555c0e22d41bd7a1c32c29d4aecaf271dbfa1c6e6b2314d981f833f9fe91718aef4ae9980716ea0d783a45b1b4e315515f26719be1ace6b26d2d5dace1a8faae2a688e6dcfe977be89d2e34eb59239b93426089b222d4df2c9dcdc271030002ce79763d3930a94c6c727409a47f4e170022322e1b333c0990efdb5ddbc594e233f32f48203c83f279954122631419860724d46feab2f74423cd9ea605477bcb6ad9cb8af70c15d5108a9fc6f0e39"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xa9, 0x2, "8f3a0fef8f1362a59c06ed88337c92d1202d1517ad726552605da834ef0b67bde369ee431225c1543ad3f5e790acb1e12305a6578a2c97ec93d0e8385d39858457b90e198da268d4a48346e3e4be50c10357f342f8929d36cb69067fa6d0c5e1be121dc28146c128a8cab7d0b4b253aabbd1da4a97ce04efdf80f7ea85ebb3eb2ed037b84f7ce22333b668bd8942e85edf8431e6f694efa5149b694d0fb3bb540fa872d1c1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x26, 0x3, "34dd918ca9c02de733baed542f555692b09978eb1355343adec1ad675bda21fe5326"}, @NL80211_FTM_RESP_ATTR_LCI={0xb4, 0x2, "b3779911d1cf4d39ab9eeae5c9726a1f497bfb35f84d0886310dff3489bc8c46b1560b742a20f9e5e0aca67f1dca864b74aee1ef99fbc631bcd781dc269cb1a0fb1ac6f7c5dfe245783eb535c4ba313a09fecbb55ff37b95116e602a2ea8161fcfd1a33b07a3fc5371b74c16a097debcd1ec981b45344e7ae8ac762e9f6b6e0a606999cab6f9a93dd904761926b3d6c0a9627f4aadb2796bb7ac481e2e12fab766cb370b815be7a9fdf2646caded271a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc2, 0x3, "a06d66d0ba643f6aa9e2f2d0228bcf812501afdf3b52a312792f720b103cdd8f03da9ae4acbb3a6c4075e5fcb6d5c585a7529f722304d6ec366b40a029d4be9cc838498c3de71e033d8608b1c053818eebdf205edde0277ea1b9c4f73570cd347f05a4d87ea104d01b7b5578fbe9dc5c99ed8c7299ed6e48be2b8eaba7d4e61a64be67bb76d104d04d2f87cacbd536bae3f5ffc43a4dbb7ac8a7226c1193c75bf6fcca9a7b4c11b40b23efd74d474b8b821fd3d67d6d5bea786459a57a61"}, @NL80211_FTM_RESP_ATTR_LCI={0xb4, 0x2, "0bd943cbb8c428c157381cbdda7a5d9a74cc3f67bde731705596473954c8ed6e1cc7d2aa0b5aad5bc213050297003ec98c8c8b455550ce39a9a4458fb3947fa59dc4f89376b17ea7bc59197278af87f4722238e4edf0c6d68f724dd3d81943a771d8896e7c7faf18dcd51d9ca2219c1c2a6ee4e337f84699af09808157829c364027f4b66d2e56c68bddbfec6cfff19909200b52b9a54391f3a9b160121dc516f3cd853b190b06d4abf0c5dddcf2d665"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x42, 0x3, "af320a87939d8981204760ed1cc49e51dc272492e73b4e9f9c2968dd2ddef24c82adeeadde6de093a9775d4b1f8ac70253c056f65d3ac615454595b1455f"}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0xd84}, 0x1, 0x0, 0x0, 0x400c005}, 0x44008004) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, 0x0, 0x0) keyctl$chown(0x4, 0x0, r3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 905.662364] FAULT_INJECTION: forcing a failure. [ 905.662364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 905.666129] CPU: 1 PID: 6950 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 905.667628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 905.669410] Call Trace: [ 905.669985] dump_stack+0x107/0x167 [ 905.670779] should_fail.cold+0x5/0xa [ 905.671605] __alloc_pages_nodemask+0x182/0x600 [ 905.672606] ? lock_chain_count+0x20/0x20 [ 905.673501] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 905.674822] ? perf_trace_lock+0xac/0x490 [ 905.675720] alloc_pages_vma+0xbb/0x410 [ 905.676586] wp_page_copy+0xee7/0x1f00 [ 905.677443] ? print_bad_pte+0x5a0/0x5a0 [ 905.678331] ? lock_downgrade+0x6d0/0x6d0 [ 905.679222] ? vm_normal_page+0x162/0x2e0 [ 905.680117] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 905.681260] do_wp_page+0x27b/0x1390 [ 905.682075] handle_mm_fault+0x1cc7/0x3500 [ 905.682996] ? simple_copy_to_iter+0x54/0x70 [ 905.683948] ? __pmd_alloc+0x630/0x630 [ 905.684798] ? vmacache_find+0x55/0x2a0 [ 905.685671] do_user_addr_fault+0x56e/0xc60 [ 905.686623] exc_page_fault+0xa2/0x1a0 [ 905.687464] asm_exc_page_fault+0x1e/0x30 [ 905.688352] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 905.689422] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 71 bf 1c 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 52 bf 1c 02 66 90 48 bb f9 ef ff ff ff 7f [ 905.693405] RSP: 0018:ffff88804914f9c8 EFLAGS: 00050206 [ 905.694559] RAX: 0000000000000028 RBX: ffffffff8311aa00 RCX: 0000000020002030 [ 905.696092] RDX: 1ffff11009229fc3 RSI: ffffffff831105ba RDI: 0000000000000005 [ 905.697624] RBP: ffff88804914fdc8 R08: 0000000000000001 R09: ffff8880424f599f [ 905.699164] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000020002030 [ 905.700699] R13: 0000000020002000 R14: 0000000000000062 R15: 0000000000000004 [ 905.702505] ? sock_common_getsockopt+0xb0/0xb0 [ 905.703509] ? ____sys_recvmsg+0x2aa/0x590 [ 905.704688] ____sys_recvmsg+0x2dd/0x590 [ 905.705664] ? kernel_recvmsg+0x80/0x80 [ 905.706539] ? __import_iovec+0x458/0x590 [ 905.707455] ? import_iovec+0x83/0xb0 [ 905.708284] ___sys_recvmsg+0x127/0x200 [ 905.709145] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 905.710237] ? __lockdep_reset_lock+0x180/0x180 [ 905.711374] ? __fget_files+0x2cf/0x520 [ 905.712444] ? lock_acquire+0x197/0x470 [ 905.713304] ? find_held_lock+0x2c/0x110 [ 905.714240] ? __might_fault+0xd3/0x180 [ 905.715195] ? lock_downgrade+0x6d0/0x6d0 [ 905.716309] do_recvmmsg+0x24c/0x6d0 [ 905.717124] ? ___sys_recvmsg+0x200/0x200 [ 905.718171] ? lock_downgrade+0x6d0/0x6d0 [ 905.719204] ? ksys_write+0x12d/0x260 [ 905.720234] ? wait_for_completion_io+0x270/0x270 [ 905.721275] ? rcu_read_lock_any_held+0x75/0xa0 [ 905.722441] ? vfs_write+0x354/0xb10 [ 905.723373] __x64_sys_recvmmsg+0x20f/0x260 [ 905.724496] ? ksys_write+0x1a9/0x260 [ 905.725317] ? __do_sys_socketcall+0x600/0x600 [ 905.726466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 905.727595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 905.728946] do_syscall_64+0x33/0x40 [ 905.729842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 905.730955] RIP: 0033:0x7f9a8d697b19 [ 905.731838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.736197] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 905.737986] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 905.739779] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 905.741276] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 905.743080] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 905.744770] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:41:47 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 905.761107] FAULT_INJECTION: forcing a failure. [ 905.761107] name failslab, interval 1, probability 0, space 0, times 0 [ 905.763515] CPU: 1 PID: 6951 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 905.764978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 905.766761] Call Trace: [ 905.767329] dump_stack+0x107/0x167 [ 905.768113] should_fail.cold+0x5/0xa [ 905.768937] ? create_object.isra.0+0x3a/0xa20 [ 905.769913] should_failslab+0x5/0x20 [ 905.770737] kmem_cache_alloc+0x5b/0x310 [ 905.771613] create_object.isra.0+0x3a/0xa20 [ 905.772544] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 905.773630] kmem_cache_alloc+0x159/0x310 [ 905.774526] prepare_creds+0x25/0x5e0 [ 905.775340] copy_creds+0x72/0x580 [ 905.776113] copy_process+0xfef/0x78b0 [ 905.776943] ? SOFTIRQ_verbose+0x10/0x10 [ 905.777813] ? mark_lock+0xf5/0x2df0 [ 905.778624] ? lock_acquire+0x197/0x470 [ 905.779453] ? find_held_lock+0x2c/0x110 [ 905.780336] ? __cleanup_sighand+0xb0/0xb0 [ 905.781258] ? _copy_from_user+0xfb/0x1b0 [ 905.782160] kernel_clone+0xe7/0x980 [ 905.782962] ? lock_acquire+0x197/0x470 [ 905.783815] ? create_io_thread+0xf0/0xf0 [ 905.784716] ? ksys_write+0x21a/0x260 [ 905.785533] ? lock_downgrade+0x6d0/0x6d0 [ 905.786436] __do_sys_clone3+0x1e5/0x320 [ 905.787305] ? __do_sys_clone+0x110/0x110 [ 905.788210] ? rcu_read_lock_any_held+0x75/0xa0 [ 905.789209] ? vfs_write+0x354/0xb10 [ 905.790014] ? fput_many+0x2f/0x1a0 [ 905.790822] ? ksys_write+0x1a9/0x260 [ 905.791641] ? __ia32_sys_read+0xb0/0xb0 [ 905.792517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 905.793646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 905.794760] ? trace_hardirqs_on+0x5b/0x180 [ 905.795690] do_syscall_64+0x33/0x40 [ 905.796488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 905.797589] RIP: 0033:0x7f61f1b9eb19 [ 905.798411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.802379] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 905.804023] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 905.805556] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 905.807098] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 905.808636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.810171] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:41:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:41:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x4) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:41:47 executing program 2: r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:41:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 20:41:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 20:41:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 27) 20:41:47 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:41:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 906.098176] FAULT_INJECTION: forcing a failure. [ 906.098176] name failslab, interval 1, probability 0, space 0, times 0 [ 906.101138] CPU: 0 PID: 6971 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 906.102671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 906.104566] Call Trace: [ 906.105159] dump_stack+0x107/0x167 [ 906.105968] should_fail.cold+0x5/0xa [ 906.106807] ? security_prepare_creds+0x112/0x190 [ 906.107876] should_failslab+0x5/0x20 [ 906.108719] __kmalloc+0x72/0x390 [ 906.109494] security_prepare_creds+0x112/0x190 [ 906.110535] prepare_creds+0x452/0x5e0 [ 906.111405] copy_creds+0x72/0x580 [ 906.112201] copy_process+0xfef/0x78b0 [ 906.113052] ? SOFTIRQ_verbose+0x10/0x10 [ 906.113979] ? lock_acquire+0x197/0x470 [ 906.114869] ? find_held_lock+0x2c/0x110 [ 906.115795] ? __cleanup_sighand+0xb0/0xb0 [ 906.116753] ? _copy_from_user+0xfb/0x1b0 [ 906.117687] kernel_clone+0xe7/0x980 [ 906.118528] ? lock_acquire+0x197/0x470 [ 906.119420] ? create_io_thread+0xf0/0xf0 [ 906.120359] ? ksys_write+0x21a/0x260 [ 906.121195] ? lock_downgrade+0x6d0/0x6d0 [ 906.122116] __do_sys_clone3+0x1e5/0x320 [ 906.123036] ? __do_sys_clone+0x110/0x110 [ 906.123985] ? rcu_read_lock_any_held+0x75/0xa0 [ 906.125004] ? vfs_write+0x354/0xb10 [ 906.125805] ? fput_many+0x2f/0x1a0 [ 906.126633] ? ksys_write+0x1a9/0x260 [ 906.127488] ? __ia32_sys_read+0xb0/0xb0 [ 906.128388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 906.129525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 906.130650] ? trace_hardirqs_on+0x5b/0x180 [ 906.131626] do_syscall_64+0x33/0x40 [ 906.132470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 906.133599] RIP: 0033:0x7f61f1b9eb19 [ 906.134431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 906.138430] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 906.140103] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 906.141641] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 906.143211] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 906.144765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.146339] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:41:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x401, 0xf1, 0x0, 0x7, 0x1140}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:41:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) [ 906.220198] FAULT_INJECTION: forcing a failure. [ 906.220198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.222932] CPU: 0 PID: 6977 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 906.224427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 906.226226] Call Trace: [ 906.226806] dump_stack+0x107/0x167 [ 906.227612] should_fail.cold+0x5/0xa [ 906.228457] _copy_from_user+0x2e/0x1b0 [ 906.229326] __copy_msghdr_from_user+0x91/0x4b0 [ 906.230354] ? __ia32_sys_shutdown+0x80/0x80 [ 906.231341] ? __lock_acquire+0x1657/0x5b00 [ 906.232307] ___sys_recvmsg+0xd5/0x200 [ 906.233167] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 906.234233] ? __fget_files+0x2cf/0x520 [ 906.235147] ? lock_acquire+0x197/0x470 [ 906.236010] ? find_held_lock+0x2c/0x110 [ 906.236888] ? __might_fault+0xd3/0x180 [ 906.237750] ? lock_downgrade+0x6d0/0x6d0 [ 906.238699] do_recvmmsg+0x24c/0x6d0 [ 906.239533] ? ___sys_recvmsg+0x200/0x200 [ 906.240438] ? lock_downgrade+0x6d0/0x6d0 [ 906.241352] ? ksys_write+0x12d/0x260 [ 906.242193] ? wait_for_completion_io+0x270/0x270 [ 906.243262] ? rcu_read_lock_any_held+0x75/0xa0 [ 906.244268] ? vfs_write+0x354/0xb10 [ 906.245074] __x64_sys_recvmmsg+0x20f/0x260 [ 906.246005] ? ksys_write+0x1a9/0x260 [ 906.246850] ? __do_sys_socketcall+0x600/0x600 [ 906.247850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 906.249014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 906.250135] do_syscall_64+0x33/0x40 [ 906.250979] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 906.252098] RIP: 0033:0x7f9a8d697b19 [ 906.252897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 906.256911] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 906.258571] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 906.260127] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 906.261664] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 906.263246] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 906.264784] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 906.449361] FAULT_INJECTION: forcing a failure. [ 906.449361] name failslab, interval 1, probability 0, space 0, times 0 [ 906.451832] CPU: 0 PID: 6987 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 906.453275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 906.455040] Call Trace: [ 906.455608] dump_stack+0x107/0x167 [ 906.456393] should_fail.cold+0x5/0xa [ 906.457209] ? create_object.isra.0+0x3a/0xa20 [ 906.458177] should_failslab+0x5/0x20 [ 906.458997] kmem_cache_alloc+0x5b/0x310 [ 906.459869] create_object.isra.0+0x3a/0xa20 [ 906.460805] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 906.461892] __kmalloc+0x16e/0x390 [ 906.462672] security_prepare_creds+0x112/0x190 [ 906.463690] prepare_creds+0x452/0x5e0 [ 906.464527] copy_creds+0x72/0x580 [ 906.465288] copy_process+0xfef/0x78b0 [ 906.466120] ? SOFTIRQ_verbose+0x10/0x10 [ 906.467019] ? lock_acquire+0x197/0x470 [ 906.467856] ? find_held_lock+0x2c/0x110 [ 906.468735] ? __cleanup_sighand+0xb0/0xb0 [ 906.469670] ? _copy_from_user+0xfb/0x1b0 [ 906.470587] kernel_clone+0xe7/0x980 [ 906.471378] ? lock_acquire+0x197/0x470 [ 906.472221] ? create_io_thread+0xf0/0xf0 [ 906.473137] ? ksys_write+0x21a/0x260 [ 906.473946] ? lock_downgrade+0x6d0/0x6d0 [ 906.474838] __do_sys_clone3+0x1e5/0x320 [ 906.475697] ? __do_sys_clone+0x110/0x110 [ 906.476610] ? rcu_read_lock_any_held+0x75/0xa0 [ 906.477602] ? vfs_write+0x354/0xb10 [ 906.478411] ? fput_many+0x2f/0x1a0 [ 906.479182] ? ksys_write+0x1a9/0x260 [ 906.479991] ? __ia32_sys_read+0xb0/0xb0 [ 906.480860] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 906.481964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 906.483066] ? trace_hardirqs_on+0x5b/0x180 [ 906.483983] do_syscall_64+0x33/0x40 [ 906.484771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 906.486091] RIP: 0033:0x7f61f1b9eb19 [ 906.487113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 906.491854] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 906.493509] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 906.495096] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 906.496641] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 906.498192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.499762] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:42:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 20:42:02 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) 20:42:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:42:02 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 28) 20:42:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x8) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:42:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 20:42:02 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:42:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 920.489726] FAULT_INJECTION: forcing a failure. [ 920.489726] name failslab, interval 1, probability 0, space 0, times 0 [ 920.493775] CPU: 1 PID: 7002 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 920.495873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 920.497942] Call Trace: [ 920.498760] dump_stack+0x107/0x167 [ 920.499698] should_fail.cold+0x5/0xa [ 920.500669] ? __delayacct_tsk_init+0x1b/0x80 [ 920.501844] should_failslab+0x5/0x20 [ 920.502960] kmem_cache_alloc+0x5b/0x310 [ 920.504238] ? prepare_creds+0x466/0x5e0 [ 920.505281] __delayacct_tsk_init+0x1b/0x80 20:42:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xec) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000040)) [ 920.506378] copy_process+0x3395/0x78b0 [ 920.507548] ? SOFTIRQ_verbose+0x10/0x10 [ 920.508791] ? mark_lock+0xf5/0x2df0 [ 920.509953] ? lock_acquire+0x197/0x470 [ 920.511173] ? find_held_lock+0x2c/0x110 [ 920.512726] ? __cleanup_sighand+0xb0/0xb0 [ 920.514274] ? _copy_from_user+0xfb/0x1b0 [ 920.515915] kernel_clone+0xe7/0x980 [ 920.517138] ? lock_acquire+0x197/0x470 [ 920.518585] ? create_io_thread+0xf0/0xf0 [ 920.520050] ? ksys_write+0x21a/0x260 [ 920.521367] ? lock_downgrade+0x6d0/0x6d0 [ 920.522754] __do_sys_clone3+0x1e5/0x320 [ 920.524177] ? __do_sys_clone+0x110/0x110 [ 920.525626] ? rcu_read_lock_any_held+0x75/0xa0 [ 920.526632] ? vfs_write+0x354/0xb10 [ 920.527473] ? fput_many+0x2f/0x1a0 [ 920.528119] ? ksys_write+0x1a9/0x260 [ 920.528735] ? __ia32_sys_read+0xb0/0xb0 [ 920.529327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 920.530102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 920.530864] ? trace_hardirqs_on+0x5b/0x180 [ 920.531505] do_syscall_64+0x33/0x40 [ 920.532054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 920.532845] RIP: 0033:0x7f61f1b9eb19 [ 920.533425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 920.536452] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 920.537801] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 920.538756] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 920.539895] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 920.541072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.541924] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 [ 920.552276] FAULT_INJECTION: forcing a failure. [ 920.552276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.554340] CPU: 1 PID: 7004 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 920.555342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 920.556536] Call Trace: [ 920.556912] dump_stack+0x107/0x167 [ 920.557442] should_fail.cold+0x5/0xa [ 920.557997] _copy_from_user+0x2e/0x1b0 [ 920.558590] __copy_msghdr_from_user+0x91/0x4b0 [ 920.559263] ? __ia32_sys_shutdown+0x80/0x80 [ 920.559894] ? __lock_acquire+0x1657/0x5b00 [ 920.560511] ___sys_recvmsg+0xd5/0x200 [ 920.561075] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 920.561788] ? __fget_files+0x2cf/0x520 [ 920.562371] ? lock_acquire+0x197/0x470 [ 920.563051] ? find_held_lock+0x2c/0x110 [ 920.563749] ? __might_fault+0xd3/0x180 [ 920.564418] ? lock_downgrade+0x6d0/0x6d0 [ 920.565026] do_recvmmsg+0x24c/0x6d0 [ 920.565676] ? ___sys_recvmsg+0x200/0x200 [ 920.566366] ? lock_downgrade+0x6d0/0x6d0 [ 920.567096] ? ksys_write+0x12d/0x260 [ 920.567657] ? wait_for_completion_io+0x270/0x270 [ 920.568480] ? rcu_read_lock_any_held+0x75/0xa0 [ 920.569314] ? vfs_write+0x354/0xb10 [ 920.569858] __x64_sys_recvmmsg+0x20f/0x260 [ 920.570489] ? ksys_write+0x1a9/0x260 [ 920.571132] ? __do_sys_socketcall+0x600/0x600 [ 920.571948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 920.572777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 920.573515] do_syscall_64+0x33/0x40 [ 920.573528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 920.573544] RIP: 0033:0x7f9a8d697b19 [ 920.575439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 920.575447] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 920.575467] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 920.575474] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000004 [ 920.575480] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 20:42:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) [ 920.582872] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 920.582878] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:42:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x10) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:42:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:42:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, 0x0) [ 920.784850] FAULT_INJECTION: forcing a failure. [ 920.784850] name failslab, interval 1, probability 0, space 0, times 0 [ 920.786534] CPU: 1 PID: 7024 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 920.787481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 920.788434] Call Trace: [ 920.788812] dump_stack+0x107/0x167 [ 920.789384] should_fail.cold+0x5/0xa [ 920.789978] ? create_object.isra.0+0x3a/0xa20 [ 920.790819] should_failslab+0x5/0x20 [ 920.791440] kmem_cache_alloc+0x5b/0x310 [ 920.792118] create_object.isra.0+0x3a/0xa20 [ 920.792918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 920.793699] kmem_cache_alloc+0x159/0x310 [ 920.794284] ? prepare_creds+0x466/0x5e0 [ 920.794974] __delayacct_tsk_init+0x1b/0x80 [ 920.795641] copy_process+0x3395/0x78b0 [ 920.796376] ? SOFTIRQ_verbose+0x10/0x10 [ 920.796947] ? mark_lock+0xf5/0x2df0 [ 920.797468] ? lock_acquire+0x197/0x470 [ 920.798017] ? find_held_lock+0x2c/0x110 [ 920.798604] ? __cleanup_sighand+0xb0/0xb0 [ 920.799212] ? _copy_from_user+0xfb/0x1b0 [ 920.799922] kernel_clone+0xe7/0x980 [ 920.800529] ? lock_acquire+0x197/0x470 [ 920.801246] ? create_io_thread+0xf0/0xf0 [ 920.801836] ? ksys_write+0x21a/0x260 [ 920.802376] ? lock_downgrade+0x6d0/0x6d0 [ 920.803096] __do_sys_clone3+0x1e5/0x320 [ 920.803803] ? __do_sys_clone+0x110/0x110 [ 920.804422] ? rcu_read_lock_any_held+0x75/0xa0 [ 920.805191] ? vfs_write+0x354/0xb10 [ 920.805859] ? fput_many+0x2f/0x1a0 [ 920.806406] ? ksys_write+0x1a9/0x260 [ 920.807042] ? __ia32_sys_read+0xb0/0xb0 [ 920.807721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 920.808587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 920.809473] ? trace_hardirqs_on+0x5b/0x180 [ 920.810271] do_syscall_64+0x33/0x40 [ 920.810795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 920.811649] RIP: 0033:0x7f61f1b9eb19 [ 920.812289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 920.815288] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 920.816525] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 920.817724] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 920.818846] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 920.820046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.821092] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:42:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) 20:42:17 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:42:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, 0x0) 20:42:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:42:17 executing program 2: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0x3d, 0xfa}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'blake2s-224-arm\x00'}}, &(0x7f00000000c0)="fba330d2e8b1eaadfd9374b9dc73976ebde974cd2cc5d1093884e67fcbce5d520ce42ff7826ffc9af0557179d60a66e7f5c0ae2a4181b5a29a7c34ab13", &(0x7f0000000100)=""/250) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:42:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 29) 20:42:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x64) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:42:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 936.040597] FAULT_INJECTION: forcing a failure. [ 936.040597] name failslab, interval 1, probability 0, space 0, times 0 [ 936.042247] CPU: 1 PID: 7041 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 936.043401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 936.044824] Call Trace: [ 936.045189] dump_stack+0x107/0x167 [ 936.045817] should_fail.cold+0x5/0xa [ 936.046468] ? dup_fd+0x89/0xf40 [ 936.047051] should_failslab+0x5/0x20 [ 936.047693] kmem_cache_alloc+0x5b/0x310 [ 936.048396] dup_fd+0x89/0xf40 [ 936.048944] ? audit_filter_inodes+0x40/0x40 [ 936.049696] ? security_task_alloc+0xe6/0x260 [ 936.050331] copy_process+0x197c/0x78b0 [ 936.051009] ? SOFTIRQ_verbose+0x10/0x10 [ 936.051708] ? __lockdep_reset_lock+0x180/0x180 [ 936.052507] ? mark_lock+0xf5/0x2df0 [ 936.053171] ? __cleanup_sighand+0xb0/0xb0 [ 936.053917] ? _copy_from_user+0xfb/0x1b0 [ 936.054638] kernel_clone+0xe7/0x980 [ 936.055293] ? __lockdep_reset_lock+0x180/0x180 [ 936.056089] ? create_io_thread+0xf0/0xf0 [ 936.056819] ? ksys_write+0x21a/0x260 [ 936.057477] ? lock_downgrade+0x6d0/0x6d0 [ 936.058032] __do_sys_clone3+0x1e5/0x320 [ 936.058734] ? __do_sys_clone+0x110/0x110 [ 936.059462] ? rcu_read_lock_any_held+0x75/0xa0 [ 936.060262] ? vfs_write+0x354/0xb10 [ 936.060900] ? fput_many+0x2f/0x1a0 [ 936.061508] ? ksys_write+0x1a9/0x260 [ 936.062165] ? __ia32_sys_read+0xb0/0xb0 [ 936.062871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 936.063761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 936.064638] ? trace_hardirqs_on+0x5b/0x180 [ 936.065379] do_syscall_64+0x33/0x40 [ 936.066001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 936.066864] RIP: 0033:0x7f61f1b9eb19 [ 936.067487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 936.070566] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 936.071842] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 936.073045] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 936.074226] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 936.075413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 936.076595] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 [ 936.082480] FAULT_INJECTION: forcing a failure. [ 936.082480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.084502] CPU: 1 PID: 7042 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 936.085637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 936.087021] Call Trace: [ 936.087461] dump_stack+0x107/0x167 [ 936.088070] should_fail.cold+0x5/0xa [ 936.088711] _copy_from_user+0x2e/0x1b0 [ 936.089379] __copy_msghdr_from_user+0x91/0x4b0 [ 936.090162] ? __ia32_sys_shutdown+0x80/0x80 [ 936.090187] ? __lock_acquire+0x1657/0x5b00 [ 936.091869] ___sys_recvmsg+0xd5/0x200 [ 936.092413] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 936.093230] ? __fget_files+0x2cf/0x520 [ 936.093786] ? lock_acquire+0x197/0x470 [ 936.094442] ? find_held_lock+0x2c/0x110 [ 936.095024] ? __might_fault+0xd3/0x180 [ 936.095828] ? lock_downgrade+0x6d0/0x6d0 [ 936.096378] do_recvmmsg+0x24c/0x6d0 [ 936.097004] ? ___sys_recvmsg+0x200/0x200 [ 936.097572] ? lock_downgrade+0x6d0/0x6d0 [ 936.098263] ? ksys_write+0x12d/0x260 [ 936.098805] ? wait_for_completion_io+0x270/0x270 [ 936.099602] ? rcu_read_lock_any_held+0x75/0xa0 [ 936.100241] ? vfs_write+0x354/0xb10 [ 936.100876] __x64_sys_recvmmsg+0x20f/0x260 [ 936.101541] ? ksys_write+0x1a9/0x260 [ 936.102223] ? __do_sys_socketcall+0x600/0x600 [ 936.102867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 936.103723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 936.104434] do_syscall_64+0x33/0x40 [ 936.105044] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 936.105850] RIP: 0033:0x7f9a8d697b19 [ 936.106472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 936.109197] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 936.110826] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 936.111777] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 936.113201] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 936.114472] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 936.115747] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:42:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xa1) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x3f, 0x40, 0x7f, 0x99a, 0x2, 0x3, 0x5, 0x3bd, 0x40, 0x303, 0x1, 0x5, 0x38, 0x1, 0x2056, 0x0, 0x20}, [{0x4, 0x4, 0x7, 0x0, 0x6, 0x5, 0x7, 0x8000}, {0x60000000, 0x2, 0x400, 0x800, 0x6, 0x8, 0x3, 0x101}], "6cbf0905f289bcd32af02e24e311616ae448fe541973e0fc34cb0661a30ea7a863d0bb7ad74f56d43f6e91b7f2a9c24094895c1cef1dd47e1e650f30e082bb942da73b92d1a299dd9508d51befc6768823f6eccf6eef63904f7c8f8fdd5fea443e0b5a2f997ef7f9a05d4d9fd8f64bf4f5318fc8db94cf709d49fe32561108", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa2f) 20:42:18 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, 0x0) 20:42:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xf0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:42:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:42:18 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:42:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:42:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 30) 20:42:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) 20:42:18 executing program 2: r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x3, 0x3, 0x42, 0xffff}, {0x5b3, 0x2, 0x7f}, {0x2, 0x0, 0x1, 0x5}, {0x2, 0xad, 0x20, 0x1ff}, {0x0, 0x4, 0x2d, 0x3}, {0x0, 0x80, 0x8, 0x2}, {0x0, 0x18, 0xeb, 0x3}]}, 0x10) r2 = socket$inet(0xa, 0x3, 0xff) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:42:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x321) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 936.429880] FAULT_INJECTION: forcing a failure. [ 936.429880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.431276] CPU: 1 PID: 7068 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 936.432283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 936.433549] Call Trace: [ 936.434005] dump_stack+0x107/0x167 [ 936.434632] should_fail.cold+0x5/0xa [ 936.435377] _copy_from_user+0x2e/0x1b0 [ 936.435967] __copy_msghdr_from_user+0x91/0x4b0 [ 936.436652] ? __ia32_sys_shutdown+0x80/0x80 [ 936.437303] ? __lock_acquire+0x1657/0x5b00 [ 936.437948] ___sys_recvmsg+0xd5/0x200 [ 936.438515] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 936.439267] ? __fget_files+0x2cf/0x520 [ 936.439923] ? lock_acquire+0x197/0x470 [ 936.440506] ? find_held_lock+0x2c/0x110 [ 936.441127] ? __might_fault+0xd3/0x180 [ 936.441714] ? lock_downgrade+0x6d0/0x6d0 [ 936.442449] do_recvmmsg+0x24c/0x6d0 [ 936.443124] ? ___sys_recvmsg+0x200/0x200 [ 936.443758] ? lock_downgrade+0x6d0/0x6d0 [ 936.444536] ? ksys_write+0x12d/0x260 [ 936.445275] ? wait_for_completion_io+0x270/0x270 [ 936.446031] ? rcu_read_lock_any_held+0x75/0xa0 [ 936.446718] ? vfs_write+0x354/0xb10 [ 936.447415] __x64_sys_recvmmsg+0x20f/0x260 [ 936.448156] ? ksys_write+0x1a9/0x260 [ 936.448900] ? __do_sys_socketcall+0x600/0x600 [ 936.449584] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 936.450526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 936.451478] do_syscall_64+0x33/0x40 [ 936.452020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 936.452897] RIP: 0033:0x7f9a8d697b19 [ 936.453515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 936.456549] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 936.457851] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 936.458983] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 936.460198] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 936.461305] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 936.462465] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 936.467923] FAULT_INJECTION: forcing a failure. [ 936.467923] name failslab, interval 1, probability 0, space 0, times 0 [ 936.469435] CPU: 1 PID: 7069 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 936.470395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 936.471516] Call Trace: [ 936.471884] dump_stack+0x107/0x167 [ 936.472381] should_fail.cold+0x5/0xa [ 936.472928] ? create_object.isra.0+0x3a/0xa20 [ 936.473617] should_failslab+0x5/0x20 [ 936.474338] kmem_cache_alloc+0x5b/0x310 [ 936.474962] create_object.isra.0+0x3a/0xa20 [ 936.475569] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 936.476231] kmem_cache_alloc+0x159/0x310 [ 936.476906] dup_fd+0x89/0xf40 [ 936.477317] ? audit_filter_inodes+0x40/0x40 [ 936.477934] ? security_task_alloc+0xe6/0x260 [ 936.478629] copy_process+0x197c/0x78b0 [ 936.479409] ? SOFTIRQ_verbose+0x10/0x10 [ 936.480074] ? lock_chain_count+0x20/0x20 [ 936.480683] ? mark_lock+0xf5/0x2df0 [ 936.481230] ? __cleanup_sighand+0xb0/0xb0 [ 936.481875] ? _copy_from_user+0xfb/0x1b0 [ 936.482465] kernel_clone+0xe7/0x980 [ 936.483028] ? lock_acquire+0x1b9/0x470 [ 936.483614] ? create_io_thread+0xf0/0xf0 [ 936.484210] ? ksys_write+0x21a/0x260 [ 936.484772] ? lock_downgrade+0x6d0/0x6d0 [ 936.485388] __do_sys_clone3+0x1e5/0x320 [ 936.485992] ? __do_sys_clone+0x110/0x110 [ 936.486595] ? rcu_read_lock_any_held+0x75/0xa0 [ 936.487300] ? vfs_write+0x354/0xb10 [ 936.487854] ? fput_many+0x2f/0x1a0 [ 936.488370] ? ksys_write+0x1a9/0x260 [ 936.488936] ? __ia32_sys_read+0xb0/0xb0 [ 936.489533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 936.490271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 936.491008] ? trace_hardirqs_on+0x5b/0x180 [ 936.491621] do_syscall_64+0x33/0x40 [ 936.492155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 936.492872] RIP: 0033:0x7f61f1b9eb19 [ 936.493399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 936.496734] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 936.498599] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 936.500072] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 936.501740] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 936.503386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 936.505280] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:42:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:42:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:42:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:42:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x480) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:42:33 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:42:33 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) 20:42:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) 20:42:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 31) [ 952.074956] FAULT_INJECTION: forcing a failure. [ 952.074956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.078158] CPU: 0 PID: 7087 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 952.080024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.082121] Call Trace: 20:42:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x401, 0xf1, 0x0, 0x7, 0x1140}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) [ 952.082787] dump_stack+0x107/0x167 [ 952.083917] should_fail.cold+0x5/0xa [ 952.084890] _copy_from_user+0x2e/0x1b0 [ 952.085908] __copy_msghdr_from_user+0x91/0x4b0 [ 952.087104] ? __ia32_sys_shutdown+0x80/0x80 [ 952.088223] ? __lock_acquire+0x1657/0x5b00 [ 952.089343] ___sys_recvmsg+0xd5/0x200 [ 952.090331] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 952.091593] ? lock_acquire+0x197/0x470 [ 952.092477] ? find_held_lock+0x2c/0x110 [ 952.093331] ? __might_fault+0xd3/0x180 [ 952.094181] ? lock_downgrade+0x6d0/0x6d0 [ 952.095081] do_recvmmsg+0x24c/0x6d0 [ 952.095865] ? ___sys_recvmsg+0x200/0x200 [ 952.096731] ? lock_downgrade+0x6d0/0x6d0 [ 952.097604] ? ksys_write+0x12d/0x260 [ 952.098414] ? wait_for_completion_io+0x270/0x270 [ 952.099433] ? rcu_read_lock_any_held+0x75/0xa0 [ 952.100409] ? vfs_write+0x354/0xb10 [ 952.101188] __x64_sys_recvmmsg+0x20f/0x260 [ 952.102086] ? ksys_write+0x1a9/0x260 [ 952.102901] ? __do_sys_socketcall+0x600/0x600 [ 952.103857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.104951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.106037] do_syscall_64+0x33/0x40 [ 952.106825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.107908] RIP: 0033:0x7f9a8d697b19 [ 952.108682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.112531] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 952.114134] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 952.115631] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 952.117125] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 952.118621] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 952.120132] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 952.156909] FAULT_INJECTION: forcing a failure. [ 952.156909] name failslab, interval 1, probability 0, space 0, times 0 [ 952.159577] CPU: 0 PID: 7094 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 952.161130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.162897] Call Trace: [ 952.163458] dump_stack+0x107/0x167 [ 952.164238] should_fail.cold+0x5/0xa [ 952.165055] ? alloc_fdtable+0x84/0x280 [ 952.165904] should_failslab+0x5/0x20 [ 952.166706] kmem_cache_alloc_trace+0x55/0x320 [ 952.167686] ? rwlock_bug.part.0+0x90/0x90 [ 952.168605] alloc_fdtable+0x84/0x280 [ 952.169428] dup_fd+0x92e/0xf40 [ 952.170164] copy_process+0x197c/0x78b0 [ 952.171022] ? SOFTIRQ_verbose+0x10/0x10 [ 952.171971] ? __cleanup_sighand+0xb0/0xb0 [ 952.172906] ? _copy_from_user+0xfb/0x1b0 [ 952.173801] kernel_clone+0xe7/0x980 [ 952.174595] ? lock_acquire+0x197/0x470 [ 952.175443] ? create_io_thread+0xf0/0xf0 [ 952.176354] ? ksys_write+0x21a/0x260 [ 952.177167] ? lock_downgrade+0x6d0/0x6d0 [ 952.178068] __do_sys_clone3+0x1e5/0x320 [ 952.178935] ? __do_sys_clone+0x110/0x110 [ 952.179850] ? rcu_read_lock_any_held+0x75/0xa0 [ 952.180828] ? vfs_write+0x354/0xb10 [ 952.181616] ? fput_many+0x2f/0x1a0 [ 952.182394] ? ksys_write+0x1a9/0x260 [ 952.183207] ? __ia32_sys_read+0xb0/0xb0 [ 952.184070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.185181] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.186263] ? trace_hardirqs_on+0x5b/0x180 [ 952.187200] do_syscall_64+0x33/0x40 [ 952.187993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.189075] RIP: 0033:0x7f61f1b9eb19 [ 952.189858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.193759] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 952.195367] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 952.196864] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 952.198372] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 952.199885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.201394] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:42:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x401, 0xf1, 0x0, 0x7, 0x1140}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:42:47 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 20:42:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 32) 20:42:47 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:42:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x2103) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:42:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:42:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) 20:42:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 965.729575] FAULT_INJECTION: forcing a failure. [ 965.729575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.732308] CPU: 0 PID: 7110 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 965.733860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 965.735742] Call Trace: [ 965.736346] dump_stack+0x107/0x167 [ 965.737178] should_fail.cold+0x5/0xa [ 965.738045] _copy_from_user+0x2e/0x1b0 [ 965.738958] __copy_msghdr_from_user+0x91/0x4b0 [ 965.740016] ? __ia32_sys_shutdown+0x80/0x80 [ 965.741009] ? __lock_acquire+0x1657/0x5b00 [ 965.742007] ___sys_recvmsg+0xd5/0x200 [ 965.742888] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 965.744007] ? trace_hardirqs_on+0x5b/0x180 [ 965.745002] ? lock_acquire+0x197/0x470 [ 965.745899] ? find_held_lock+0x2c/0x110 [ 965.746950] ? __might_fault+0xd3/0x180 [ 965.747866] ? lock_downgrade+0x6d0/0x6d0 [ 965.748823] do_recvmmsg+0x24c/0x6d0 [ 965.749664] ? ___sys_recvmsg+0x200/0x200 [ 965.750599] ? lock_downgrade+0x6d0/0x6d0 [ 965.751554] ? ksys_write+0x12d/0x260 [ 965.752431] ? wait_for_completion_io+0x270/0x270 [ 965.753521] ? rcu_read_lock_any_held+0x75/0xa0 [ 965.754574] ? vfs_write+0x354/0xb10 [ 965.755433] __x64_sys_recvmmsg+0x20f/0x260 [ 965.756408] ? ksys_write+0x1a9/0x260 [ 965.757272] ? __do_sys_socketcall+0x600/0x600 [ 965.758316] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 965.759511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 965.760678] do_syscall_64+0x33/0x40 [ 965.761522] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 965.762690] RIP: 0033:0x7f9a8d697b19 [ 965.763552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 965.767736] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 965.769461] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 965.771086] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 965.772693] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 965.774300] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 965.775923] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 965.796339] FAULT_INJECTION: forcing a failure. [ 965.796339] name failslab, interval 1, probability 0, space 0, times 0 [ 965.799232] CPU: 0 PID: 7115 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 965.800979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 965.802855] Call Trace: [ 965.803474] dump_stack+0x107/0x167 [ 965.804306] should_fail.cold+0x5/0xa [ 965.805178] ? create_object.isra.0+0x3a/0xa20 [ 965.806219] should_failslab+0x5/0x20 [ 965.807094] kmem_cache_alloc+0x5b/0x310 [ 965.808034] create_object.isra.0+0x3a/0xa20 [ 965.809033] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 965.810208] kmem_cache_alloc_trace+0x151/0x320 [ 965.811273] ? rwlock_bug.part.0+0x90/0x90 [ 965.812270] alloc_fdtable+0x84/0x280 [ 965.813149] dup_fd+0x92e/0xf40 [ 965.813935] copy_process+0x197c/0x78b0 [ 965.814844] ? SOFTIRQ_verbose+0x10/0x10 [ 965.815847] ? __cleanup_sighand+0xb0/0xb0 [ 965.816846] ? _copy_from_user+0xfb/0x1b0 [ 965.817803] kernel_clone+0xe7/0x980 [ 965.818658] ? lock_acquire+0x197/0x470 [ 965.819579] ? create_io_thread+0xf0/0xf0 [ 965.820552] ? ksys_write+0x21a/0x260 [ 965.821418] ? lock_downgrade+0x6d0/0x6d0 [ 965.822374] __do_sys_clone3+0x1e5/0x320 [ 965.823308] ? __do_sys_clone+0x110/0x110 [ 965.824287] ? rcu_read_lock_any_held+0x75/0xa0 [ 965.825335] ? vfs_write+0x354/0xb10 [ 965.826181] ? fput_many+0x2f/0x1a0 [ 965.827020] ? ksys_write+0x1a9/0x260 [ 965.827888] ? __ia32_sys_read+0xb0/0xb0 [ 965.828816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 965.830008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 965.831189] ? trace_hardirqs_on+0x5b/0x180 [ 965.832172] do_syscall_64+0x33/0x40 [ 965.833018] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 965.834196] RIP: 0033:0x7f61f1b9eb19 [ 965.835053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 965.839243] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 965.840978] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 965.842610] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 965.844255] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 965.845873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 965.847505] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:42:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:42:47 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x5) 20:42:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x401, 0xf1, 0x0, 0x7, 0x1140}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:42:47 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:42:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x6400) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:42:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) 20:42:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 33) 20:42:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 966.190389] FAULT_INJECTION: forcing a failure. [ 966.190389] name failslab, interval 1, probability 0, space 0, times 0 [ 966.193032] CPU: 0 PID: 7141 Comm: syz-executor.5 Not tainted 5.10.240 #1 [ 966.194542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 966.196300] Call Trace: [ 966.196860] dump_stack+0x107/0x167 [ 966.197638] should_fail.cold+0x5/0xa [ 966.198444] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 966.199558] should_failslab+0x5/0x20 [ 966.200358] __kmalloc_node+0x76/0x420 [ 966.201180] ? lock_downgrade+0x6d0/0x6d0 [ 966.202069] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 966.203150] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 966.204199] ? trace_hardirqs_on+0x5b/0x180 [ 966.205115] kmem_cache_alloc_trace+0x169/0x320 [ 966.206088] ? rwlock_bug.part.0+0x90/0x90 [ 966.206998] alloc_fdtable+0x84/0x280 [ 966.207806] dup_fd+0x92e/0xf40 [ 966.208531] copy_process+0x197c/0x78b0 20:42:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 966.209363] ? SOFTIRQ_verbose+0x10/0x10 [ 966.210439] ? __cleanup_sighand+0xb0/0xb0 [ 966.211386] ? _copy_from_user+0xfb/0x1b0 [ 966.212295] kernel_clone+0xe7/0x980 [ 966.213098] ? lock_acquire+0x197/0x470 [ 966.213941] ? create_io_thread+0xf0/0xf0 [ 966.214845] ? ksys_write+0x21a/0x260 [ 966.215670] ? lock_downgrade+0x6d0/0x6d0 [ 966.216564] __do_sys_clone3+0x1e5/0x320 [ 966.217440] ? __do_sys_clone+0x110/0x110 [ 966.218362] ? rcu_read_lock_any_held+0x75/0xa0 [ 966.219379] ? vfs_write+0x354/0xb10 [ 966.220178] ? fput_many+0x2f/0x1a0 [ 966.220970] ? ksys_write+0x1a9/0x260 [ 966.221799] ? __ia32_sys_read+0xb0/0xb0 [ 966.222684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 966.223824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 966.224948] ? trace_hardirqs_on+0x5b/0x180 [ 966.225909] do_syscall_64+0x33/0x40 [ 966.226734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 966.227877] RIP: 0033:0x7f61f1b9eb19 [ 966.228701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.232754] RSP: 002b:00007f61ef114188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 966.234441] RAX: ffffffffffffffda RBX: 00007f61f1cb1f60 RCX: 00007f61f1b9eb19 [ 966.236032] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020002380 [ 966.237610] RBP: 00007f61ef1141d0 R08: 0000000000000000 R09: 0000000000000000 [ 966.239199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 966.240784] R13: 00007ffd58a30e3f R14: 00007f61ef114300 R15: 0000000000022000 20:42:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:42:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x8004) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:42:48 executing program 2: ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x6, 0x72a1}, {0x7, 0x2000}, {0x1, 0xfffd}, {0x2, 0x8001}]}) [ 966.258881] FAULT_INJECTION: forcing a failure. [ 966.258881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.261362] CPU: 0 PID: 7142 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 966.262829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 966.264592] Call Trace: [ 966.265158] dump_stack+0x107/0x167 [ 966.265931] should_fail.cold+0x5/0xa [ 966.266740] _copy_from_user+0x2e/0x1b0 [ 966.267593] __copy_msghdr_from_user+0x91/0x4b0 [ 966.268661] ? __ia32_sys_shutdown+0x80/0x80 [ 966.269602] ? __lock_acquire+0x1657/0x5b00 [ 966.270531] ___sys_recvmsg+0xd5/0x200 [ 966.271373] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 966.272413] ? lock_acquire+0x197/0x470 [ 966.273251] ? find_held_lock+0x2c/0x110 [ 966.274106] ? __might_fault+0xd3/0x180 [ 966.274943] ? lock_downgrade+0x6d0/0x6d0 [ 966.275844] do_recvmmsg+0x24c/0x6d0 [ 966.276627] ? ___sys_recvmsg+0x200/0x200 [ 966.277489] ? lock_downgrade+0x6d0/0x6d0 20:42:48 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 966.278361] ? ksys_write+0x12d/0x260 [ 966.279330] ? wait_for_completion_io+0x270/0x270 [ 966.280352] ? rcu_read_lock_any_held+0x75/0xa0 [ 966.281326] ? vfs_write+0x354/0xb10 [ 966.282112] __x64_sys_recvmmsg+0x20f/0x260 [ 966.283032] ? ksys_write+0x1a9/0x260 [ 966.283838] ? __do_sys_socketcall+0x600/0x600 [ 966.284807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 966.285913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 966.287000] do_syscall_64+0x33/0x40 [ 966.287791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 966.288857] RIP: 0033:0x7f9a8d697b19 [ 966.289634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.293478] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 966.295069] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 966.296549] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 966.298035] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 966.299525] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 966.301015] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:43:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 34) 20:43:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) 20:43:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf84"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:43:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:43:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:43:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:43:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xf000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:43:00 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 979.063937] FAULT_INJECTION: forcing a failure. [ 979.063937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.066626] CPU: 1 PID: 7167 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 979.068185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 979.070208] Call Trace: [ 979.070907] dump_stack+0x107/0x167 [ 979.071744] should_fail.cold+0x5/0xa [ 979.072617] _copy_from_user+0x2e/0x1b0 [ 979.073533] __copy_msghdr_from_user+0x91/0x4b0 [ 979.074589] ? __ia32_sys_shutdown+0x80/0x80 [ 979.075599] ? __lock_acquire+0x1657/0x5b00 [ 979.076598] ___sys_recvmsg+0xd5/0x200 [ 979.077481] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 979.078595] ? __fget_files+0x2cf/0x520 [ 979.079510] ? lock_acquire+0x197/0x470 [ 979.080406] ? find_held_lock+0x2c/0x110 [ 979.081328] ? __might_fault+0xd3/0x180 [ 979.082222] ? lock_downgrade+0x6d0/0x6d0 [ 979.083164] do_recvmmsg+0x24c/0x6d0 [ 979.083994] ? ___sys_recvmsg+0x200/0x200 [ 979.084906] ? lock_downgrade+0x6d0/0x6d0 [ 979.085824] ? ksys_write+0x12d/0x260 [ 979.086677] ? wait_for_completion_io+0x270/0x270 [ 979.087744] ? rcu_read_lock_any_held+0x75/0xa0 [ 979.088758] ? vfs_write+0x354/0xb10 [ 979.089575] __x64_sys_recvmmsg+0x20f/0x260 [ 979.090516] ? ksys_write+0x1a9/0x260 [ 979.091360] ? __do_sys_socketcall+0x600/0x600 [ 979.092367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 979.093531] ? syscall_enter_from_user_mode+0x1d/0x50 [ 979.094675] do_syscall_64+0x33/0x40 [ 979.095500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 979.096620] RIP: 0033:0x7f9a8d697b19 [ 979.097434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 979.101484] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 979.103217] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 979.104985] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 979.106531] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 979.108332] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 979.109912] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:43:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf84"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:43:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:43:01 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:43:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x2c40, 0x66) r2 = socket$inet(0xa, 0x3, 0xff) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r3) sendfile(r0, r3, &(0x7f0000000100)=0x2, 0x5) ioctl$TCXONC(r1, 0x540a, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000000040), 0x8, 0x2000c0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x3, 0xcc94, 0x100, 0x6}) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r6) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) r7 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9000) ioctl$RTC_PIE_OFF(r7, 0x7006) accept4$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003700)={'tunl0\x00', &(0x7f0000003640)={'syztnl2\x00', 0x0, 0x41, 0x7870, 0x80000000, 0x0, {{0x1e, 0x4, 0x1, 0xc, 0x78, 0x64, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x1f, [@private=0xa010101, @loopback]}, @timestamp_addr={0x44, 0xc, 0x40, 0x1, 0xb, [{@rand_addr=0x64010101, 0x1}]}, @noop, @ssrr={0x89, 0xf, 0x70, [@private=0xa010100, @private=0xa010101, @remote]}, @cipso={0x86, 0x2e, 0x0, [{0x1, 0xa, "45bf4de601c6e270"}, {0x1, 0x10, "ca679a02aa9a62a291b786bd0be3"}, {0x6, 0x5, "5aef3a"}, {0x6, 0x9, "717ae58c63ed5f"}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x56, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3f}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="61b32697b876f5b9cff79b4201e8c2ee213d90e730811917aa76cc288107fb8557070c5f47da5984fb7e5bd990a57524f00280060b28570424ed761b59d2bb6c25e6ede9b3b195e2bcea77fd64649532f7b7d42a0e4c981eb5f1e44bc87d7eab8ca3", 0x62}, {&(0x7f0000000240)="5d4ffc", 0x3}, {&(0x7f0000000280)="a0cced40dbcf46d7fa6e8dd1162d8aa3663b744306250cd20457a9abb84680a1389cd38d0e80ce7df6cf47550db2d728f38528b0ac3beb20bd80040bfd807bec051ef2cdcef16534e0cb8ecb7cb7577daa1614c5ca77262d47d2c1defa3ceef82d00660adf8b647a185cb629096e6414a7e5d830616a61d92a787b001bd7f0711ec4729c67d642bfaa473856233d20f3ad1f4928f4952c13bbfac6d5361eafc386b416da0f578eca68db3303c1801d86fd1b3c3803e85b1e520c67f8a4d2533e3c17abd94b03b5eecc07c55dbce94cf64ae40711a82667dc00282d213014e1911c94", 0xe2}, {&(0x7f0000000380)="4df237ee2f7f6328152455aeba36b4905988efdce2c246b2ef99af12928da2494ef7f80989404d94079b0b352f3e44e93ee4f8413fc4e7e0c1dd71e9d97ab07ff994c2db328eff4ac16d69f1db74193c8f558f6fb2", 0x55}, {&(0x7f0000000400)="189e48e45f43c4d58ad30cf7f959668a024339b892b16ec565bb6b62c494528aaec8639411b8e6a87a83b11acfbcf08ac57990ac2fa9fbe998036adf0b296e2dadb5c2b6992366b0903a31d6a849396292e1a1ffbbcb8219cb6e8bcc24c6239fa66e8cdf662bcd00197c58cbbdd6f6a3f61c75bb2e39c3781375dfeb44884d5b352e4e86d0129d5a98489f8e61fac073a1c03662", 0x94}, {&(0x7f00000004c0)="55c7b967067394b506c11f01e2689c3fa7454583496f755558d6e87a65a6db687a087489f06424393320b06657967c25d5cee970205efcd9f028bbc131198e13fa505a5740e3e3c5481262749bdaa56234ebbfea046997c90ccd38f8cabc94e6d666e67e758cc871bb35396bce5570a711f464809dbc4ad35686fcea1162deee517947cd0f554955e264e5e306a6d28d3e0b3cb6daef95aa7f15512f9e0854be0bb44d8709c47b75370a67b12d80bdb77bb715fa39", 0xb5}], 0x6, &(0x7f0000003940)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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"], 0x1228}}, {{&(0x7f00000018c0)={0xa, 0x4e22, 0x37, @mcast2, 0x28}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001900)="830cdd39e4c012932a6e95ceff31d597719347730cd8409142cf3f97ee81996828a056e746f240bba3685eff3c08d54dded24ba39d502ff48534b74a7dbcee1f67339b776926c1acf9d58430dcf544d16925209fd0c93576351170ddc22c634136c3e9cf600b08fc60dab469b473615a6221ee095892846024e81b935c770511fa", 0x81}, {&(0x7f00000019c0)="90ecb704ce7fcae7c9f65df387086cc90dc8bf4099d990b8e1d488bb0a75171a2331e3c2a0e58bb6cb72ce25ed9d0057bf72333a086212b506cc800570b82aaa3fdee90ee5b75926bb4a2c3d218cedc2a2725b09198aa5bef471f94fc201b0e691b96f9f06bf779cd53d418479878846d3e486810e76f89094822a7e4eb8ddbb32b3e8337251a6b710cbf3892513bf1aea540170ac3530fb32fbd8a4142cdd10835aa637700de5b1adcdf5a6ddc949742eb9118a7175a92f9c41dc2bac7734fe1a11165b13c1e2574683a20516c8114204f2856fa4f4825ea0f1a736f8d447e5f3f0a1adfcfcd6dc9d1ab871fe3e572e69de5f8ee52bfbaf", 0xf8}, {&(0x7f0000001ac0)="5b6bed77cadfd0aa31e7ae8e331c729cef3ca056ec65a1a643f13c582795359daf49d2046d116bfe1d8bc3f470136b36bc3f9a78bdd0c32aba9a88e28c0bb5848e55a98bf5d85d", 0x47}], 0x3, &(0x7f0000001b80)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdr_2292={{0x38, 0x29, 0x39, {0xff, 0x4, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2f2}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c00)="42634a60a982502a0a021f8dec2e71ad8b0d20f6e8d56d27b79d1c4e90e750c112fee4021d007fd4299ec25ec5bb826baa0aa10692e1bdfe759c3680dde5ed1e2034509f87d82d9e77d258639d332953f8ad324e4c71ec077ef75ecb2c09052612f301f5021786b0de39c3828f758919ca404753be3382e37d3b94c55e3783e11255269e20a99a03f7432a37b816ed252eb690141b0ec430669ef90cf00a910322d717c012274ea019756d341cd90607d56a72d53647e2332efca0b69c76ac6d80296ad9c8d9bf8b954ff297006d10e6af44b3e3885dbe51fabb07eb24f9262135d2b42e34669e539a712e2848369fe3", 0xf0}], 0x1, &(0x7f0000001d40)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}, @rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0xff}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001e00)="5fcf5cb6d0be0a446d5af032bf0181c4beec380cbd1e6967a5a87a23840e5a3b146f62ede5c7b2780cd669650234a55f5924ae6e9720922a39d20dec49048733e50f35f67d671a9e45a750cbae646bf2f162ed429253de60aa5bc9545832330b78a072c7789441999c62b4ab25326ad7f248f63f8f9210a7cc34191bb39897f2959bd30d26c30fffdb1c4f65c6d8f4de3005d93ed055e8ab", 0x98}, {&(0x7f0000001ec0)="d3b72767a4b690ff333747c97bd3260e92b3338ea5ff89ef245ec1e863c28cbf1ad0daaa8f90f298c35ee6e6e9b6aa46f9423502cd15dbcad95a0f70816cac8a07c9a06c30a5c9dab6be326cc58d18389368feee5ccc1c", 0x57}, {&(0x7f0000001f40)="80a7b59d04fc66f959ed8a993e639d84f45a9190186ee6882d86d4a66cd3883d977cc061509fbe063d0243b7fb274757b50eaccaf00824a6d438", 0x3a}, {&(0x7f0000001f80)="fc4f1b56753d862dcc513a6f5c5cfd75723f56e7e2a5291dd42bedc9d8b0d1a76dfab1ffd3c5a8e7aee2ac6c63e18e28e2ca2780", 0x34}, {&(0x7f0000001fc0)="fafb512d85d1abddd10310fba2e83a47cfb1011c1239e9ce5013234994b9239ace291c333949752c581e6383afdcd940226f0e9948bb711ac4ca37755436fa00d276787d512a5ee7e1c8b84a246df731643b29a17863f544f995df2fefc40b3ada4cd2421f7bc305fe27b49d65edbb5328807d40256931c9b691674f077cf1aad68552e1892b01809760da23cf181b0941fcc0f0", 0x94}, {&(0x7f0000002080)="17d407efa561a2dc88523230cc98ad87fbc867abd424d8006a77efa5ccca7f6d2e6c5bac3b8069af8d985614709b5ae9916205d525c7999cee84fbda00622cc582f65a56bb4f38daf33e8da0231ec23c6dc14d0afc7b582fa4e9a449a4f76237802d5e3db9bc444020991a6ee42e3021cdc735a0e991e718a60f1e7f6087c1e51b40bee8d8ad1af410b034b435c172920e7dbeaa43dbbff3f5a8ba7320ba6c2e84614f9bcb9e4d228190ed1e72053bacd407065d8b53b4e156ca26ceabb05da3fe5aa9404d8bbe0a5ae610615b0c50553e3a3825723f97903f54f6006bd912105fd80b4d78ac65c9", 0xe8}, {&(0x7f0000002180)="465535039937a3f562bc37b228c902aa3d7a482de2927fcb9822ed4aec4218d4aff47fcc4f7207f865b08dc46469486c030b77273e79938cc692ba0d8eabb07032dbce979548f945b5bbac02d55b18a020b4dcccffb36b18c307918d27b4271863d9eebef9e14da295d76305d5deefa587f910a95c7bd05ed1ff560de84712d02d762acb08a353b59cd5357ca591", 0x8e}, {&(0x7f0000002240)="abe771e81df50f8c55f83db209af33c45498edff1a178fda3f4deba021dc026f", 0x20}, {&(0x7f0000002280)="6f0880bc14922580e910cad4a73cf96b3dd6f25c009b9e63f50a30739a8a", 0x1e}], 0x9, &(0x7f0000002380)=[@hopopts={{0x20, 0x29, 0x36, {0x11, 0x0, '\x00', [@pad1]}}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x2f, 0xf, '\x00', [@ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x1f}, @calipso={0x7, 0x48, {0x3, 0x10, 0x40, 0x3, [0xfffffffffffff1ad, 0x8, 0x2dd, 0x2, 0x800, 0x1f, 0x3f, 0x0]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0x1, [0xfffffffffffff801, 0x8, 0x7, 0x6]}}]}}}, @hopopts={{0x50, 0x29, 0x36, {0x11, 0x6, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3c, 0x1, [0x10000, 0x81]}}, @hao={0xc9, 0x10, @private1}]}}}], 0x108}}, {{&(0x7f00000024c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x60}, 0x1c, &(0x7f0000003600)=[{&(0x7f0000002500)="bc05d0024b22ca3454ef942c37048a3427815e70f5746e4b297728dedfae7d258de7ce8b30568bb890ea5525d2b513789f9f30eb6b343015bcdfdf848e249e58c8bbf7b4920a57bcbfc515f959fad07cdc1662777b32eb4352fe29d6b60dc01defe628049c64fca15d791e59db19dd92e3a6e3d3a0b819072d4a770836da66242dcabd7a26645f66be6bd5887e220f26d7ec48a6706d9b84a07b993f6361df9d8278adb24b812c5967ed06d85435b6858735979a0548eec0d6914a4e05457383e65bde3804413c1d", 0xc8}, {&(0x7f0000002600)="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", 0x1000}], 0x2, &(0x7f0000003740)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r9}}}, @dstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2, 0x8, 0x1, 0x3d, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private0]}}}, @tclass={{0x14, 0x29, 0x43, 0xfff}}], 0xb8}}], 0x5, 0x40080) 20:43:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080102, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:43:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x80000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:43:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xf0ffff) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:43:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:43:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080103, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:43:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:43:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x13) 20:43:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 35) 20:43:14 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:43:14 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 992.998185] FAULT_INJECTION: forcing a failure. [ 992.998185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.001242] CPU: 0 PID: 7212 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 993.003008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 993.005157] Call Trace: [ 993.005849] dump_stack+0x107/0x167 [ 993.006807] should_fail.cold+0x5/0xa [ 993.007831] _copy_from_user+0x2e/0x1b0 [ 993.008884] __copy_msghdr_from_user+0x91/0x4b0 [ 993.010105] ? __ia32_sys_shutdown+0x80/0x80 [ 993.011241] ? __lock_acquire+0x1657/0x5b00 [ 993.012544] ___sys_recvmsg+0xd5/0x200 [ 993.013566] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 993.014832] ? __fget_files+0x2cf/0x520 [ 993.015901] ? lock_acquire+0x197/0x470 [ 993.016747] ? find_held_lock+0x2c/0x110 [ 993.017824] ? __might_fault+0xd3/0x180 [ 993.018856] ? lock_downgrade+0x6d0/0x6d0 [ 993.019977] do_recvmmsg+0x24c/0x6d0 [ 993.020935] ? ___sys_recvmsg+0x200/0x200 [ 993.022014] ? lock_downgrade+0x6d0/0x6d0 20:43:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080105, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 993.023109] ? ksys_write+0x12d/0x260 [ 993.024227] ? wait_for_completion_io+0x270/0x270 [ 993.025476] ? rcu_read_lock_any_held+0x75/0xa0 [ 993.026694] ? vfs_write+0x354/0xb10 [ 993.027680] __x64_sys_recvmmsg+0x20f/0x260 [ 993.028802] ? ksys_write+0x1a9/0x260 [ 993.029794] ? __do_sys_socketcall+0x600/0x600 [ 993.030977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 993.032349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 993.033690] do_syscall_64+0x33/0x40 20:43:14 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7f) 20:43:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x1000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 993.034663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 993.035891] RIP: 0033:0x7f9a8d697b19 [ 993.036855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 993.041620] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 993.043608] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 993.045457] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 993.047319] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 993.049160] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 993.051007] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:43:15 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:43:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 36) 20:43:15 executing program 2: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:43:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:43:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:43:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080108, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:43:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x2000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:43:15 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7f) [ 993.343364] FAULT_INJECTION: forcing a failure. [ 993.343364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.345529] CPU: 1 PID: 7238 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 993.346630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 993.348082] Call Trace: [ 993.348466] dump_stack+0x107/0x167 [ 993.349029] should_fail.cold+0x5/0xa [ 993.349670] _copy_from_user+0x2e/0x1b0 [ 993.350262] __copy_msghdr_from_user+0x91/0x4b0 [ 993.351120] ? __ia32_sys_shutdown+0x80/0x80 [ 993.351871] ? __lock_acquire+0x1657/0x5b00 [ 993.352548] ___sys_recvmsg+0xd5/0x200 [ 993.353177] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 993.354079] ? __fget_files+0x2cf/0x520 [ 993.354727] ? lock_acquire+0x197/0x470 [ 993.355332] ? find_held_lock+0x2c/0x110 [ 993.356008] ? __might_fault+0xd3/0x180 [ 993.356589] ? lock_downgrade+0x6d0/0x6d0 [ 993.357205] do_recvmmsg+0x24c/0x6d0 [ 993.357753] ? ___sys_recvmsg+0x200/0x200 [ 993.358457] ? lock_downgrade+0x6d0/0x6d0 [ 993.359238] ? ksys_write+0x12d/0x260 [ 993.359803] ? wait_for_completion_io+0x270/0x270 [ 993.360529] ? rcu_read_lock_any_held+0x75/0xa0 [ 993.361278] ? vfs_write+0x354/0xb10 [ 993.361903] __x64_sys_recvmmsg+0x20f/0x260 [ 993.362718] ? ksys_write+0x1a9/0x260 [ 993.363263] ? __do_sys_socketcall+0x600/0x600 [ 993.363938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 993.364724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 993.365544] do_syscall_64+0x33/0x40 [ 993.366072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 993.366796] RIP: 0033:0x7f9a8d697b19 [ 993.367326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 993.370206] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 993.371282] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 993.372297] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 993.373302] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 993.374302] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 993.375312] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:43:15 executing program 2: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)={0x2, 0x0, 0x1}) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:43:29 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) 20:43:29 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:43:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x4000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:43:29 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7f) 20:43:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:43:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 37) 20:43:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:43:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080111, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1007.607433] FAULT_INJECTION: forcing a failure. [ 1007.607433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.609994] CPU: 1 PID: 7264 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1007.611302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1007.612899] Call Trace: [ 1007.613406] dump_stack+0x107/0x167 [ 1007.614104] should_fail.cold+0x5/0xa [ 1007.614851] _copy_from_user+0x2e/0x1b0 [ 1007.615628] __copy_msghdr_from_user+0x91/0x4b0 [ 1007.616521] ? __ia32_sys_shutdown+0x80/0x80 [ 1007.617368] ? __lock_acquire+0x1657/0x5b00 [ 1007.618206] ___sys_recvmsg+0xd5/0x200 [ 1007.618953] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1007.619876] ? __fget_files+0x2cf/0x520 [ 1007.620622] ? lock_acquire+0x197/0x470 [ 1007.621368] ? find_held_lock+0x2c/0x110 [ 1007.622143] ? __might_fault+0xd3/0x180 [ 1007.622895] ? lock_downgrade+0x6d0/0x6d0 [ 1007.623706] do_recvmmsg+0x24c/0x6d0 [ 1007.624418] ? ___sys_recvmsg+0x200/0x200 [ 1007.625202] ? lock_downgrade+0x6d0/0x6d0 [ 1007.625993] ? ksys_write+0x12d/0x260 [ 1007.626723] ? wait_for_completion_io+0x270/0x270 [ 1007.627643] ? rcu_read_lock_any_held+0x75/0xa0 [ 1007.628521] ? vfs_write+0x354/0xb10 [ 1007.629226] __x64_sys_recvmmsg+0x20f/0x260 [ 1007.630048] ? ksys_write+0x1a9/0x260 [ 1007.630766] ? __do_sys_socketcall+0x600/0x600 [ 1007.631634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1007.632625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.633602] do_syscall_64+0x33/0x40 [ 1007.634289] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1007.635263] RIP: 0033:0x7f9a8d697b19 [ 1007.635977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.639478] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1007.640897] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1007.642211] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1007.643578] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.645243] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1007.646742] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:43:29 executing program 2: r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r1) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:43:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:43:45 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x8001) sendfile(r0, 0xffffffffffffffff, 0x0, 0x400000000) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:43:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:43:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:43:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:43:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x8000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:43:45 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:43:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 38) 20:43:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:43:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1024.047722] FAULT_INJECTION: forcing a failure. [ 1024.047722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.050295] CPU: 1 PID: 7295 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1024.051812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1024.053615] Call Trace: [ 1024.054193] dump_stack+0x107/0x167 [ 1024.054994] should_fail.cold+0x5/0xa [ 1024.055847] _copy_from_user+0x2e/0x1b0 [ 1024.056723] __copy_msghdr_from_user+0x91/0x4b0 [ 1024.057740] ? __ia32_sys_shutdown+0x80/0x80 [ 1024.058863] ? __lock_acquire+0x1657/0x5b00 [ 1024.060056] ___sys_recvmsg+0xd5/0x200 [ 1024.060908] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1024.061976] ? __fget_files+0x2cf/0x520 [ 1024.062852] ? lock_acquire+0x197/0x470 [ 1024.063767] ? find_held_lock+0x2c/0x110 [ 1024.064875] ? __might_fault+0xd3/0x180 [ 1024.065731] ? lock_downgrade+0x6d0/0x6d0 [ 1024.066647] do_recvmmsg+0x24c/0x6d0 [ 1024.067446] ? ___sys_recvmsg+0x200/0x200 [ 1024.068433] ? lock_downgrade+0x6d0/0x6d0 [ 1024.069498] ? ksys_write+0x12d/0x260 [ 1024.070320] ? wait_for_completion_io+0x270/0x270 [ 1024.071344] ? rcu_read_lock_any_held+0x75/0xa0 [ 1024.072478] ? vfs_write+0x354/0xb10 [ 1024.073487] __x64_sys_recvmmsg+0x20f/0x260 [ 1024.074408] ? ksys_write+0x1a9/0x260 [ 1024.075216] ? __do_sys_socketcall+0x600/0x600 [ 1024.076273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1024.077432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1024.078659] do_syscall_64+0x33/0x40 [ 1024.079446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1024.080534] RIP: 0033:0x7f9a8d697b19 [ 1024.081310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1024.085493] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1024.087415] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1024.088928] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1024.090603] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1024.092232] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1024.093720] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:43:46 executing program 2: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x200, 0x5, {{0x5, 0x4, 0x2, 0x14, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast2, @broadcast}}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x88, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x10001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xe3e8}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCCONS(r5, 0x541d) 20:43:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:43:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:43:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x10000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:43:46 executing program 2: eventfd2(0x0, 0x180001) syz_open_dev$tty20(0xc, 0x4, 0x0) 20:43:46 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:43:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:43:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 39) 20:43:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 1024.397249] FAULT_INJECTION: forcing a failure. [ 1024.397249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.398688] CPU: 0 PID: 7326 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1024.399507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1024.400506] Call Trace: [ 1024.400820] dump_stack+0x107/0x167 [ 1024.401255] should_fail.cold+0x5/0xa [ 1024.401711] _copy_from_user+0x2e/0x1b0 [ 1024.402192] __copy_msghdr_from_user+0x91/0x4b0 [ 1024.402744] ? __ia32_sys_shutdown+0x80/0x80 [ 1024.403278] ? __lock_acquire+0x1657/0x5b00 [ 1024.403805] ___sys_recvmsg+0xd5/0x200 [ 1024.404274] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1024.404851] ? __fget_files+0x2cf/0x520 [ 1024.405322] ? lock_acquire+0x197/0x470 [ 1024.405792] ? find_held_lock+0x2c/0x110 [ 1024.406282] ? __might_fault+0xd3/0x180 [ 1024.406749] ? lock_downgrade+0x6d0/0x6d0 [ 1024.407233] do_recvmmsg+0x24c/0x6d0 [ 1024.407681] ? ___sys_recvmsg+0x200/0x200 [ 1024.408163] ? lock_downgrade+0x6d0/0x6d0 [ 1024.408636] ? ksys_write+0x12d/0x260 [ 1024.409090] ? wait_for_completion_io+0x270/0x270 [ 1024.409638] ? rcu_read_lock_any_held+0x75/0xa0 [ 1024.410173] ? vfs_write+0x354/0xb10 [ 1024.410597] __x64_sys_recvmmsg+0x20f/0x260 [ 1024.411085] ? ksys_write+0x1a9/0x260 [ 1024.411522] ? __do_sys_socketcall+0x600/0x600 [ 1024.412060] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1024.412651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1024.413240] do_syscall_64+0x33/0x40 [ 1024.413666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1024.414256] RIP: 0033:0x7f9a8d697b19 [ 1024.414683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1024.416801] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1024.417670] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1024.418481] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1024.419308] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1024.420136] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1024.420955] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:44:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:44:01 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) 20:44:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080f00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:44:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x21030000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:44:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:44:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 40) 20:44:01 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:44:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:44:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2083f00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1039.941881] FAULT_INJECTION: forcing a failure. [ 1039.941881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.944430] CPU: 1 PID: 7348 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1039.945875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1039.947653] Call Trace: [ 1039.948236] dump_stack+0x107/0x167 [ 1039.949021] should_fail.cold+0x5/0xa [ 1039.949954] _copy_from_user+0x2e/0x1b0 [ 1039.950816] __copy_msghdr_from_user+0x91/0x4b0 [ 1039.951815] ? __ia32_sys_shutdown+0x80/0x80 [ 1039.952765] ? __lock_acquire+0x1657/0x5b00 [ 1039.953704] ___sys_recvmsg+0xd5/0x200 [ 1039.954539] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1039.955587] ? trace_hardirqs_on+0x5b/0x180 [ 1039.956524] ? lock_acquire+0x197/0x470 [ 1039.957374] ? find_held_lock+0x2c/0x110 [ 1039.958238] ? __might_fault+0xd3/0x180 [ 1039.959094] ? lock_downgrade+0x6d0/0x6d0 [ 1039.960012] do_recvmmsg+0x24c/0x6d0 [ 1039.960816] ? ___sys_recvmsg+0x200/0x200 [ 1039.961702] ? lock_downgrade+0x6d0/0x6d0 [ 1039.962598] ? ksys_write+0x12d/0x260 [ 1039.963426] ? wait_for_completion_io+0x270/0x270 [ 1039.964467] ? rcu_read_lock_any_held+0x75/0xa0 [ 1039.965463] ? vfs_write+0x354/0xb10 [ 1039.966265] __x64_sys_recvmmsg+0x20f/0x260 [ 1039.967190] ? ksys_write+0x1a9/0x260 [ 1039.968009] ? __do_sys_socketcall+0x600/0x600 [ 1039.968988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1039.970113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1039.971220] do_syscall_64+0x33/0x40 [ 1039.972026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1039.973119] RIP: 0033:0x7f9a8d697b19 [ 1039.973909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1039.977858] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1039.979481] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1039.980998] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1039.982517] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1039.984039] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1039.985554] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:44:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 41) 20:44:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:44:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:44:02 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000000)=""/124) 20:44:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x64000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:44:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:44:02 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:44:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2084000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1040.173060] FAULT_INJECTION: forcing a failure. [ 1040.173060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.174490] CPU: 0 PID: 7364 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1040.175260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1040.176210] Call Trace: [ 1040.176530] dump_stack+0x107/0x167 [ 1040.177068] should_fail.cold+0x5/0xa [ 1040.177627] _copy_from_user+0x2e/0x1b0 [ 1040.178211] __copy_msghdr_from_user+0x91/0x4b0 [ 1040.178879] ? __ia32_sys_shutdown+0x80/0x80 [ 1040.179519] ? find_held_lock+0x2c/0x110 [ 1040.180123] ? finish_task_switch+0x126/0x5d0 [ 1040.180776] ? lock_downgrade+0x6d0/0x6d0 [ 1040.181269] ___sys_recvmsg+0xd5/0x200 [ 1040.181706] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1040.182259] ? trace_hardirqs_on+0x5b/0x180 [ 1040.182742] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1040.183242] ? finish_task_switch+0x126/0x5d0 [ 1040.183740] ? finish_task_switch+0xef/0x5d0 [ 1040.184242] ? __switch_to+0x572/0xf70 [ 1040.184674] ? __switch_to_asm+0x3a/0x60 [ 1040.185128] ? __switch_to_asm+0x34/0x60 [ 1040.185581] ? __schedule+0x82c/0x1ea0 [ 1040.186021] ? io_schedule_timeout+0x140/0x140 [ 1040.186539] do_recvmmsg+0x24c/0x6d0 [ 1040.186969] ? ___sys_recvmsg+0x200/0x200 [ 1040.187431] ? lock_downgrade+0x6d0/0x6d0 [ 1040.187907] ? ksys_write+0x12d/0x260 [ 1040.188339] ? wait_for_completion_io+0x270/0x270 [ 1040.188880] ? rcu_read_lock_any_held+0x75/0xa0 [ 1040.189396] ? vfs_write+0x354/0xb10 [ 1040.189812] __x64_sys_recvmmsg+0x20f/0x260 [ 1040.190295] ? ksys_write+0x1a9/0x260 [ 1040.190730] ? __do_sys_socketcall+0x600/0x600 [ 1040.191257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1040.192028] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1040.192773] do_syscall_64+0x33/0x40 [ 1040.193307] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1040.194052] RIP: 0033:0x7f9a8d697b19 [ 1040.194590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1040.197229] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1040.198325] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1040.199355] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1040.200377] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1040.201403] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1040.202434] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:44:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:44:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:44:15 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:44:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 42) 20:44:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x80040000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:44:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x1e) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) r3 = socket$inet(0xa, 0x3, 0xff) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000180), 0x4) r5 = dup(r4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000180), 0x4) socket$inet(0x2, 0x3, 0x59a) dup(r7) dup(r2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xf4) 20:44:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:44:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 1053.343663] FAULT_INJECTION: forcing a failure. [ 1053.343663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.346377] CPU: 0 PID: 7393 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1053.347880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.349842] Call Trace: [ 1053.350426] dump_stack+0x107/0x167 [ 1053.351229] should_fail.cold+0x5/0xa [ 1053.352080] _copy_from_user+0x2e/0x1b0 [ 1053.352953] __copy_msghdr_from_user+0x91/0x4b0 [ 1053.353978] ? __ia32_sys_shutdown+0x80/0x80 [ 1053.354945] ? __lock_acquire+0x1657/0x5b00 [ 1053.355915] ___sys_recvmsg+0xd5/0x200 [ 1053.356774] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1053.357855] ? __fget_files+0x2cf/0x520 [ 1053.358728] ? lock_acquire+0x197/0x470 [ 1053.359599] ? find_held_lock+0x2c/0x110 [ 1053.360500] ? __might_fault+0xd3/0x180 [ 1053.361373] ? lock_downgrade+0x6d0/0x6d0 [ 1053.362306] do_recvmmsg+0x24c/0x6d0 [ 1053.363128] ? ___sys_recvmsg+0x200/0x200 [ 1053.364048] ? lock_downgrade+0x6d0/0x6d0 [ 1053.364965] ? ksys_write+0x12d/0x260 [ 1053.365813] ? wait_for_completion_io+0x270/0x270 [ 1053.366875] ? rcu_read_lock_any_held+0x75/0xa0 [ 1053.367892] ? vfs_write+0x354/0xb10 [ 1053.368713] __x64_sys_recvmmsg+0x20f/0x260 [ 1053.369658] ? ksys_write+0x1a9/0x260 [ 1053.370491] ? __do_sys_socketcall+0x600/0x600 [ 1053.371498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1053.372659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.373796] do_syscall_64+0x33/0x40 [ 1053.374610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1053.375719] RIP: 0033:0x7f9a8d697b19 [ 1053.376547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.380590] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1053.382250] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1053.383814] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1053.385371] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.386932] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1053.388508] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:44:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:44:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:44:15 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:44:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 43) 20:44:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x8cffffff) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:44:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 20:44:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:44:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:44:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7f) 20:44:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1053.715268] FAULT_INJECTION: forcing a failure. [ 1053.715268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.717920] CPU: 0 PID: 7419 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1053.719358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.721272] Call Trace: [ 1053.721860] dump_stack+0x107/0x167 [ 1053.722627] should_fail.cold+0x5/0xa [ 1053.723433] _copy_from_user+0x2e/0x1b0 [ 1053.724291] __copy_msghdr_from_user+0x91/0x4b0 [ 1053.725276] ? __ia32_sys_shutdown+0x80/0x80 [ 1053.726197] ? __lock_acquire+0x1657/0x5b00 [ 1053.727122] ___sys_recvmsg+0xd5/0x200 [ 1053.727939] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1053.728984] ? __fget_files+0x2cf/0x520 [ 1053.729834] ? lock_acquire+0x197/0x470 [ 1053.730675] ? find_held_lock+0x2c/0x110 [ 1053.731541] ? __might_fault+0xd3/0x180 [ 1053.732387] ? lock_downgrade+0x6d0/0x6d0 [ 1053.733284] do_recvmmsg+0x24c/0x6d0 [ 1053.734090] ? ___sys_recvmsg+0x200/0x200 [ 1053.734963] ? lock_downgrade+0x6d0/0x6d0 [ 1053.735843] ? ksys_write+0x12d/0x260 [ 1053.736666] ? wait_for_completion_io+0x270/0x270 [ 1053.737692] ? rcu_read_lock_any_held+0x75/0xa0 [ 1053.738670] ? vfs_write+0x354/0xb10 [ 1053.739460] __x64_sys_recvmmsg+0x20f/0x260 [ 1053.740372] ? ksys_write+0x1a9/0x260 [ 1053.741175] ? __do_sys_socketcall+0x600/0x600 [ 1053.742139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1053.743248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.744342] do_syscall_64+0x33/0x40 [ 1053.745132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1053.746210] RIP: 0033:0x7f9a8d697b19 [ 1053.747002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.750866] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1053.752477] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1053.753982] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1053.755487] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.756992] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1053.758490] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:44:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:44:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 44) [ 1054.054055] FAULT_INJECTION: forcing a failure. [ 1054.054055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.057248] CPU: 0 PID: 7437 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1054.059017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.061102] Call Trace: [ 1054.061770] dump_stack+0x107/0x167 [ 1054.062688] should_fail.cold+0x5/0xa [ 1054.063648] _copy_from_user+0x2e/0x1b0 [ 1054.064655] __copy_msghdr_from_user+0x91/0x4b0 [ 1054.065807] ? __ia32_sys_shutdown+0x80/0x80 [ 1054.066898] ? __lock_acquire+0x1657/0x5b00 [ 1054.068010] ___sys_recvmsg+0xd5/0x200 [ 1054.068979] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1054.070224] ? lock_acquire+0x197/0x470 [ 1054.071221] ? find_held_lock+0x2c/0x110 [ 1054.072272] ? __might_fault+0xd3/0x180 [ 1054.073258] ? lock_downgrade+0x6d0/0x6d0 [ 1054.074316] do_recvmmsg+0x24c/0x6d0 [ 1054.075253] ? ___sys_recvmsg+0x200/0x200 [ 1054.076299] ? lock_downgrade+0x6d0/0x6d0 [ 1054.077337] ? ksys_write+0x12d/0x260 [ 1054.078304] ? wait_for_completion_io+0x270/0x270 [ 1054.079508] ? rcu_read_lock_any_held+0x75/0xa0 [ 1054.080678] ? vfs_write+0x354/0xb10 [ 1054.081612] __x64_sys_recvmmsg+0x20f/0x260 [ 1054.082685] ? ksys_write+0x1a9/0x260 [ 1054.083637] ? __do_sys_socketcall+0x600/0x600 [ 1054.084781] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.086088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.087375] do_syscall_64+0x33/0x40 [ 1054.088318] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.089591] RIP: 0033:0x7f9a8d697b19 [ 1054.090514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.095051] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1054.096950] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1054.098729] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1054.100491] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.102244] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1054.104000] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:44:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 45) 20:44:31 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:44:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:44:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:44:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xe4ffffff) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:44:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:44:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7f) 20:44:31 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) linkat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x400) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xc) [ 1069.593067] FAULT_INJECTION: forcing a failure. [ 1069.593067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.594842] CPU: 0 PID: 7451 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1069.595841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1069.597073] Call Trace: [ 1069.597476] dump_stack+0x107/0x167 [ 1069.598016] should_fail.cold+0x5/0xa [ 1069.598590] _copy_from_user+0x2e/0x1b0 [ 1069.599186] __copy_msghdr_from_user+0x91/0x4b0 [ 1069.599885] ? __ia32_sys_shutdown+0x80/0x80 [ 1069.600556] ? __lock_acquire+0x1657/0x5b00 [ 1069.601216] ___sys_recvmsg+0xd5/0x200 [ 1069.601792] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1069.602531] ? __fget_files+0x2cf/0x520 [ 1069.603122] ? lock_acquire+0x197/0x470 [ 1069.603705] ? find_held_lock+0x2c/0x110 [ 1069.604321] ? __might_fault+0xd3/0x180 [ 1069.604915] ? lock_downgrade+0x6d0/0x6d0 [ 1069.605545] do_recvmmsg+0x24c/0x6d0 [ 1069.606100] ? ___sys_recvmsg+0x200/0x200 [ 1069.606710] ? lock_downgrade+0x6d0/0x6d0 [ 1069.607341] ? ksys_write+0x12d/0x260 [ 1069.607895] ? wait_for_completion_io+0x270/0x270 [ 1069.609076] ? rcu_read_lock_any_held+0x75/0xa0 [ 1069.610283] ? vfs_write+0x354/0xb10 [ 1069.611254] __x64_sys_recvmmsg+0x20f/0x260 [ 1069.612389] ? ksys_write+0x1a9/0x260 [ 1069.613271] ? __do_sys_socketcall+0x600/0x600 [ 1069.614331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1069.615523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1069.616739] do_syscall_64+0x33/0x40 [ 1069.617606] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1069.618790] RIP: 0033:0x7f9a8d697b19 [ 1069.619653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1069.623949] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1069.625731] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1069.627398] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1069.629069] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.630737] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1069.632397] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:44:31 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 20:44:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xeaffffff) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:44:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:44:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7f) 20:44:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 46) 20:44:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xf6ffffff) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:44:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:44:46 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x0, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:44:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:44:46 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x6, 0x4, 0x200, 0x1}) 20:44:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1084.888289] FAULT_INJECTION: forcing a failure. [ 1084.888289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.891350] CPU: 0 PID: 7483 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1084.893025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1084.894904] Call Trace: [ 1084.895489] dump_stack+0x107/0x167 [ 1084.896358] should_fail.cold+0x5/0xa [ 1084.897241] _copy_from_user+0x2e/0x1b0 [ 1084.898167] __copy_msghdr_from_user+0x91/0x4b0 [ 1084.899177] ? __ia32_sys_shutdown+0x80/0x80 [ 1084.900199] ? __lock_acquire+0x1657/0x5b00 [ 1084.901246] ___sys_recvmsg+0xd5/0x200 [ 1084.902151] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1084.903293] ? __fget_files+0x2cf/0x520 [ 1084.904217] ? lock_acquire+0x197/0x470 [ 1084.905116] ? find_held_lock+0x2c/0x110 [ 1084.906081] ? __might_fault+0xd3/0x180 [ 1084.906995] ? lock_downgrade+0x6d0/0x6d0 [ 1084.907975] do_recvmmsg+0x24c/0x6d0 [ 1084.908830] ? ___sys_recvmsg+0x200/0x200 [ 1084.909755] ? lock_downgrade+0x6d0/0x6d0 [ 1084.910714] ? ksys_write+0x12d/0x260 [ 1084.911602] ? wait_for_completion_io+0x270/0x270 [ 1084.912692] ? rcu_read_lock_any_held+0x75/0xa0 [ 1084.913735] ? vfs_write+0x354/0xb10 [ 1084.914599] __x64_sys_recvmmsg+0x20f/0x260 [ 1084.915606] ? ksys_write+0x1a9/0x260 [ 1084.916493] ? __do_sys_socketcall+0x600/0x600 [ 1084.917490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1084.918709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1084.919904] do_syscall_64+0x33/0x40 [ 1084.920746] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1084.921880] RIP: 0033:0x7f9a8d697b19 [ 1084.922750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1084.926941] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1084.928721] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1084.930396] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1084.931969] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1084.933638] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1084.935209] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:44:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, 0x0) 20:44:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:44:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xfbffffff) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:44:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 47) 20:44:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xeaffffff) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:44:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, 0x0) 20:44:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:44:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:44:47 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x0, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 1085.222342] FAULT_INJECTION: forcing a failure. [ 1085.222342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.224305] CPU: 1 PID: 7506 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1085.225437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.226764] Call Trace: [ 1085.227198] dump_stack+0x107/0x167 [ 1085.227784] should_fail.cold+0x5/0xa [ 1085.228410] _copy_from_user+0x2e/0x1b0 [ 1085.229061] __copy_msghdr_from_user+0x91/0x4b0 [ 1085.229818] ? __ia32_sys_shutdown+0x80/0x80 [ 1085.230537] ? __lock_acquire+0x1657/0x5b00 [ 1085.231245] ___sys_recvmsg+0xd5/0x200 [ 1085.231870] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1085.232674] ? trace_hardirqs_on+0x5b/0x180 [ 1085.233398] ? lock_acquire+0x197/0x470 [ 1085.234036] ? find_held_lock+0x2c/0x110 [ 1085.234700] ? __might_fault+0xd3/0x180 [ 1085.235350] ? lock_downgrade+0x6d0/0x6d0 [ 1085.236033] do_recvmmsg+0x24c/0x6d0 [ 1085.236645] ? ___sys_recvmsg+0x200/0x200 [ 1085.237311] ? lock_downgrade+0x6d0/0x6d0 [ 1085.237986] ? ksys_write+0x12d/0x260 [ 1085.238607] ? wait_for_completion_io+0x270/0x270 [ 1085.239389] ? rcu_read_lock_any_held+0x75/0xa0 [ 1085.240178] ? vfs_write+0x354/0xb10 [ 1085.240788] __x64_sys_recvmmsg+0x20f/0x260 [ 1085.241482] ? ksys_write+0x1a9/0x260 [ 1085.242101] ? __do_sys_socketcall+0x600/0x600 [ 1085.242839] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1085.243682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.244512] do_syscall_64+0x33/0x40 [ 1085.245117] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1085.245934] RIP: 0033:0x7f9a8d697b19 [ 1085.246531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.249484] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1085.250733] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1085.251919] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1085.253108] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.254281] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1085.255451] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:44:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 1) 20:44:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x12c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:44:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xfeffffff) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1085.457577] FAULT_INJECTION: forcing a failure. [ 1085.457577] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.460034] CPU: 0 PID: 7521 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1085.461499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.463263] Call Trace: [ 1085.463839] dump_stack+0x107/0x167 [ 1085.464628] should_fail.cold+0x5/0xa [ 1085.465451] ? getname_flags.part.0+0x50/0x4f0 [ 1085.466430] should_failslab+0x5/0x20 [ 1085.467239] kmem_cache_alloc+0x5b/0x310 [ 1085.468119] getname_flags.part.0+0x50/0x4f0 [ 1085.469074] getname_flags+0x9a/0xe0 [ 1085.469871] do_mkdirat+0x8f/0x2b0 [ 1085.470636] ? user_path_create+0xf0/0xf0 [ 1085.471531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1085.472659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.473767] do_syscall_64+0x33/0x40 [ 1085.474560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1085.475657] RIP: 0033:0x7fda13c6bc27 [ 1085.476453] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.480365] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1085.481994] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6bc27 [ 1085.483511] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1085.485038] RBP: 00007fda111e2040 R08: 0000000000000000 R09: 0000000002004070 [ 1085.486554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1085.488074] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 [ 1085.571937] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:45:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 48) 20:45:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:45:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, 0x0) 20:45:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xfffff000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:45:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x138}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:45:00 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x0, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:45:00 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 2) 20:45:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1098.511541] FAULT_INJECTION: forcing a failure. [ 1098.511541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.514532] CPU: 1 PID: 7541 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1098.516262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.518371] Call Trace: [ 1098.519043] dump_stack+0x107/0x167 [ 1098.519970] should_fail.cold+0x5/0xa [ 1098.520960] _copy_from_user+0x2e/0x1b0 [ 1098.521985] __copy_msghdr_from_user+0x91/0x4b0 [ 1098.523174] ? __ia32_sys_shutdown+0x80/0x80 [ 1098.524296] ? __lock_acquire+0x1657/0x5b00 [ 1098.525427] ___sys_recvmsg+0xd5/0x200 [ 1098.526425] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1098.527671] ? trace_hardirqs_on+0x5b/0x180 [ 1098.528792] ? lock_acquire+0x197/0x470 [ 1098.529807] ? find_held_lock+0x2c/0x110 [ 1098.530859] ? __might_fault+0xd3/0x180 [ 1098.531879] ? lock_downgrade+0x6d0/0x6d0 [ 1098.532956] do_recvmmsg+0x24c/0x6d0 [ 1098.533899] ? ___sys_recvmsg+0x200/0x200 [ 1098.534943] ? lock_downgrade+0x6d0/0x6d0 [ 1098.535992] ? ksys_write+0x12d/0x260 [ 1098.536982] ? wait_for_completion_io+0x270/0x270 [ 1098.538209] ? rcu_read_lock_any_held+0x75/0xa0 [ 1098.539379] ? vfs_write+0x354/0xb10 [ 1098.540321] __x64_sys_recvmmsg+0x20f/0x260 [ 1098.541410] ? ksys_write+0x1a9/0x260 [ 1098.542370] ? __do_sys_socketcall+0x600/0x600 [ 1098.543526] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.544854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1098.546015] do_syscall_64+0x33/0x40 [ 1098.546857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1098.548001] RIP: 0033:0x7f9a8d697b19 [ 1098.548839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.552954] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1098.554659] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1098.556254] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1098.557862] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.559465] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1098.561068] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:45:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:45:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 49) [ 1098.622582] FAULT_INJECTION: forcing a failure. [ 1098.622582] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.624947] CPU: 0 PID: 7551 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1098.625731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.626680] Call Trace: [ 1098.626991] dump_stack+0x107/0x167 [ 1098.627415] should_fail.cold+0x5/0xa [ 1098.627857] ? create_object.isra.0+0x3a/0xa20 [ 1098.628385] should_failslab+0x5/0x20 [ 1098.628833] kmem_cache_alloc+0x5b/0x310 [ 1098.629303] ? ksys_write+0x21a/0x260 [ 1098.629743] create_object.isra.0+0x3a/0xa20 [ 1098.630251] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1098.630840] kmem_cache_alloc+0x159/0x310 [ 1098.631328] getname_flags.part.0+0x50/0x4f0 [ 1098.631840] getname_flags+0x9a/0xe0 [ 1098.632279] do_mkdirat+0x8f/0x2b0 [ 1098.632703] ? user_path_create+0xf0/0xf0 [ 1098.633188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.633794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1098.634393] do_syscall_64+0x33/0x40 [ 1098.634823] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1098.635417] RIP: 0033:0x7fda13c6bc27 [ 1098.635849] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.637957] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1098.638831] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6bc27 [ 1098.639644] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1098.640462] RBP: 00007fda111e2040 R08: 0000000000000000 R09: 0000000002004070 [ 1098.641288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1098.642106] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:45:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x300}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:45:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 1098.674837] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:45:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xffffff7f) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:45:00 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0x0) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 1098.769371] FAULT_INJECTION: forcing a failure. [ 1098.769371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.770744] CPU: 0 PID: 7561 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1098.771524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.772471] Call Trace: [ 1098.772785] dump_stack+0x107/0x167 [ 1098.773198] should_fail.cold+0x5/0xa [ 1098.773638] _copy_from_user+0x2e/0x1b0 [ 1098.774095] __copy_msghdr_from_user+0x91/0x4b0 [ 1098.774631] ? __ia32_sys_shutdown+0x80/0x80 [ 1098.775133] ? __lock_acquire+0x1657/0x5b00 [ 1098.775636] ___sys_recvmsg+0xd5/0x200 [ 1098.776080] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1098.776645] ? __fget_files+0x2cf/0x520 [ 1098.777101] ? lock_acquire+0x197/0x470 [ 1098.777552] ? find_held_lock+0x2c/0x110 [ 1098.778021] ? __might_fault+0xd3/0x180 [ 1098.778476] ? lock_downgrade+0x6d0/0x6d0 [ 1098.778959] do_recvmmsg+0x24c/0x6d0 [ 1098.779389] ? ___sys_recvmsg+0x200/0x200 [ 1098.779863] ? lock_downgrade+0x6d0/0x6d0 [ 1098.780339] ? ksys_write+0x12d/0x260 [ 1098.780789] ? wait_for_completion_io+0x270/0x270 [ 1098.781341] ? rcu_read_lock_any_held+0x75/0xa0 [ 1098.781872] ? vfs_write+0x354/0xb10 [ 1098.782300] __x64_sys_recvmmsg+0x20f/0x260 [ 1098.782794] ? ksys_write+0x1a9/0x260 [ 1098.783228] ? __do_sys_socketcall+0x600/0x600 [ 1098.783752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.784349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1098.784945] do_syscall_64+0x33/0x40 [ 1098.785369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1098.785951] RIP: 0033:0x7f9a8d697b19 [ 1098.786376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.788468] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1098.789345] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1098.790162] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1098.790978] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.791790] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1098.792611] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:45:15 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0x0) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:45:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xffffff8c) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:45:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:45:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:45:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 3) 20:45:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 50) 20:45:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x408}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:45:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 1114.026404] FAULT_INJECTION: forcing a failure. [ 1114.026404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.028917] CPU: 1 PID: 7593 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1114.030360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1114.032112] Call Trace: [ 1114.032686] dump_stack+0x107/0x167 [ 1114.033457] should_fail.cold+0x5/0xa [ 1114.034275] _copy_from_user+0x2e/0x1b0 [ 1114.035126] __copy_msghdr_from_user+0x91/0x4b0 [ 1114.036115] ? __ia32_sys_shutdown+0x80/0x80 [ 1114.037047] ? __lock_acquire+0x1657/0x5b00 [ 1114.037988] ___sys_recvmsg+0xd5/0x200 [ 1114.038810] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1114.039840] ? __lockdep_reset_lock+0x180/0x180 [ 1114.040845] ? lock_acquire+0x197/0x470 [ 1114.041682] ? find_held_lock+0x2c/0x110 [ 1114.042542] ? __might_fault+0xd3/0x180 [ 1114.043393] ? lock_downgrade+0x6d0/0x6d0 [ 1114.044295] do_recvmmsg+0x24c/0x6d0 [ 1114.045105] ? ___sys_recvmsg+0x200/0x200 [ 1114.045981] ? lock_downgrade+0x6d0/0x6d0 [ 1114.046865] ? ksys_write+0x12d/0x260 [ 1114.047690] ? wait_for_completion_io+0x270/0x270 [ 1114.048727] ? rcu_read_lock_any_held+0x75/0xa0 [ 1114.049716] ? vfs_write+0x354/0xb10 [ 1114.050506] __x64_sys_recvmmsg+0x20f/0x260 [ 1114.051414] ? ksys_write+0x1a9/0x260 [ 1114.052221] ? __do_sys_socketcall+0x600/0x600 [ 1114.053202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1114.054313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1114.055409] do_syscall_64+0x33/0x40 [ 1114.056196] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1114.057287] RIP: 0033:0x7f9a8d697b19 [ 1114.058081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1114.061981] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 20:45:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xffffffe4) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1114.063581] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1114.065360] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1114.066866] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1114.068377] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1114.069894] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1114.079018] FAULT_INJECTION: forcing a failure. [ 1114.079018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.081525] CPU: 1 PID: 7594 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1114.083071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1114.084819] Call Trace: [ 1114.085377] dump_stack+0x107/0x167 [ 1114.086143] should_fail.cold+0x5/0xa [ 1114.086956] strncpy_from_user+0x34/0x470 [ 1114.087836] getname_flags.part.0+0x95/0x4f0 [ 1114.088772] getname_flags+0x9a/0xe0 [ 1114.089557] do_mkdirat+0x8f/0x2b0 [ 1114.090312] ? user_path_create+0xf0/0xf0 [ 1114.091187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1114.092285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1114.093376] do_syscall_64+0x33/0x40 [ 1114.094161] entry_SYSCALL_64_after_hwframe+0x67/0xd1 20:45:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x500}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1114.095233] RIP: 0033:0x7fda13c6bc27 [ 1114.096194] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1114.100105] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1114.101718] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6bc27 [ 1114.103224] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 1114.104737] RBP: 00007fda111e2040 R08: 0000000000000000 R09: 0000000002004070 [ 1114.106245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 1114.107751] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 [ 1114.124861] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:45:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 20:45:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 51) 20:45:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:45:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 4) 20:45:16 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0x0) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:45:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:45:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xffffffea) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1114.364908] FAULT_INJECTION: forcing a failure. [ 1114.364908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.367768] CPU: 1 PID: 7606 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1114.369166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1114.370847] Call Trace: [ 1114.371398] dump_stack+0x107/0x167 [ 1114.372139] should_fail.cold+0x5/0xa [ 1114.372937] _copy_from_user+0x2e/0x1b0 [ 1114.373748] __copy_msghdr_from_user+0x91/0x4b0 [ 1114.374696] ? __ia32_sys_shutdown+0x80/0x80 [ 1114.375588] ? __lock_acquire+0x1657/0x5b00 [ 1114.376487] ___sys_recvmsg+0xd5/0x200 [ 1114.377290] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1114.378287] ? trace_hardirqs_on+0x5b/0x180 [ 1114.379176] ? lock_acquire+0x197/0x470 [ 1114.379984] ? find_held_lock+0x2c/0x110 [ 1114.380832] ? __might_fault+0xd3/0x180 [ 1114.381635] ? lock_downgrade+0x6d0/0x6d0 [ 1114.382496] do_recvmmsg+0x24c/0x6d0 [ 1114.383264] ? ___sys_recvmsg+0x200/0x200 [ 1114.384106] ? lock_downgrade+0x6d0/0x6d0 [ 1114.384966] ? ksys_write+0x12d/0x260 [ 1114.385749] ? wait_for_completion_io+0x270/0x270 [ 1114.386729] ? rcu_read_lock_any_held+0x75/0xa0 [ 1114.387667] ? vfs_write+0x354/0xb10 [ 1114.388418] __x64_sys_recvmmsg+0x20f/0x260 [ 1114.389301] ? ksys_write+0x1a9/0x260 [ 1114.390076] ? __do_sys_socketcall+0x600/0x600 [ 1114.391010] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1114.392059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1114.393104] do_syscall_64+0x33/0x40 [ 1114.393857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1114.394880] RIP: 0033:0x7f9a8d697b19 [ 1114.395640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1114.399354] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1114.400901] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1114.402331] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1114.403754] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1114.405193] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1114.406710] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1114.518925] FAULT_INJECTION: forcing a failure. [ 1114.518925] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.521639] CPU: 0 PID: 7612 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1114.523265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1114.525226] Call Trace: [ 1114.525860] dump_stack+0x107/0x167 [ 1114.526729] should_fail.cold+0x5/0xa [ 1114.527647] should_failslab+0x5/0x20 [ 1114.528551] __kmalloc_track_caller+0x79/0x370 [ 1114.529653] ? strndup_user+0x74/0xe0 [ 1114.530554] ? getname_flags.part.0+0x1dd/0x4f0 [ 1114.531680] memdup_user+0x22/0xd0 [ 1114.532537] strndup_user+0x74/0xe0 [ 1114.533529] __x64_sys_mount+0x133/0x300 [ 1114.534496] ? copy_mnt_ns+0xa00/0xa00 [ 1114.535434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1114.536688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1114.537919] do_syscall_64+0x33/0x40 [ 1114.538815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1114.540034] RIP: 0033:0x7fda13c6e04a [ 1114.540928] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1114.545292] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1114.547100] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1114.548793] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1114.550478] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1114.552157] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1114.553842] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:45:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x81c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:45:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:45:30 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0xa, 0x3, 0xff) r5 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:45:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:45:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) (fail_nth: 1) 20:45:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 52) 20:45:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 5) 20:45:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xfffffff6) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1128.722199] FAULT_INJECTION: forcing a failure. [ 1128.722199] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.724644] CPU: 0 PID: 7632 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1128.726226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1128.727984] Call Trace: [ 1128.728550] dump_stack+0x107/0x167 [ 1128.729347] should_fail.cold+0x5/0xa [ 1128.730163] ? create_object.isra.0+0x3a/0xa20 [ 1128.731145] should_failslab+0x5/0x20 [ 1128.731956] kmem_cache_alloc+0x5b/0x310 [ 1128.732843] create_object.isra.0+0x3a/0xa20 [ 1128.733778] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1128.734869] __kmalloc_track_caller+0x177/0x370 [ 1128.735852] ? strndup_user+0x74/0xe0 [ 1128.736664] ? getname_flags.part.0+0x1dd/0x4f0 [ 1128.737674] memdup_user+0x22/0xd0 [ 1128.738436] strndup_user+0x74/0xe0 [ 1128.739214] __x64_sys_mount+0x133/0x300 [ 1128.740077] ? copy_mnt_ns+0xa00/0xa00 [ 1128.740926] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1128.742038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1128.743148] do_syscall_64+0x33/0x40 [ 1128.743941] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1128.745039] RIP: 0033:0x7fda13c6e04a [ 1128.745827] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1128.749726] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1128.751337] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1128.752854] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1128.754372] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1128.755879] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1128.757407] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:45:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x1100}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1128.774635] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1128.784470] FAULT_INJECTION: forcing a failure. [ 1128.784470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.787054] CPU: 0 PID: 7637 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1128.788504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1128.790267] Call Trace: [ 1128.790828] dump_stack+0x107/0x167 [ 1128.791603] should_fail.cold+0x5/0xa [ 1128.792419] _copy_to_user+0x2e/0x180 [ 1128.793247] simple_read_from_buffer+0xcc/0x160 [ 1128.794243] proc_fail_nth_read+0x198/0x230 20:45:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1128.795157] ? proc_sessionid_read+0x230/0x230 [ 1128.796309] ? security_file_permission+0xb1/0xe0 [ 1128.797347] ? proc_sessionid_read+0x230/0x230 [ 1128.798312] vfs_read+0x228/0x620 [ 1128.799065] ksys_read+0x12d/0x260 [ 1128.799817] ? vfs_write+0xb10/0xb10 [ 1128.800616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1128.801728] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1128.802825] do_syscall_64+0x33/0x40 [ 1128.803614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1128.804691] RIP: 0033:0x7ff6d50ac69c [ 1128.805484] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1128.809386] RSP: 002b:00007ff6d266f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1128.810988] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff6d50ac69c [ 1128.812490] RDX: 000000000000000f RSI: 00007ff6d266f1e0 RDI: 0000000000000004 [ 1128.814000] RBP: 00007ff6d266f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1128.815505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.817008] R13: 00007fffc84a6eaf R14: 00007ff6d266f300 R15: 0000000000022000 [ 1128.822765] FAULT_INJECTION: forcing a failure. [ 1128.822765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.825420] CPU: 0 PID: 7639 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1128.826979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1128.828727] Call Trace: [ 1128.829291] dump_stack+0x107/0x167 [ 1128.830059] should_fail.cold+0x5/0xa [ 1128.830865] _copy_from_user+0x2e/0x1b0 [ 1128.831707] __copy_msghdr_from_user+0x91/0x4b0 [ 1128.832687] ? __ia32_sys_shutdown+0x80/0x80 [ 1128.833618] ? __lock_acquire+0x1657/0x5b00 [ 1128.834548] ___sys_recvmsg+0xd5/0x200 [ 1128.835369] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1128.836410] ? __lockdep_reset_lock+0x180/0x180 [ 1128.837400] ? __fget_files+0x2cf/0x520 [ 1128.838243] ? lock_acquire+0x197/0x470 [ 1128.839082] ? find_held_lock+0x2c/0x110 [ 1128.839949] ? __might_fault+0xd3/0x180 [ 1128.840792] ? lock_downgrade+0x6d0/0x6d0 [ 1128.841692] do_recvmmsg+0x24c/0x6d0 [ 1128.842490] ? ___sys_recvmsg+0x200/0x200 [ 1128.843372] ? lock_downgrade+0x6d0/0x6d0 [ 1128.844264] ? ksys_write+0x12d/0x260 [ 1128.845088] ? wait_for_completion_io+0x270/0x270 [ 1128.846102] ? rcu_read_lock_any_held+0x75/0xa0 [ 1128.847076] ? vfs_write+0x354/0xb10 [ 1128.847870] __x64_sys_recvmmsg+0x20f/0x260 [ 1128.848782] ? ksys_write+0x1a9/0x260 [ 1128.849598] ? __do_sys_socketcall+0x600/0x600 [ 1128.850567] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1128.851672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1128.852764] do_syscall_64+0x33/0x40 [ 1128.853557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1128.854636] RIP: 0033:0x7f9a8d697b19 [ 1128.855416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1128.859314] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1128.860914] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1128.862426] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1128.863931] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1128.865441] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1128.866938] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:45:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xfffffffb) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:45:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 6) 20:45:30 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0xa, 0x3, 0xff) r5 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:45:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:45:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:45:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 53) [ 1129.188527] FAULT_INJECTION: forcing a failure. [ 1129.188527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.191168] CPU: 0 PID: 7659 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1129.192620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1129.194382] Call Trace: [ 1129.194950] dump_stack+0x107/0x167 [ 1129.195738] should_fail.cold+0x5/0xa [ 1129.196566] _copy_from_user+0x2e/0x1b0 20:45:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xfffffffe) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1129.197440] memdup_user+0x65/0xd0 [ 1129.198361] strndup_user+0x74/0xe0 [ 1129.199166] __x64_sys_mount+0x133/0x300 [ 1129.200054] ? copy_mnt_ns+0xa00/0xa00 [ 1129.200926] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1129.202071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1129.203204] do_syscall_64+0x33/0x40 [ 1129.204022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1129.205143] RIP: 0033:0x7fda13c6e04a [ 1129.205957] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1129.209964] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1129.211636] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1129.213201] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1129.214766] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1129.216330] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1129.217899] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 [ 1129.255708] FAULT_INJECTION: forcing a failure. [ 1129.255708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.258390] CPU: 0 PID: 7663 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1129.259885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1129.261703] Call Trace: [ 1129.262275] dump_stack+0x107/0x167 [ 1129.263071] should_fail.cold+0x5/0xa [ 1129.263903] _copy_from_user+0x2e/0x1b0 [ 1129.264769] __copy_msghdr_from_user+0x91/0x4b0 [ 1129.265788] ? __ia32_sys_shutdown+0x80/0x80 [ 1129.266744] ? __lock_acquire+0x1657/0x5b00 [ 1129.267706] ___sys_recvmsg+0xd5/0x200 [ 1129.268550] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1129.269616] ? __lockdep_reset_lock+0x180/0x180 [ 1129.270621] ? __fget_files+0x2cf/0x520 [ 1129.271498] ? lock_acquire+0x197/0x470 [ 1129.272358] ? find_held_lock+0x2c/0x110 [ 1129.273254] ? __might_fault+0xd3/0x180 [ 1129.274119] ? lock_downgrade+0x6d0/0x6d0 [ 1129.275041] do_recvmmsg+0x24c/0x6d0 [ 1129.275857] ? ___sys_recvmsg+0x200/0x200 [ 1129.276755] ? lock_downgrade+0x6d0/0x6d0 [ 1129.277678] ? ksys_write+0x12d/0x260 [ 1129.278516] ? wait_for_completion_io+0x270/0x270 [ 1129.279565] ? rcu_read_lock_any_held+0x75/0xa0 [ 1129.280575] ? vfs_write+0x354/0xb10 [ 1129.281392] __x64_sys_recvmmsg+0x20f/0x260 [ 1129.282326] ? ksys_write+0x1a9/0x260 [ 1129.283153] ? __do_sys_socketcall+0x600/0x600 [ 1129.284151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1129.285298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1129.286417] do_syscall_64+0x33/0x40 [ 1129.287227] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1129.288338] RIP: 0033:0x7f9a8d697b19 [ 1129.289156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1129.293159] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1129.294809] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1129.296356] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1129.297905] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1129.299443] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1129.300996] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:45:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x1c08}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:45:45 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0xa, 0x3, 0xff) r5 = dup(0xffffffffffffffff) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:45:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:45:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x2, &(0x7f0000000000)=0x7f) 20:45:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 7) 20:45:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 54) 20:45:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xcc2bec4b42) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:45:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 1143.760076] FAULT_INJECTION: forcing a failure. [ 1143.760076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.761825] CPU: 1 PID: 7679 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1143.761833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1143.761837] Call Trace: [ 1143.761856] dump_stack+0x107/0x167 [ 1143.761870] should_fail.cold+0x5/0xa [ 1143.761889] _copy_from_user+0x2e/0x1b0 [ 1143.761907] __copy_msghdr_from_user+0x91/0x4b0 [ 1143.761921] ? __ia32_sys_shutdown+0x80/0x80 [ 1143.761935] ? __lock_acquire+0x1657/0x5b00 [ 1143.761960] ___sys_recvmsg+0xd5/0x200 [ 1143.761974] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1143.761988] ? __fget_files+0x2cf/0x520 [ 1143.762005] ? lock_acquire+0x197/0x470 [ 1143.762016] ? find_held_lock+0x2c/0x110 [ 1143.762034] ? __might_fault+0xd3/0x180 [ 1143.762046] ? lock_downgrade+0x6d0/0x6d0 [ 1143.762072] do_recvmmsg+0x24c/0x6d0 [ 1143.762090] ? ___sys_recvmsg+0x200/0x200 [ 1143.762102] ? lock_downgrade+0x6d0/0x6d0 [ 1143.762120] ? ksys_write+0x12d/0x260 [ 1143.762141] ? wait_for_completion_io+0x270/0x270 [ 1143.762156] ? rcu_read_lock_any_held+0x75/0xa0 [ 1143.762167] ? vfs_write+0x354/0xb10 [ 1143.762180] __x64_sys_recvmmsg+0x20f/0x260 [ 1143.762192] ? ksys_write+0x1a9/0x260 [ 1143.762205] ? __do_sys_socketcall+0x600/0x600 [ 1143.762221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1143.762234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1143.762249] do_syscall_64+0x33/0x40 [ 1143.762262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1143.762270] RIP: 0033:0x7f9a8d697b19 [ 1143.762282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1143.762289] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1143.762302] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1143.762309] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1143.762316] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1143.762324] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1143.762345] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:45:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1143.808396] FAULT_INJECTION: forcing a failure. [ 1143.808396] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.811202] CPU: 0 PID: 7682 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1143.812788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1143.814708] Call Trace: [ 1143.815324] dump_stack+0x107/0x167 [ 1143.816184] should_fail.cold+0x5/0xa [ 1143.817092] ? copy_mount_options+0x55/0x180 [ 1143.818118] should_failslab+0x5/0x20 [ 1143.818999] kmem_cache_alloc_trace+0x55/0x320 [ 1143.820048] ? _copy_from_user+0xfb/0x1b0 [ 1143.821046] copy_mount_options+0x55/0x180 [ 1143.822033] __x64_sys_mount+0x1a8/0x300 [ 1143.822976] ? copy_mnt_ns+0xa00/0xa00 [ 1143.823894] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1143.825113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1143.826316] do_syscall_64+0x33/0x40 [ 1143.827185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1143.828371] RIP: 0033:0x7fda13c6e04a [ 1143.829232] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1143.833434] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1143.835173] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1143.836798] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1143.838432] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1143.840055] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1143.841692] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:45:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x4b47, &(0x7f0000000000)=0x7f) 20:45:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) dup(r4) ppoll(0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:45:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 55) 20:45:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x8000000000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:45:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:45:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 8) [ 1144.050908] FAULT_INJECTION: forcing a failure. [ 1144.050908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.053710] CPU: 0 PID: 7701 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1144.055252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1144.057128] Call Trace: [ 1144.057727] dump_stack+0x107/0x167 [ 1144.058557] should_fail.cold+0x5/0xa [ 1144.059430] _copy_from_user+0x2e/0x1b0 [ 1144.060338] __copy_msghdr_from_user+0x91/0x4b0 [ 1144.061410] ? __ia32_sys_shutdown+0x80/0x80 [ 1144.062409] ? __lock_acquire+0x1657/0x5b00 [ 1144.063404] ___sys_recvmsg+0xd5/0x200 [ 1144.064280] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1144.065393] ? trace_hardirqs_on+0x5b/0x180 [ 1144.066379] ? lock_acquire+0x197/0x470 [ 1144.067282] ? find_held_lock+0x2c/0x110 [ 1144.068211] ? __might_fault+0xd3/0x180 [ 1144.069128] ? lock_downgrade+0x6d0/0x6d0 [ 1144.070085] do_recvmmsg+0x24c/0x6d0 [ 1144.070943] ? ___sys_recvmsg+0x200/0x200 [ 1144.071873] ? lock_downgrade+0x6d0/0x6d0 [ 1144.072818] ? ksys_write+0x12d/0x260 [ 1144.073695] ? wait_for_completion_io+0x270/0x270 [ 1144.074786] ? rcu_read_lock_any_held+0x75/0xa0 [ 1144.075829] ? vfs_write+0x354/0xb10 [ 1144.076669] __x64_sys_recvmmsg+0x20f/0x260 [ 1144.077644] ? ksys_write+0x1a9/0x260 [ 1144.078505] ? __do_sys_socketcall+0x600/0x600 [ 1144.079538] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1144.080722] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1144.081893] do_syscall_64+0x33/0x40 [ 1144.082731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1144.083888] RIP: 0033:0x7f9a8d697b19 [ 1144.084725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1144.088858] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1144.090576] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1144.092186] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1144.093805] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1144.095415] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1144.097048] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1144.168920] FAULT_INJECTION: forcing a failure. [ 1144.168920] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.170791] CPU: 1 PID: 7710 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1144.171695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1144.173003] Call Trace: [ 1144.173405] dump_stack+0x107/0x167 [ 1144.173921] should_fail.cold+0x5/0xa [ 1144.174382] ? create_object.isra.0+0x3a/0xa20 [ 1144.174927] should_failslab+0x5/0x20 [ 1144.175517] kmem_cache_alloc+0x5b/0x310 [ 1144.176011] create_object.isra.0+0x3a/0xa20 [ 1144.176735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1144.177512] kmem_cache_alloc_trace+0x151/0x320 [ 1144.178073] ? _copy_from_user+0xfb/0x1b0 [ 1144.178575] copy_mount_options+0x55/0x180 [ 1144.179082] __x64_sys_mount+0x1a8/0x300 [ 1144.179719] ? copy_mnt_ns+0xa00/0xa00 [ 1144.180206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1144.181099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1144.181832] do_syscall_64+0x33/0x40 [ 1144.182277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1144.182890] RIP: 0033:0x7fda13c6e04a [ 1144.183338] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1144.185544] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1144.186456] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1144.187309] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1144.188162] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1144.189027] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1144.189880] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 [ 1144.206917] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:46:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x2c01}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:46:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:01 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) dup(r4) ppoll(0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:46:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 9) 20:46:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 56) 20:46:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xf0ffffffffffff) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:46:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:46:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x4b49, &(0x7f0000000000)=0x7f) [ 1159.627064] FAULT_INJECTION: forcing a failure. [ 1159.627064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.630077] CPU: 1 PID: 7728 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1159.631826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.633970] Call Trace: [ 1159.634557] dump_stack+0x107/0x167 [ 1159.635356] should_fail.cold+0x5/0xa [ 1159.636203] _copy_from_user+0x2e/0x1b0 [ 1159.637112] __copy_msghdr_from_user+0x91/0x4b0 [ 1159.638107] ? __ia32_sys_shutdown+0x80/0x80 [ 1159.639036] ? __lock_acquire+0x1657/0x5b00 [ 1159.639969] ___sys_recvmsg+0xd5/0x200 [ 1159.640792] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1159.641853] ? __fget_files+0x2cf/0x520 [ 1159.642702] ? lock_acquire+0x197/0x470 [ 1159.643543] ? find_held_lock+0x2c/0x110 [ 1159.644411] ? __might_fault+0xd3/0x180 [ 1159.645267] ? lock_downgrade+0x6d0/0x6d0 [ 1159.646167] do_recvmmsg+0x24c/0x6d0 [ 1159.646961] ? ___sys_recvmsg+0x200/0x200 [ 1159.647835] ? lock_downgrade+0x6d0/0x6d0 [ 1159.648721] ? ksys_write+0x12d/0x260 [ 1159.649551] ? wait_for_completion_io+0x270/0x270 [ 1159.650582] ? rcu_read_lock_any_held+0x75/0xa0 [ 1159.651566] ? vfs_write+0x354/0xb10 [ 1159.652361] __x64_sys_recvmmsg+0x20f/0x260 [ 1159.653294] ? ksys_write+0x1a9/0x260 [ 1159.654118] ? __do_sys_socketcall+0x600/0x600 [ 1159.655093] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1159.656214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1159.657385] do_syscall_64+0x33/0x40 [ 1159.658182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1159.659260] RIP: 0033:0x7f9a8d697b19 [ 1159.660045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.663932] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1159.665547] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1159.667056] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1159.668563] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.670089] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1159.671608] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1159.690653] FAULT_INJECTION: forcing a failure. [ 1159.690653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.693194] CPU: 1 PID: 7729 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1159.694642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.696411] Call Trace: [ 1159.697000] dump_stack+0x107/0x167 [ 1159.697825] should_fail.cold+0x5/0xa [ 1159.698667] _copy_from_user+0x2e/0x1b0 [ 1159.699525] copy_mount_options+0x76/0x180 [ 1159.700428] __x64_sys_mount+0x1a8/0x300 [ 1159.701302] ? copy_mnt_ns+0xa00/0xa00 [ 1159.702126] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1159.703219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1159.704323] do_syscall_64+0x33/0x40 [ 1159.705101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1159.706196] RIP: 0033:0x7fda13c6e04a [ 1159.706988] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.710891] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1159.712507] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1159.714024] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1159.715536] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1159.717046] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1159.718623] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:46:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x100000000000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:46:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5409, &(0x7f0000000000)=0x7f) 20:46:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x3801}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:46:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x0, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1159.740420] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:46:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 10) 20:46:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 57) [ 1159.873529] FAULT_INJECTION: forcing a failure. [ 1159.873529] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.876010] CPU: 1 PID: 7740 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1159.877473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.879228] Call Trace: [ 1159.879793] dump_stack+0x107/0x167 [ 1159.880579] should_fail.cold+0x5/0xa [ 1159.881412] ? getname_flags.part.0+0x50/0x4f0 [ 1159.882380] should_failslab+0x5/0x20 [ 1159.883188] kmem_cache_alloc+0x5b/0x310 [ 1159.884061] getname_flags.part.0+0x50/0x4f0 [ 1159.885011] user_path_at_empty+0xa1/0x100 [ 1159.885929] __x64_sys_mount+0x1e9/0x300 [ 1159.886794] ? copy_mnt_ns+0xa00/0xa00 [ 1159.887627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1159.888758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1159.889879] do_syscall_64+0x33/0x40 [ 1159.890679] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1159.891772] RIP: 0033:0x7fda13c6e04a [ 1159.892567] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.896492] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1159.898131] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1159.899659] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1159.901194] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1159.902718] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1159.904246] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:46:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x540b, &(0x7f0000000000)=0x7f) 20:46:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x0, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1159.980401] FAULT_INJECTION: forcing a failure. [ 1159.980401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.982904] CPU: 1 PID: 7751 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1159.984363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.986137] Call Trace: [ 1159.986697] dump_stack+0x107/0x167 [ 1159.987481] should_fail.cold+0x5/0xa [ 1159.988301] _copy_from_user+0x2e/0x1b0 [ 1159.989157] __copy_msghdr_from_user+0x91/0x4b0 [ 1159.990161] ? __ia32_sys_shutdown+0x80/0x80 [ 1159.991098] ? __lock_acquire+0x1657/0x5b00 [ 1159.992034] ___sys_recvmsg+0xd5/0x200 [ 1159.992868] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1159.993919] ? __lockdep_reset_lock+0x180/0x180 [ 1159.994907] ? __fget_files+0x2cf/0x520 [ 1159.995757] ? lock_acquire+0x197/0x470 [ 1159.996596] ? find_held_lock+0x2c/0x110 [ 1159.997478] ? __might_fault+0xd3/0x180 [ 1159.998320] ? lock_downgrade+0x6d0/0x6d0 [ 1159.999227] do_recvmmsg+0x24c/0x6d0 [ 1160.000024] ? ___sys_recvmsg+0x200/0x200 [ 1160.000917] ? lock_downgrade+0x6d0/0x6d0 [ 1160.001811] ? ksys_write+0x12d/0x260 [ 1160.002633] ? wait_for_completion_io+0x270/0x270 [ 1160.003665] ? rcu_read_lock_any_held+0x75/0xa0 [ 1160.004648] ? vfs_write+0x354/0xb10 [ 1160.005453] __x64_sys_recvmmsg+0x20f/0x260 [ 1160.006366] ? ksys_write+0x1a9/0x260 [ 1160.007170] ? __do_sys_socketcall+0x600/0x600 [ 1160.008149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1160.009271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.010366] do_syscall_64+0x33/0x40 [ 1160.011157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1160.012244] RIP: 0033:0x7f9a8d697b19 [ 1160.013032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.016945] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1160.018565] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1160.020085] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1160.021602] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.023111] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1160.024622] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:46:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) dup(r4) ppoll(0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:46:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x0, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x200000000000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:46:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x3f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:46:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x540c, &(0x7f0000000000)=0x7f) 20:46:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 11) 20:46:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 58) 20:46:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1175.854885] FAULT_INJECTION: forcing a failure. [ 1175.854885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.857888] CPU: 0 PID: 7772 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1175.859432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1175.861212] Call Trace: [ 1175.861805] dump_stack+0x107/0x167 [ 1175.862607] should_fail.cold+0x5/0xa [ 1175.863440] _copy_from_user+0x2e/0x1b0 [ 1175.864315] __copy_msghdr_from_user+0x91/0x4b0 [ 1175.865323] ? __ia32_sys_shutdown+0x80/0x80 [ 1175.866278] ? __lock_acquire+0x1657/0x5b00 [ 1175.867243] ___sys_recvmsg+0xd5/0x200 [ 1175.868094] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1175.869159] ? trace_hardirqs_on+0x5b/0x180 [ 1175.870115] ? lock_acquire+0x197/0x470 [ 1175.870978] ? find_held_lock+0x2c/0x110 [ 1175.871906] ? __might_fault+0xd3/0x180 [ 1175.872924] ? lock_downgrade+0x6d0/0x6d0 [ 1175.874019] do_recvmmsg+0x24c/0x6d0 [ 1175.874994] ? ___sys_recvmsg+0x200/0x200 [ 1175.876062] ? lock_downgrade+0x6d0/0x6d0 [ 1175.877144] ? ksys_write+0x12d/0x260 [ 1175.878159] ? wait_for_completion_io+0x270/0x270 [ 1175.879404] ? rcu_read_lock_any_held+0x75/0xa0 [ 1175.880602] ? vfs_write+0x354/0xb10 [ 1175.881590] __x64_sys_recvmmsg+0x20f/0x260 [ 1175.882697] ? ksys_write+0x1a9/0x260 [ 1175.883682] ? __do_sys_socketcall+0x600/0x600 [ 1175.884857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1175.886199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1175.887513] do_syscall_64+0x33/0x40 [ 1175.888474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1175.889800] RIP: 0033:0x7f9a8d697b19 [ 1175.890764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1175.895453] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1175.897404] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1175.899225] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1175.901041] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1175.902868] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1175.904684] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1175.909921] FAULT_INJECTION: forcing a failure. [ 1175.909921] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.911925] CPU: 1 PID: 7773 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1175.913114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1175.914638] Call Trace: [ 1175.915096] dump_stack+0x107/0x167 [ 1175.915709] should_fail.cold+0x5/0xa [ 1175.916357] ? create_object.isra.0+0x3a/0xa20 [ 1175.917129] should_failslab+0x5/0x20 [ 1175.917790] kmem_cache_alloc+0x5b/0x310 [ 1175.918476] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1175.919351] create_object.isra.0+0x3a/0xa20 [ 1175.920089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1175.920945] kmem_cache_alloc+0x159/0x310 [ 1175.921674] getname_flags.part.0+0x50/0x4f0 [ 1175.922419] user_path_at_empty+0xa1/0x100 [ 1175.923134] __x64_sys_mount+0x1e9/0x300 [ 1175.923825] ? copy_mnt_ns+0xa00/0xa00 [ 1175.924486] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1175.925396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1175.926267] do_syscall_64+0x33/0x40 [ 1175.926889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1175.927749] RIP: 0033:0x7fda13c6e04a [ 1175.928362] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1175.931424] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1175.932675] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1175.933874] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1175.935069] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1175.936258] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1175.937440] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 [ 1175.947964] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:46:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 59) 20:46:30 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:46:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x540d, &(0x7f0000000000)=0x7f) 20:46:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 12) 20:46:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:46:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x400000000000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:46:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1188.931081] FAULT_INJECTION: forcing a failure. [ 1188.931081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.932711] CPU: 0 PID: 7797 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1188.933743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.934954] Call Trace: [ 1188.935352] dump_stack+0x107/0x167 [ 1188.935885] should_fail.cold+0x5/0xa [ 1188.936449] strncpy_from_user+0x34/0x470 [ 1188.937049] getname_flags.part.0+0x95/0x4f0 [ 1188.937698] user_path_at_empty+0xa1/0x100 [ 1188.938324] __x64_sys_mount+0x1e9/0x300 [ 1188.938922] ? copy_mnt_ns+0xa00/0xa00 [ 1188.939493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.940257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.940884] do_syscall_64+0x33/0x40 [ 1188.941440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.942199] RIP: 0033:0x7fda13c6e04a [ 1188.942737] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.945394] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1188.946506] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1188.947547] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1188.948569] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1188.949610] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1188.950649] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:46:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x20010}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1188.965621] FAULT_INJECTION: forcing a failure. [ 1188.965621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.968333] CPU: 1 PID: 7800 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1188.969901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.971746] Call Trace: [ 1188.972338] dump_stack+0x107/0x167 [ 1188.973150] should_fail.cold+0x5/0xa [ 1188.974032] _copy_from_user+0x2e/0x1b0 [ 1188.974928] __copy_msghdr_from_user+0x91/0x4b0 [ 1188.975966] ? __ia32_sys_shutdown+0x80/0x80 [ 1188.976948] ? __lock_acquire+0x1657/0x5b00 [ 1188.977955] ___sys_recvmsg+0xd5/0x200 [ 1188.978824] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1188.979919] ? __fget_files+0x2cf/0x520 20:46:30 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 1188.980811] ? lock_acquire+0x197/0x470 [ 1188.981847] ? find_held_lock+0x2c/0x110 [ 1188.982870] ? __might_fault+0xd3/0x180 [ 1188.983743] ? lock_downgrade+0x6d0/0x6d0 [ 1188.984912] do_recvmmsg+0x24c/0x6d0 [ 1188.985772] ? ___sys_recvmsg+0x200/0x200 [ 1188.986783] ? lock_downgrade+0x6d0/0x6d0 [ 1188.987934] ? ksys_write+0x12d/0x260 [ 1188.988812] ? wait_for_completion_io+0x270/0x270 [ 1188.989928] ? rcu_read_lock_any_held+0x75/0xa0 [ 1188.991057] ? vfs_write+0x354/0xb10 [ 1188.992131] __x64_sys_recvmmsg+0x20f/0x260 [ 1188.993258] ? ksys_write+0x1a9/0x260 [ 1188.994261] ? __do_sys_socketcall+0x600/0x600 [ 1188.995567] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.996925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.998311] do_syscall_64+0x33/0x40 [ 1188.999340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.000716] RIP: 0033:0x7f9a8d697b19 [ 1189.001640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.006126] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1189.007832] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1189.009700] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 20:46:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1189.011274] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.012923] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1189.014844] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:46:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 60) 20:46:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 13) 20:46:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5413, &(0x7f0000000000)=0x7f) 20:46:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x20200}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:46:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x800000000000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:46:31 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:46:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYBLOB="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"]) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1189.256377] FAULT_INJECTION: forcing a failure. [ 1189.256377] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.259306] CPU: 1 PID: 7820 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1189.260934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1189.262962] Call Trace: [ 1189.263598] dump_stack+0x107/0x167 [ 1189.264479] should_fail.cold+0x5/0xa [ 1189.265392] ? alloc_fs_context+0x57/0x840 [ 1189.266426] should_failslab+0x5/0x20 [ 1189.267334] kmem_cache_alloc_trace+0x55/0x320 [ 1189.268416] ? cap_capable+0x1cd/0x230 [ 1189.269334] ? cap_capable+0x1cd/0x230 [ 1189.270286] alloc_fs_context+0x57/0x840 [ 1189.271258] path_mount+0x962/0x21c0 [ 1189.272147] ? strncpy_from_user+0x9e/0x470 [ 1189.273170] ? finish_automount+0xa90/0xa90 [ 1189.274219] ? getname_flags.part.0+0x1dd/0x4f0 [ 1189.275335] __x64_sys_mount+0x282/0x300 [ 1189.276297] ? copy_mnt_ns+0xa00/0xa00 [ 1189.277228] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1189.278488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.279704] do_syscall_64+0x33/0x40 [ 1189.280580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.281811] RIP: 0033:0x7fda13c6e04a [ 1189.282685] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.287051] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1189.288843] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1189.290536] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1189.292198] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1189.293891] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1189.295551] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 [ 1189.308649] FAULT_INJECTION: forcing a failure. [ 1189.308649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1189.311587] CPU: 1 PID: 7822 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1189.313174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1189.315254] Call Trace: [ 1189.316003] dump_stack+0x107/0x167 [ 1189.316914] should_fail.cold+0x5/0xa [ 1189.317839] _copy_from_user+0x2e/0x1b0 [ 1189.318777] __copy_msghdr_from_user+0x91/0x4b0 [ 1189.319955] ? __ia32_sys_shutdown+0x80/0x80 [ 1189.321221] ? __lock_acquire+0x1657/0x5b00 [ 1189.322283] ___sys_recvmsg+0xd5/0x200 [ 1189.323191] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1189.324329] ? __lockdep_reset_lock+0x180/0x180 [ 1189.325407] ? __fget_files+0x2cf/0x520 [ 1189.326434] ? lock_acquire+0x197/0x470 [ 1189.327570] ? find_held_lock+0x2c/0x110 [ 1189.328607] ? __might_fault+0xd3/0x180 [ 1189.329547] ? lock_downgrade+0x6d0/0x6d0 [ 1189.330569] do_recvmmsg+0x24c/0x6d0 [ 1189.331486] ? ___sys_recvmsg+0x200/0x200 [ 1189.332541] ? lock_downgrade+0x6d0/0x6d0 [ 1189.333773] ? ksys_write+0x12d/0x260 [ 1189.334673] ? wait_for_completion_io+0x270/0x270 [ 1189.335797] ? rcu_read_lock_any_held+0x75/0xa0 [ 1189.336873] ? vfs_write+0x354/0xb10 [ 1189.337764] __x64_sys_recvmmsg+0x20f/0x260 [ 1189.338763] ? ksys_write+0x1a9/0x260 [ 1189.339652] ? __do_sys_socketcall+0x600/0x600 [ 1189.340716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1189.342085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.343530] do_syscall_64+0x33/0x40 [ 1189.344499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.345725] RIP: 0033:0x7f9a8d697b19 [ 1189.346591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.351216] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1189.353109] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1189.355107] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1189.356770] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.358458] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1189.360235] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:46:31 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {0xffffffffffffffff, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:46:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)=0x7f) 20:46:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x3ffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:46:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x158, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:43 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {0xffffffffffffffff, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:46:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYBLOB="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"]) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:46:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 14) 20:46:43 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 61) 20:46:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x1000000000000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1201.574683] FAULT_INJECTION: forcing a failure. [ 1201.574683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1201.574991] FAULT_INJECTION: forcing a failure. [ 1201.574991] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.577718] CPU: 1 PID: 7861 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1201.580548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1201.582664] Call Trace: [ 1201.583343] dump_stack+0x107/0x167 [ 1201.584270] should_fail.cold+0x5/0xa [ 1201.585250] _copy_from_user+0x2e/0x1b0 [ 1201.586279] __copy_msghdr_from_user+0x91/0x4b0 [ 1201.587463] ? __ia32_sys_shutdown+0x80/0x80 [ 1201.588583] ? __lock_acquire+0x1657/0x5b00 [ 1201.589708] ___sys_recvmsg+0xd5/0x200 [ 1201.590702] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1201.591947] ? __lockdep_reset_lock+0x180/0x180 [ 1201.593121] ? __fget_files+0x2cf/0x520 [ 1201.594147] ? lock_acquire+0x197/0x470 [ 1201.595157] ? find_held_lock+0x2c/0x110 [ 1201.596195] ? __might_fault+0xd3/0x180 [ 1201.597218] ? lock_downgrade+0x6d0/0x6d0 [ 1201.598322] do_recvmmsg+0x24c/0x6d0 [ 1201.599281] ? ___sys_recvmsg+0x200/0x200 [ 1201.600350] ? lock_downgrade+0x6d0/0x6d0 [ 1201.601425] ? ksys_write+0x12d/0x260 [ 1201.602403] ? wait_for_completion_io+0x270/0x270 [ 1201.603497] ? rcu_read_lock_any_held+0x75/0xa0 [ 1201.604554] ? vfs_write+0x354/0xb10 [ 1201.605396] __x64_sys_recvmmsg+0x20f/0x260 [ 1201.606391] ? ksys_write+0x1a9/0x260 [ 1201.607252] ? __do_sys_socketcall+0x600/0x600 [ 1201.608266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1201.609450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1201.610636] do_syscall_64+0x33/0x40 [ 1201.611501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1201.612683] RIP: 0033:0x7f9a8d697b19 [ 1201.613536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1201.617885] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1201.619655] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1201.621296] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1201.622956] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.624599] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1201.626240] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1201.627906] CPU: 0 PID: 7860 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1201.628641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1201.629531] Call Trace: [ 1201.629822] dump_stack+0x107/0x167 [ 1201.630220] should_fail.cold+0x5/0xa [ 1201.630633] ? create_object.isra.0+0x3a/0xa20 [ 1201.631125] should_failslab+0x5/0x20 [ 1201.631536] kmem_cache_alloc+0x5b/0x310 [ 1201.631983] create_object.isra.0+0x3a/0xa20 [ 1201.632460] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1201.632480] kmem_cache_alloc_trace+0x151/0x320 [ 1201.632491] ? cap_capable+0x1cd/0x230 20:46:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYBLOB="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"]) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1201.632509] alloc_fs_context+0x57/0x840 [ 1201.632531] path_mount+0x962/0x21c0 20:46:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x40000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1201.632549] ? strncpy_from_user+0x9e/0x470 [ 1201.632563] ? finish_automount+0xa90/0xa90 [ 1201.632577] ? getname_flags.part.0+0x1dd/0x4f0 [ 1201.632602] __x64_sys_mount+0x282/0x300 20:46:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 15) [ 1201.632614] ? copy_mnt_ns+0xa00/0xa00 [ 1201.632631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1201.632642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1201.632659] do_syscall_64+0x33/0x40 [ 1201.632671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1201.632678] RIP: 0033:0x7fda13c6e04a [ 1201.632689] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1201.632695] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1201.632707] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1201.632714] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1201.632720] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1201.632727] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1201.632733] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 [ 1201.663267] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:46:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x2103000000000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:46:43 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {0xffffffffffffffff, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:46:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5415, &(0x7f0000000000)=0x7f) [ 1201.821548] FAULT_INJECTION: forcing a failure. [ 1201.821548] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.824075] CPU: 1 PID: 7873 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1201.825573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1201.827399] Call Trace: [ 1201.827990] dump_stack+0x107/0x167 [ 1201.828780] should_fail.cold+0x5/0xa [ 1201.829630] ? legacy_init_fs_context+0x44/0xe0 [ 1201.830713] should_failslab+0x5/0x20 [ 1201.831538] kmem_cache_alloc_trace+0x55/0x320 [ 1201.832516] ? lockdep_init_map_type+0x2c7/0x780 [ 1201.833538] legacy_init_fs_context+0x44/0xe0 [ 1201.834515] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1201.835580] alloc_fs_context+0x4fd/0x840 [ 1201.836477] path_mount+0x962/0x21c0 [ 1201.837288] ? strncpy_from_user+0x9e/0x470 [ 1201.838221] ? finish_automount+0xa90/0xa90 [ 1201.839148] ? getname_flags.part.0+0x1dd/0x4f0 [ 1201.840166] __x64_sys_mount+0x282/0x300 [ 1201.841039] ? copy_mnt_ns+0xa00/0xa00 [ 1201.841888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1201.843010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1201.844127] do_syscall_64+0x33/0x40 [ 1201.844927] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1201.846130] RIP: 0033:0x7fda13c6e04a [ 1201.846927] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1201.850885] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1201.852516] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1201.854051] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1201.855577] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1201.857103] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1201.858633] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:46:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x158, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32, @ANYBLOB="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"]) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:46:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x101000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:46:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32, @ANYBLOB="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"]) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:46:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x158, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 16) 20:46:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 62) 20:46:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x424bec2bcc000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:46:59 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:46:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5416, &(0x7f0000000000)=0x7f) [ 1217.324580] FAULT_INJECTION: forcing a failure. [ 1217.324580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.327499] CPU: 0 PID: 7900 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1217.329040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.330997] Call Trace: [ 1217.331596] dump_stack+0x107/0x167 [ 1217.332413] should_fail.cold+0x5/0xa [ 1217.333265] _copy_from_user+0x2e/0x1b0 [ 1217.334192] __copy_msghdr_from_user+0x91/0x4b0 [ 1217.334255] FAULT_INJECTION: forcing a failure. [ 1217.334255] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.335251] ? __ia32_sys_shutdown+0x80/0x80 [ 1217.335277] ? find_held_lock+0x2c/0x110 [ 1217.335306] ? finish_task_switch+0x126/0x5d0 [ 1217.340452] ? lock_downgrade+0x6d0/0x6d0 [ 1217.341384] ___sys_recvmsg+0xd5/0x200 [ 1217.342269] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1217.343361] ? trace_hardirqs_on+0x5b/0x180 [ 1217.344334] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1217.345340] ? finish_task_switch+0x126/0x5d0 [ 1217.346357] ? finish_task_switch+0xef/0x5d0 [ 1217.347340] ? __switch_to+0x572/0xf70 [ 1217.348207] ? __switch_to_asm+0x3a/0x60 [ 1217.349111] ? __switch_to_asm+0x34/0x60 [ 1217.350036] ? __schedule+0x82c/0x1ea0 [ 1217.350919] ? io_schedule_timeout+0x140/0x140 [ 1217.351965] do_recvmmsg+0x24c/0x6d0 [ 1217.352809] ? ___sys_recvmsg+0x200/0x200 [ 1217.353737] ? lock_downgrade+0x6d0/0x6d0 [ 1217.354686] ? ksys_write+0x12d/0x260 [ 1217.355556] ? wait_for_completion_io+0x270/0x270 [ 1217.356649] ? rcu_read_lock_any_held+0x75/0xa0 [ 1217.357699] ? vfs_write+0x354/0xb10 [ 1217.358547] __x64_sys_recvmmsg+0x20f/0x260 [ 1217.359513] ? ksys_write+0x1a9/0x260 [ 1217.360366] ? __do_sys_socketcall+0x600/0x600 [ 1217.361395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.362573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.363736] do_syscall_64+0x33/0x40 [ 1217.364572] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.365729] RIP: 0033:0x7f9a8d697b19 [ 1217.366569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.370675] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1217.372371] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1217.373976] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1217.375566] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1217.377153] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1217.378754] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1217.380377] CPU: 1 PID: 7899 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1217.381860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.383633] Call Trace: [ 1217.384200] dump_stack+0x107/0x167 [ 1217.384985] should_fail.cold+0x5/0xa [ 1217.385797] ? create_object.isra.0+0x3a/0xa20 [ 1217.386768] should_failslab+0x5/0x20 [ 1217.387598] kmem_cache_alloc+0x5b/0x310 [ 1217.388463] ? create_object.isra.0+0x3ad/0xa20 [ 1217.389459] create_object.isra.0+0x3a/0xa20 [ 1217.390401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1217.391486] __kmalloc_node+0x1ae/0x420 [ 1217.392340] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1217.393399] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1217.394468] ? trace_hardirqs_on+0x5b/0x180 [ 1217.395397] kmem_cache_alloc_trace+0x169/0x320 [ 1217.396380] ? cap_capable+0x1cd/0x230 [ 1217.397219] alloc_fs_context+0x57/0x840 [ 1217.398097] path_mount+0x962/0x21c0 [ 1217.398896] ? strncpy_from_user+0x9e/0x470 [ 1217.399810] ? finish_automount+0xa90/0xa90 [ 1217.400729] ? getname_flags.part.0+0x1dd/0x4f0 [ 1217.401708] __x64_sys_mount+0x282/0x300 [ 1217.402572] ? copy_mnt_ns+0xa00/0xa00 [ 1217.403412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.404525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.405626] do_syscall_64+0x33/0x40 [ 1217.406428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.407529] RIP: 0033:0x7fda13c6e04a [ 1217.408326] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.412231] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1217.413869] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1217.415356] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1217.416882] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1217.418416] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1217.419932] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:46:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1217.438144] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:46:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 17) 20:46:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5418, &(0x7f0000000000)=0x7f) 20:46:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 63) 20:46:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x6400000000000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:46:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:46:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:46:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:46:59 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 1217.769698] FAULT_INJECTION: forcing a failure. [ 1217.769698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.772506] CPU: 0 PID: 7919 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1217.774061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.775930] Call Trace: [ 1217.776525] dump_stack+0x107/0x167 [ 1217.777355] should_fail.cold+0x5/0xa [ 1217.778221] _copy_from_user+0x2e/0x1b0 [ 1217.779136] __copy_msghdr_from_user+0x91/0x4b0 [ 1217.780186] ? __ia32_sys_shutdown+0x80/0x80 [ 1217.781192] ? __lock_acquire+0x1657/0x5b00 [ 1217.782203] ___sys_recvmsg+0xd5/0x200 [ 1217.783093] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1217.784216] ? lock_acquire+0x197/0x470 [ 1217.785105] ? find_held_lock+0x2c/0x110 [ 1217.786039] ? __might_fault+0xd3/0x180 [ 1217.786934] ? lock_downgrade+0x6d0/0x6d0 [ 1217.787902] do_recvmmsg+0x24c/0x6d0 [ 1217.788747] ? ___sys_recvmsg+0x200/0x200 [ 1217.789682] ? lock_downgrade+0x6d0/0x6d0 [ 1217.790642] ? ksys_write+0x12d/0x260 [ 1217.791515] ? wait_for_completion_io+0x270/0x270 [ 1217.792621] ? rcu_read_lock_any_held+0x75/0xa0 [ 1217.793661] ? vfs_write+0x354/0xb10 [ 1217.794533] __x64_sys_recvmmsg+0x20f/0x260 [ 1217.795501] ? ksys_write+0x1a9/0x260 [ 1217.796368] ? __do_sys_socketcall+0x600/0x600 [ 1217.797409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.798616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.799798] do_syscall_64+0x33/0x40 [ 1217.800644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.801801] RIP: 0033:0x7f9a8d697b19 [ 1217.802656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.806852] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1217.808583] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1217.810210] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1217.811838] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1217.813456] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1217.815085] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1217.847659] FAULT_INJECTION: forcing a failure. [ 1217.847659] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.850376] CPU: 0 PID: 7928 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1217.851933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.853831] Call Trace: [ 1217.854444] dump_stack+0x107/0x167 [ 1217.855289] should_fail.cold+0x5/0xa [ 1217.856169] ? legacy_init_fs_context+0x44/0xe0 [ 1217.857250] should_failslab+0x5/0x20 [ 1217.858136] kmem_cache_alloc_trace+0x55/0x320 [ 1217.859178] ? lockdep_init_map_type+0x2c7/0x780 [ 1217.860273] legacy_init_fs_context+0x44/0xe0 [ 1217.861296] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1217.862437] alloc_fs_context+0x4fd/0x840 [ 1217.863413] path_mount+0x962/0x21c0 [ 1217.864274] ? strncpy_from_user+0x9e/0x470 [ 1217.865264] ? finish_automount+0xa90/0xa90 [ 1217.866261] ? getname_flags.part.0+0x1dd/0x4f0 [ 1217.867352] __x64_sys_mount+0x282/0x300 [ 1217.868277] ? copy_mnt_ns+0xa00/0xa00 [ 1217.869183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1217.870415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1217.871605] do_syscall_64+0x33/0x40 20:46:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x3000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1217.872464] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1217.873805] RIP: 0033:0x7fda13c6e04a [ 1217.874679] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.878875] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1217.880597] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1217.882213] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1217.883824] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1217.885439] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1217.887059] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:46:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)=0x7f) 20:47:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 18) 20:47:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:47:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x5000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x8004000000000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:47:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:47:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 64) 20:47:13 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:47:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x541d, &(0x7f0000000000)=0x7f) [ 1231.270256] FAULT_INJECTION: forcing a failure. [ 1231.270256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.273000] CPU: 1 PID: 7961 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1231.274558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.276439] Call Trace: [ 1231.277043] dump_stack+0x107/0x167 [ 1231.277876] should_fail.cold+0x5/0xa [ 1231.278768] _copy_from_user+0x2e/0x1b0 [ 1231.279683] __copy_msghdr_from_user+0x91/0x4b0 [ 1231.280749] ? __ia32_sys_shutdown+0x80/0x80 [ 1231.281762] ? __lock_acquire+0x1657/0x5b00 [ 1231.282775] ___sys_recvmsg+0xd5/0x200 [ 1231.283662] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1231.285037] ? __lockdep_reset_lock+0x180/0x180 [ 1231.286281] ? __fget_files+0x2cf/0x520 [ 1231.287297] ? lock_acquire+0x197/0x470 [ 1231.288427] ? find_held_lock+0x2c/0x110 [ 1231.289461] ? __might_fault+0xd3/0x180 [ 1231.290535] ? lock_downgrade+0x6d0/0x6d0 [ 1231.291603] do_recvmmsg+0x24c/0x6d0 [ 1231.292675] ? ___sys_recvmsg+0x200/0x200 [ 1231.293683] ? lock_downgrade+0x6d0/0x6d0 [ 1231.294662] ? ksys_write+0x12d/0x260 [ 1231.295751] ? wait_for_completion_io+0x270/0x270 [ 1231.296972] ? rcu_read_lock_any_held+0x75/0xa0 [ 1231.298248] ? vfs_write+0x354/0xb10 [ 1231.299153] __x64_sys_recvmmsg+0x20f/0x260 [ 1231.300320] ? ksys_write+0x1a9/0x260 [ 1231.301377] ? __do_sys_socketcall+0x600/0x600 [ 1231.302626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1231.303946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1231.305360] do_syscall_64+0x33/0x40 [ 1231.306312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.307656] RIP: 0033:0x7f9a8d697b19 [ 1231.308655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.313519] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1231.315366] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1231.317181] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1231.318803] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.320414] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1231.322031] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:47:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1231.345356] FAULT_INJECTION: forcing a failure. [ 1231.345356] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.347980] CPU: 1 PID: 7958 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1231.349523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.351406] Call Trace: [ 1231.352009] dump_stack+0x107/0x167 [ 1231.352838] should_fail.cold+0x5/0xa [ 1231.353700] ? create_object.isra.0+0x3a/0xa20 [ 1231.354746] should_failslab+0x5/0x20 [ 1231.355609] kmem_cache_alloc+0x5b/0x310 [ 1231.356544] create_object.isra.0+0x3a/0xa20 [ 1231.357537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1231.358710] __kmalloc_track_caller+0x177/0x370 [ 1231.359751] ? ext4_remount+0xdf/0x26e0 [ 1231.360656] kstrdup+0x36/0x70 [ 1231.361383] ? ext4_register_li_request+0x8e0/0x8e0 [ 1231.362517] ext4_remount+0xdf/0x26e0 [ 1231.363381] ? trace_hardirqs_on+0x5b/0x180 [ 1231.364528] ? ext4_register_li_request+0x8e0/0x8e0 [ 1231.365874] ? _cond_resched+0x10/0x30 [ 1231.366941] ? shrink_dentry_list+0x134/0x500 [ 1231.368102] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1231.369462] ? shrink_dcache_sb+0x1d5/0x220 [ 1231.370641] ? shrink_dentry_list+0x500/0x500 [ 1231.371987] ? ext4_register_li_request+0x8e0/0x8e0 [ 1231.373266] legacy_reconfigure+0x11b/0x190 [ 1231.374419] reconfigure_super+0x414/0x9c0 [ 1231.375567] ? fs_umode_to_dtype+0xb0/0xb0 [ 1231.376635] path_mount+0x1b78/0x21c0 [ 1231.377752] ? strncpy_from_user+0x9e/0x470 [ 1231.378861] ? finish_automount+0xa90/0xa90 [ 1231.380066] ? getname_flags.part.0+0x1dd/0x4f0 [ 1231.381359] __x64_sys_mount+0x282/0x300 [ 1231.382365] ? copy_mnt_ns+0xa00/0xa00 [ 1231.383430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1231.384738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1231.386082] do_syscall_64+0x33/0x40 [ 1231.387064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.388216] RIP: 0033:0x7fda13c6e04a [ 1231.389062] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.393191] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1231.394919] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1231.396531] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1231.398155] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1231.399761] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1231.401374] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:47:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 65) [ 1231.474603] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:47:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:47:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000000)=0x7f) 20:47:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x8cffffff00000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:47:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x8040000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 1231.568928] FAULT_INJECTION: forcing a failure. [ 1231.568928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.570333] CPU: 0 PID: 7974 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1231.571137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.572107] Call Trace: [ 1231.572422] dump_stack+0x107/0x167 [ 1231.572848] should_fail.cold+0x5/0xa [ 1231.573298] _copy_from_user+0x2e/0x1b0 [ 1231.573773] __copy_msghdr_from_user+0x91/0x4b0 [ 1231.574322] ? __ia32_sys_shutdown+0x80/0x80 [ 1231.574839] ? __lock_acquire+0x1657/0x5b00 [ 1231.575351] ___sys_recvmsg+0xd5/0x200 [ 1231.575805] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1231.576385] ? lock_acquire+0x197/0x470 [ 1231.576850] ? find_held_lock+0x2c/0x110 [ 1231.577335] ? __might_fault+0xd3/0x180 [ 1231.577802] ? lock_downgrade+0x6d0/0x6d0 [ 1231.578307] do_recvmmsg+0x24c/0x6d0 [ 1231.578745] ? ___sys_recvmsg+0x200/0x200 [ 1231.579234] ? lock_downgrade+0x6d0/0x6d0 [ 1231.579725] ? ksys_write+0x12d/0x260 [ 1231.580182] ? wait_for_completion_io+0x270/0x270 [ 1231.580754] ? rcu_read_lock_any_held+0x75/0xa0 [ 1231.581298] ? vfs_write+0x354/0xb10 [ 1231.581738] __x64_sys_recvmmsg+0x20f/0x260 [ 1231.582252] ? ksys_write+0x1a9/0x260 [ 1231.582698] ? __do_sys_socketcall+0x600/0x600 [ 1231.583239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1231.583859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1231.584464] do_syscall_64+0x33/0x40 [ 1231.584899] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1231.585498] RIP: 0033:0x7f9a8d697b19 [ 1231.585933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.588096] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1231.588979] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1231.589813] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1231.590647] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.591468] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1231.592295] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:47:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:47:27 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:47:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xe4ffffff00000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:47:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x81c0000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 19) 20:47:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000000)=0x7f) 20:47:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:47:27 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 66) [ 1245.771935] FAULT_INJECTION: forcing a failure. [ 1245.771935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.774278] CPU: 0 PID: 8006 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1245.775136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1245.776163] Call Trace: [ 1245.776496] dump_stack+0x107/0x167 [ 1245.776952] should_fail.cold+0x5/0xa [ 1245.777429] _copy_from_user+0x2e/0x1b0 [ 1245.777936] __copy_msghdr_from_user+0x91/0x4b0 [ 1245.778522] ? __ia32_sys_shutdown+0x80/0x80 [ 1245.779068] ? __lock_acquire+0x1657/0x5b00 [ 1245.779614] ___sys_recvmsg+0xd5/0x200 [ 1245.780103] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1245.780718] ? lock_acquire+0x197/0x470 [ 1245.781211] ? find_held_lock+0x2c/0x110 [ 1245.781743] ? __might_fault+0xd3/0x180 [ 1245.782243] ? lock_downgrade+0x6d0/0x6d0 [ 1245.782778] do_recvmmsg+0x24c/0x6d0 [ 1245.783242] ? ___sys_recvmsg+0x200/0x200 [ 1245.783759] ? lock_downgrade+0x6d0/0x6d0 [ 1245.784290] ? ksys_write+0x12d/0x260 [ 1245.784772] ? wait_for_completion_io+0x270/0x270 [ 1245.785371] ? rcu_read_lock_any_held+0x75/0xa0 [ 1245.785949] ? vfs_write+0x354/0xb10 [ 1245.786424] __x64_sys_recvmmsg+0x20f/0x260 [ 1245.786967] ? ksys_write+0x1a9/0x260 [ 1245.787443] ? __do_sys_socketcall+0x600/0x600 [ 1245.788008] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1245.788659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1245.789296] do_syscall_64+0x33/0x40 [ 1245.789781] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1245.790574] RIP: 0033:0x7f9a8d697b19 [ 1245.791039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1245.793353] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1245.794305] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1245.795196] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1245.796093] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.796983] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1245.797883] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:47:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5421, &(0x7f0000000000)=0x7f) [ 1245.823553] FAULT_INJECTION: forcing a failure. [ 1245.823553] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.826185] CPU: 1 PID: 8003 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1245.827630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1245.829416] Call Trace: [ 1245.829983] dump_stack+0x107/0x167 [ 1245.830786] should_fail.cold+0x5/0xa [ 1245.831614] should_failslab+0x5/0x20 [ 1245.832426] __kmalloc_track_caller+0x79/0x370 [ 1245.833410] ? ext4_remount+0xdf/0x26e0 [ 1245.834281] kstrdup+0x36/0x70 20:47:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0xfffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1245.834979] ? ext4_register_li_request+0x8e0/0x8e0 [ 1245.836197] ext4_remount+0xdf/0x26e0 [ 1245.837018] ? trace_hardirqs_on+0x5b/0x180 [ 1245.837966] ? ext4_register_li_request+0x8e0/0x8e0 [ 1245.839047] ? _cond_resched+0x10/0x30 [ 1245.839872] ? shrink_dentry_list+0x134/0x500 [ 1245.840828] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1245.841937] ? shrink_dcache_sb+0x1d5/0x220 [ 1245.842874] ? shrink_dentry_list+0x500/0x500 [ 1245.843852] ? ext4_register_li_request+0x8e0/0x8e0 [ 1245.844911] legacy_reconfigure+0x11b/0x190 [ 1245.845843] reconfigure_super+0x414/0x9c0 [ 1245.846748] ? fs_umode_to_dtype+0xb0/0xb0 [ 1245.847665] path_mount+0x1b78/0x21c0 [ 1245.848478] ? strncpy_from_user+0x9e/0x470 [ 1245.849412] ? finish_automount+0xa90/0xa90 [ 1245.850344] ? getname_flags.part.0+0x1dd/0x4f0 [ 1245.851369] __x64_sys_mount+0x282/0x300 [ 1245.852233] ? copy_mnt_ns+0xa00/0xa00 [ 1245.853083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1245.854214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1245.855330] do_syscall_64+0x33/0x40 [ 1245.856124] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1245.857225] RIP: 0033:0x7fda13c6e04a [ 1245.858015] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1245.861997] RSP: 002b:00007fda111e1fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1245.863629] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c6e04a [ 1245.865156] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 1245.866698] RBP: 00007fda111e2040 R08: 00007fda111e2040 R09: 0000000020000000 [ 1245.868223] R10: 0000000002004070 R11: 0000000000000206 R12: 0000000020000000 [ 1245.869747] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:47:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x10000200}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:47:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0x7f) 20:47:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:47:41 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:47:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xeaffffff00000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:47:41 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 67) 20:47:41 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 20) [ 1259.527725] FAULT_INJECTION: forcing a failure. [ 1259.527725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.531035] CPU: 1 PID: 8031 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1259.532498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.534269] Call Trace: [ 1259.534873] dump_stack+0x107/0x167 [ 1259.535668] should_fail.cold+0x5/0xa [ 1259.536506] _copy_from_user+0x2e/0x1b0 [ 1259.537377] __copy_msghdr_from_user+0x91/0x4b0 [ 1259.538399] ? __ia32_sys_shutdown+0x80/0x80 [ 1259.539353] ? __lock_acquire+0x1657/0x5b00 [ 1259.540328] ___sys_recvmsg+0xd5/0x200 [ 1259.541181] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1259.542267] ? trace_hardirqs_on+0x5b/0x180 [ 1259.543239] ? lock_acquire+0x197/0x470 [ 1259.544094] ? find_held_lock+0x2c/0x110 [ 1259.545188] ? __might_fault+0xd3/0x180 [ 1259.546045] ? lock_downgrade+0x6d0/0x6d0 [ 1259.546984] do_recvmmsg+0x24c/0x6d0 [ 1259.547798] ? ___sys_recvmsg+0x200/0x200 [ 1259.548692] ? lock_downgrade+0x6d0/0x6d0 [ 1259.549608] ? ksys_write+0x12d/0x260 [ 1259.550464] ? wait_for_completion_io+0x270/0x270 [ 1259.551514] ? rcu_read_lock_any_held+0x75/0xa0 [ 1259.552520] ? vfs_write+0x354/0xb10 [ 1259.553329] __x64_sys_recvmmsg+0x20f/0x260 [ 1259.554469] ? ksys_write+0x1a9/0x260 [ 1259.555297] ? __do_sys_socketcall+0x600/0x600 [ 1259.556504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1259.557633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1259.559012] do_syscall_64+0x33/0x40 [ 1259.559821] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1259.560931] RIP: 0033:0x7f9a8d697b19 [ 1259.561739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.565671] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1259.567315] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1259.568846] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1259.570392] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.571922] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1259.573454] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:47:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000000)=0x7f) [ 1259.647540] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1259.653025] FAULT_INJECTION: forcing a failure. [ 1259.653025] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.655737] CPU: 1 PID: 8042 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1259.657252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.659225] Call Trace: [ 1259.659899] dump_stack+0x107/0x167 [ 1259.660708] should_fail.cold+0x5/0xa [ 1259.661646] ? create_object.isra.0+0x3a/0xa20 [ 1259.662657] should_failslab+0x5/0x20 [ 1259.663560] kmem_cache_alloc+0x5b/0x310 [ 1259.664648] create_object.isra.0+0x3a/0xa20 [ 1259.665637] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1259.666792] kmem_cache_alloc+0x159/0x310 [ 1259.667801] getname_flags.part.0+0x50/0x4f0 [ 1259.669025] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1259.670146] getname+0x8e/0xd0 [ 1259.670993] do_sys_openat2+0xf9/0x4d0 [ 1259.671831] ? __kasan_slab_free+0x122/0x160 [ 1259.672989] ? build_open_flags+0x6f0/0x6f0 [ 1259.673917] ? __x64_sys_mount+0x227/0x300 [ 1259.675024] ? kfree+0xd7/0x340 [ 1259.675747] __x64_sys_openat+0x13f/0x1f0 [ 1259.676843] ? __ia32_sys_open+0x1c0/0x1c0 [ 1259.677760] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1259.679146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1259.680257] do_syscall_64+0x33/0x40 [ 1259.681060] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1259.682426] RIP: 0033:0x7fda13c1fa04 [ 1259.683233] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1259.688027] RSP: 002b:00007fda111c0f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1259.689652] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c1fa04 [ 1259.691188] RDX: 0000000000010000 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1259.692708] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000020000000 [ 1259.694218] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010000 [ 1259.695741] R13: 0000000020000100 R14: 00007fda111c1000 R15: 0000000020000080 20:47:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xf6ffffff00000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:47:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x11000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:47:41 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:47:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5425, &(0x7f0000000000)=0x7f) 20:47:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:47:41 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 68) 20:47:41 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 21) 20:47:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xfbffffff00000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:47:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1260.054140] FAULT_INJECTION: forcing a failure. [ 1260.054140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.056608] CPU: 1 PID: 8064 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1260.058025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.060081] Call Trace: [ 1260.060826] dump_stack+0x107/0x167 [ 1260.061586] should_fail.cold+0x5/0xa [ 1260.062394] _copy_from_user+0x2e/0x1b0 [ 1260.063229] __copy_msghdr_from_user+0x91/0x4b0 [ 1260.064182] ? __ia32_sys_shutdown+0x80/0x80 [ 1260.065090] ? __lock_acquire+0x1657/0x5b00 [ 1260.065993] ___sys_recvmsg+0xd5/0x200 [ 1260.066952] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1260.068169] ? __fget_files+0x2cf/0x520 [ 1260.069056] ? lock_acquire+0x197/0x470 [ 1260.069875] ? find_held_lock+0x2c/0x110 [ 1260.070741] ? __might_fault+0xd3/0x180 [ 1260.071551] ? lock_downgrade+0x6d0/0x6d0 [ 1260.072443] do_recvmmsg+0x24c/0x6d0 [ 1260.073206] ? ___sys_recvmsg+0x200/0x200 [ 1260.074186] ? lock_downgrade+0x6d0/0x6d0 [ 1260.075170] ? ksys_write+0x12d/0x260 [ 1260.076163] ? wait_for_completion_io+0x270/0x270 [ 1260.077135] ? rcu_read_lock_any_held+0x75/0xa0 [ 1260.078069] ? vfs_write+0x354/0xb10 [ 1260.078835] __x64_sys_recvmmsg+0x20f/0x260 [ 1260.079716] ? ksys_write+0x1a9/0x260 [ 1260.080508] ? __do_sys_socketcall+0x600/0x600 [ 1260.081434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1260.082772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.084093] do_syscall_64+0x33/0x40 [ 1260.084847] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1260.085884] RIP: 0033:0x7f9a8d697b19 [ 1260.086657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.090391] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1260.091945] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1260.093393] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1260.094870] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.096471] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1260.098258] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1260.119093] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:47:42 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1260.127657] FAULT_INJECTION: forcing a failure. [ 1260.127657] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.130189] CPU: 0 PID: 8066 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1260.131642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.133385] Call Trace: [ 1260.133941] dump_stack+0x107/0x167 [ 1260.134729] should_fail.cold+0x5/0xa [ 1260.135550] ? getname_flags.part.0+0x50/0x4f0 [ 1260.136504] should_failslab+0x5/0x20 [ 1260.137307] kmem_cache_alloc+0x5b/0x310 [ 1260.138207] getname_flags.part.0+0x50/0x4f0 [ 1260.139155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1260.140297] getname+0x8e/0xd0 [ 1260.141011] do_sys_openat2+0xf9/0x4d0 [ 1260.141849] ? __kasan_slab_free+0x122/0x160 [ 1260.142801] ? build_open_flags+0x6f0/0x6f0 [ 1260.143728] ? __x64_sys_mount+0x227/0x300 [ 1260.144620] ? kfree+0xd7/0x340 [ 1260.145339] __x64_sys_openat+0x13f/0x1f0 [ 1260.146215] ? __ia32_sys_open+0x1c0/0x1c0 [ 1260.147141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1260.148256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.149371] do_syscall_64+0x33/0x40 [ 1260.150165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1260.151264] RIP: 0033:0x7fda13c1fa04 [ 1260.152073] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1260.155966] RSP: 002b:00007fda111e1f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 20:47:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5427, &(0x7f0000000000)=0x7f) [ 1260.157594] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c1fa04 [ 1260.159271] RDX: 0000000000010000 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1260.160784] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000020000000 [ 1260.162278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010000 [ 1260.163803] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:47:56 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 22) 20:47:56 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:47:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:47:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x2c010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 69) 20:47:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xfeffffff00000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:47:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5428, &(0x7f0000000000)=0x7f) 20:47:56 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 1275.028222] FAULT_INJECTION: forcing a failure. [ 1275.028222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.031000] CPU: 1 PID: 8095 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1275.032058] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1275.032590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1275.032606] Call Trace: [ 1275.034114] FAULT_INJECTION: forcing a failure. [ 1275.034114] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.035839] dump_stack+0x107/0x167 [ 1275.035870] should_fail.cold+0x5/0xa [ 1275.035900] _copy_from_user+0x2e/0x1b0 [ 1275.035930] __copy_msghdr_from_user+0x91/0x4b0 [ 1275.042765] ? __ia32_sys_shutdown+0x80/0x80 [ 1275.043842] ? __lock_acquire+0x1657/0x5b00 [ 1275.044924] ___sys_recvmsg+0xd5/0x200 [ 1275.045881] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1275.047097] ? __lockdep_reset_lock+0x180/0x180 [ 1275.048234] ? __fget_files+0x2cf/0x520 [ 1275.049224] ? lock_acquire+0x197/0x470 [ 1275.050207] ? find_held_lock+0x2c/0x110 [ 1275.051221] ? __might_fault+0xd3/0x180 [ 1275.052203] ? lock_downgrade+0x6d0/0x6d0 [ 1275.053262] do_recvmmsg+0x24c/0x6d0 [ 1275.054202] ? ___sys_recvmsg+0x200/0x200 [ 1275.055243] ? lock_downgrade+0x6d0/0x6d0 [ 1275.056280] ? ksys_write+0x12d/0x260 [ 1275.057216] ? wait_for_completion_io+0x270/0x270 [ 1275.058422] ? rcu_read_lock_any_held+0x75/0xa0 [ 1275.059569] ? vfs_write+0x354/0xb10 [ 1275.060512] __x64_sys_recvmmsg+0x20f/0x260 [ 1275.061599] ? ksys_write+0x1a9/0x260 [ 1275.062588] ? __do_sys_socketcall+0x600/0x600 [ 1275.063756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1275.065094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1275.066305] do_syscall_64+0x33/0x40 [ 1275.067122] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1275.068234] RIP: 0033:0x7f9a8d697b19 [ 1275.069043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1275.073037] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1275.074635] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1275.076140] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1275.077646] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1275.079182] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1275.080673] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1275.082223] CPU: 0 PID: 8089 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1275.083825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1275.085706] Call Trace: [ 1275.086312] dump_stack+0x107/0x167 [ 1275.087161] should_fail.cold+0x5/0xa [ 1275.088068] ? __alloc_file+0x21/0x320 [ 1275.088095] should_failslab+0x5/0x20 [ 1275.088117] kmem_cache_alloc+0x5b/0x310 [ 1275.088155] __alloc_file+0x21/0x320 [ 1275.088182] alloc_empty_file+0x6d/0x170 [ 1275.088211] path_openat+0xe6/0x2770 [ 1275.088238] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1275.088263] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1275.088298] ? path_lookupat+0x860/0x860 [ 1275.088322] ? perf_trace_lock+0x2bd/0x490 [ 1275.088348] ? SOFTIRQ_verbose+0x10/0x10 [ 1275.088366] ? find_held_lock+0x2c/0x110 [ 1275.088398] ? __lockdep_reset_lock+0x180/0x180 20:47:57 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 23) [ 1275.088438] do_filp_open+0x190/0x3e0 [ 1275.088461] ? may_open_dev+0xf0/0xf0 20:47:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xffffff7f00000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:47:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x38010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1275.088496] ? alloc_fd+0x2e7/0x670 [ 1275.088520] ? lock_downgrade+0x6d0/0x6d0 [ 1275.088542] ? do_raw_spin_lock+0x121/0x260 [ 1275.088565] ? rwlock_bug.part.0+0x90/0x90 [ 1275.088612] ? _raw_spin_unlock+0x1a/0x30 [ 1275.088632] ? alloc_fd+0x2e7/0x670 [ 1275.088683] do_sys_openat2+0x171/0x4d0 [ 1275.088705] ? __kasan_slab_free+0x122/0x160 [ 1275.088729] ? build_open_flags+0x6f0/0x6f0 [ 1275.088762] ? __x64_sys_mount+0x227/0x300 [ 1275.088785] ? kfree+0xd7/0x340 [ 1275.088822] __x64_sys_openat+0x13f/0x1f0 20:47:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1275.088846] ? __ia32_sys_open+0x1c0/0x1c0 [ 1275.088888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1275.088915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1275.088948] do_syscall_64+0x33/0x40 [ 1275.088972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1275.088987] RIP: 0033:0x7fda13c1fa04 [ 1275.089009] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1275.089022] RSP: 002b:00007fda111e1f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1275.089047] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c1fa04 [ 1275.089061] RDX: 0000000000010000 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1275.089074] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000020000000 [ 1275.089087] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010000 [ 1275.089101] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 [ 1275.411412] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1275.417650] FAULT_INJECTION: forcing a failure. [ 1275.417650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.420355] CPU: 0 PID: 8111 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1275.421905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1275.423828] Call Trace: [ 1275.424438] dump_stack+0x107/0x167 [ 1275.425284] should_fail.cold+0x5/0xa [ 1275.426206] strncpy_from_user+0x34/0x470 [ 1275.427191] getname_flags.part.0+0x95/0x4f0 [ 1275.428201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1275.429401] getname+0x8e/0xd0 [ 1275.430152] do_sys_openat2+0xf9/0x4d0 [ 1275.431040] ? __kasan_slab_free+0x122/0x160 [ 1275.432044] ? build_open_flags+0x6f0/0x6f0 [ 1275.433035] ? __x64_sys_mount+0x227/0x300 [ 1275.433994] ? kfree+0xd7/0x340 [ 1275.434770] __x64_sys_openat+0x13f/0x1f0 [ 1275.435742] ? __ia32_sys_open+0x1c0/0x1c0 [ 1275.436738] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1275.437942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1275.439151] do_syscall_64+0x33/0x40 [ 1275.439999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1275.441157] RIP: 0033:0x7fda13c1fa04 [ 1275.442001] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1275.446166] RSP: 002b:00007fda111e1f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1275.447904] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c1fa04 [ 1275.449522] RDX: 0000000000010000 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1275.451159] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000020000000 [ 1275.452793] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010000 [ 1275.454426] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:48:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:48:11 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:48:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xffffffff00000000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:48:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 70) 20:48:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000000)=0x7f) 20:48:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:48:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x3f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:48:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 24) [ 1289.131631] FAULT_INJECTION: forcing a failure. [ 1289.131631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.134193] CPU: 0 PID: 8127 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1289.135716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.137549] Call Trace: [ 1289.138113] dump_stack+0x107/0x167 [ 1289.138896] should_fail.cold+0x5/0xa [ 1289.139787] _copy_from_user+0x2e/0x1b0 [ 1289.140701] __copy_msghdr_from_user+0x91/0x4b0 [ 1289.141686] ? __ia32_sys_shutdown+0x80/0x80 [ 1289.142632] ? __lock_acquire+0x1657/0x5b00 [ 1289.142671] ___sys_recvmsg+0xd5/0x200 [ 1289.142692] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1289.142710] ? trace_hardirqs_on+0x5b/0x180 [ 1289.142736] ? lock_acquire+0x197/0x470 [ 1289.142753] ? find_held_lock+0x2c/0x110 [ 1289.142778] ? __might_fault+0xd3/0x180 20:48:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1289.142797] ? lock_downgrade+0x6d0/0x6d0 [ 1289.142836] do_recvmmsg+0x24c/0x6d0 [ 1289.142862] ? ___sys_recvmsg+0x200/0x200 [ 1289.142880] ? lock_downgrade+0x6d0/0x6d0 [ 1289.142907] ? ksys_write+0x12d/0x260 [ 1289.142938] ? wait_for_completion_io+0x270/0x270 [ 1289.142959] ? rcu_read_lock_any_held+0x75/0xa0 [ 1289.142975] ? vfs_write+0x354/0xb10 20:48:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 71) [ 1289.142996] __x64_sys_recvmmsg+0x20f/0x260 [ 1289.143013] ? ksys_write+0x1a9/0x260 [ 1289.143033] ? __do_sys_socketcall+0x600/0x600 [ 1289.143055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 20:48:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 25) [ 1289.143075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.143096] do_syscall_64+0x33/0x40 [ 1289.143115] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.143127] RIP: 0033:0x7f9a8d697b19 [ 1289.143145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:48:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0xfffffffffffff000) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:48:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1289.143154] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 20:48:11 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {r4}, {}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 1289.143175] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1289.143185] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1289.143195] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.143206] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1289.143220] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1289.158892] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1289.161684] FAULT_INJECTION: forcing a failure. [ 1289.161684] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.161705] CPU: 0 PID: 8131 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1289.161716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.161724] Call Trace: [ 1289.161754] dump_stack+0x107/0x167 [ 1289.161782] should_fail.cold+0x5/0xa [ 1289.161805] ? __alloc_file+0x21/0x320 [ 1289.161827] should_failslab+0x5/0x20 [ 1289.161847] kmem_cache_alloc+0x5b/0x310 [ 1289.161881] __alloc_file+0x21/0x320 [ 1289.161905] alloc_empty_file+0x6d/0x170 [ 1289.161932] path_openat+0xe6/0x2770 [ 1289.161957] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1289.161980] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1289.162012] ? path_lookupat+0x860/0x860 [ 1289.162032] ? perf_trace_lock+0x2bd/0x490 [ 1289.162056] ? SOFTIRQ_verbose+0x10/0x10 [ 1289.162074] ? find_held_lock+0x2c/0x110 [ 1289.162102] ? __lockdep_reset_lock+0x180/0x180 [ 1289.162139] do_filp_open+0x190/0x3e0 [ 1289.162159] ? may_open_dev+0xf0/0xf0 [ 1289.162192] ? alloc_fd+0x2e7/0x670 [ 1289.162214] ? lock_downgrade+0x6d0/0x6d0 [ 1289.162235] ? do_raw_spin_lock+0x121/0x260 [ 1289.162256] ? rwlock_bug.part.0+0x90/0x90 [ 1289.162297] ? _raw_spin_unlock+0x1a/0x30 [ 1289.162321] ? alloc_fd+0x2e7/0x670 [ 1289.162368] do_sys_openat2+0x171/0x4d0 [ 1289.162388] ? __kasan_slab_free+0x122/0x160 [ 1289.162410] ? build_open_flags+0x6f0/0x6f0 [ 1289.162440] ? __x64_sys_mount+0x227/0x300 [ 1289.162462] ? kfree+0xd7/0x340 [ 1289.162496] __x64_sys_openat+0x13f/0x1f0 [ 1289.162519] ? __ia32_sys_open+0x1c0/0x1c0 [ 1289.162557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 20:48:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0xe4ffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1289.162578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.162621] do_syscall_64+0x33/0x40 [ 1289.162642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.162655] RIP: 0033:0x7fda13c1fa04 [ 1289.162674] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1289.162685] RSP: 002b:00007fda111e1f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1289.162708] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c1fa04 [ 1289.162720] RDX: 0000000000010000 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1289.162731] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000020000000 [ 1289.162743] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010000 [ 1289.162755] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 [ 1289.377703] FAULT_INJECTION: forcing a failure. [ 1289.377703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.417959] CPU: 0 PID: 8144 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1289.417969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.417975] Call Trace: [ 1289.418000] dump_stack+0x107/0x167 [ 1289.418022] should_fail.cold+0x5/0xa [ 1289.418048] _copy_from_user+0x2e/0x1b0 [ 1289.418074] __copy_msghdr_from_user+0x91/0x4b0 [ 1289.418095] ? __ia32_sys_shutdown+0x80/0x80 [ 1289.418114] ? __lock_acquire+0x1657/0x5b00 [ 1289.418152] ___sys_recvmsg+0xd5/0x200 20:48:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5441, &(0x7f0000000000)=0x7f) [ 1289.418174] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1289.418198] ? trace_hardirqs_on+0x5b/0x180 [ 1289.429906] ? lock_acquire+0x197/0x470 [ 1289.430746] ? find_held_lock+0x2c/0x110 [ 1289.431604] ? __might_fault+0xd3/0x180 [ 1289.432442] ? lock_downgrade+0x6d0/0x6d0 [ 1289.433331] do_recvmmsg+0x24c/0x6d0 [ 1289.434124] ? ___sys_recvmsg+0x200/0x200 [ 1289.435005] ? lock_downgrade+0x6d0/0x6d0 [ 1289.435895] ? ksys_write+0x12d/0x260 [ 1289.436721] ? wait_for_completion_io+0x270/0x270 [ 1289.437739] ? rcu_read_lock_any_held+0x75/0xa0 [ 1289.438725] ? vfs_write+0x354/0xb10 [ 1289.439509] __x64_sys_recvmmsg+0x20f/0x260 [ 1289.440422] ? ksys_write+0x1a9/0x260 [ 1289.441226] ? __do_sys_socketcall+0x600/0x600 [ 1289.442191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.443299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.444385] do_syscall_64+0x33/0x40 [ 1289.445169] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.446254] RIP: 0033:0x7f9a8d697b19 [ 1289.447046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.450926] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1289.452537] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1289.454048] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1289.455565] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.457071] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1289.458582] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:48:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:48:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 72) [ 1289.588571] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1289.590338] FAULT_INJECTION: forcing a failure. [ 1289.590338] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.592883] CPU: 0 PID: 8147 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1289.594445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.596205] Call Trace: [ 1289.596766] dump_stack+0x107/0x167 [ 1289.597545] should_fail.cold+0x5/0xa [ 1289.598368] ? create_object.isra.0+0x3a/0xa20 [ 1289.599343] should_failslab+0x5/0x20 [ 1289.600151] kmem_cache_alloc+0x5b/0x310 [ 1289.601032] create_object.isra.0+0x3a/0xa20 [ 1289.601967] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1289.603063] kmem_cache_alloc+0x159/0x310 [ 1289.603955] __alloc_file+0x21/0x320 [ 1289.604754] alloc_empty_file+0x6d/0x170 [ 1289.605626] path_openat+0xe6/0x2770 [ 1289.606429] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1289.607500] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1289.608568] ? path_lookupat+0x860/0x860 [ 1289.609433] ? perf_trace_lock+0x2bd/0x490 [ 1289.610330] ? SOFTIRQ_verbose+0x10/0x10 [ 1289.611191] ? find_held_lock+0x2c/0x110 [ 1289.612064] ? __lockdep_reset_lock+0x180/0x180 [ 1289.613063] do_filp_open+0x190/0x3e0 [ 1289.613869] ? may_open_dev+0xf0/0xf0 [ 1289.614702] ? alloc_fd+0x2e7/0x670 [ 1289.615482] ? lock_downgrade+0x6d0/0x6d0 [ 1289.616358] ? do_raw_spin_lock+0x121/0x260 [ 1289.617277] ? rwlock_bug.part.0+0x90/0x90 [ 1289.618197] ? _raw_spin_unlock+0x1a/0x30 [ 1289.619077] ? alloc_fd+0x2e7/0x670 [ 1289.619874] do_sys_openat2+0x171/0x4d0 [ 1289.620726] ? __kasan_slab_free+0x122/0x160 [ 1289.621658] ? build_open_flags+0x6f0/0x6f0 [ 1289.622588] ? __x64_sys_mount+0x227/0x300 [ 1289.623491] ? kfree+0xd7/0x340 [ 1289.624211] __x64_sys_openat+0x13f/0x1f0 [ 1289.625094] ? __ia32_sys_open+0x1c0/0x1c0 [ 1289.626006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.627122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.628224] do_syscall_64+0x33/0x40 [ 1289.629021] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.630102] RIP: 0033:0x7fda13c1fa04 [ 1289.630902] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1289.634793] RSP: 002b:00007fda111e1f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1289.636411] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c1fa04 [ 1289.637926] RDX: 0000000000010000 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1289.639443] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000020000000 [ 1289.640957] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010000 [ 1289.642473] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 [ 1289.817603] FAULT_INJECTION: forcing a failure. [ 1289.817603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.820542] CPU: 1 PID: 8166 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1289.821989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.823738] Call Trace: [ 1289.824293] dump_stack+0x107/0x167 [ 1289.825061] should_fail.cold+0x5/0xa [ 1289.825867] _copy_from_user+0x2e/0x1b0 [ 1289.826716] __copy_msghdr_from_user+0x91/0x4b0 [ 1289.827699] ? __ia32_sys_shutdown+0x80/0x80 [ 1289.828621] ? __lock_acquire+0x1657/0x5b00 [ 1289.829704] ___sys_recvmsg+0xd5/0x200 [ 1289.830741] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1289.831880] ? __fget_files+0x2cf/0x520 [ 1289.832903] ? lock_acquire+0x197/0x470 [ 1289.833936] ? find_held_lock+0x2c/0x110 [ 1289.834880] ? __might_fault+0xd3/0x180 [ 1289.835915] ? lock_downgrade+0x6d0/0x6d0 [ 1289.836955] do_recvmmsg+0x24c/0x6d0 [ 1289.837879] ? ___sys_recvmsg+0x200/0x200 [ 1289.839029] ? lock_downgrade+0x6d0/0x6d0 [ 1289.839967] ? ksys_write+0x12d/0x260 [ 1289.840941] ? wait_for_completion_io+0x270/0x270 [ 1289.842165] ? rcu_read_lock_any_held+0x75/0xa0 [ 1289.843300] ? vfs_write+0x354/0xb10 [ 1289.844338] __x64_sys_recvmmsg+0x20f/0x260 [ 1289.845260] ? ksys_write+0x1a9/0x260 [ 1289.846196] ? __do_sys_socketcall+0x600/0x600 [ 1289.847425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1289.848686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1289.849973] do_syscall_64+0x33/0x40 [ 1289.850822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1289.852054] RIP: 0033:0x7f9a8d697b19 [ 1289.853104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.857377] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1289.859341] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1289.860931] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1289.862432] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.863932] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1289.865428] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:48:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:48:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:48:27 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 73) 20:48:27 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:48:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0xffff0300}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:48:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5450, &(0x7f0000000000)=0x7f) 20:48:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 26) [ 1305.309416] FAULT_INJECTION: forcing a failure. [ 1305.309416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1305.312283] CPU: 1 PID: 8177 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1305.314048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.315824] Call Trace: [ 1305.316386] dump_stack+0x107/0x167 [ 1305.317157] should_fail.cold+0x5/0xa [ 1305.317963] _copy_from_user+0x2e/0x1b0 [ 1305.318819] __copy_msghdr_from_user+0x91/0x4b0 [ 1305.319796] ? __ia32_sys_shutdown+0x80/0x80 [ 1305.320734] ? __lock_acquire+0x1657/0x5b00 [ 1305.321661] ___sys_recvmsg+0xd5/0x200 [ 1305.322494] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1305.323563] ? __fget_files+0x2cf/0x520 [ 1305.324404] ? lock_acquire+0x197/0x470 [ 1305.325249] ? find_held_lock+0x2c/0x110 [ 1305.326113] ? __might_fault+0xd3/0x180 [ 1305.326961] ? lock_downgrade+0x6d0/0x6d0 [ 1305.327854] do_recvmmsg+0x24c/0x6d0 [ 1305.328642] ? ___sys_recvmsg+0x200/0x200 [ 1305.329525] ? lock_downgrade+0x6d0/0x6d0 [ 1305.330412] ? ksys_write+0x12d/0x260 [ 1305.331233] ? wait_for_completion_io+0x270/0x270 [ 1305.332255] ? rcu_read_lock_any_held+0x75/0xa0 [ 1305.333228] ? vfs_write+0x354/0xb10 [ 1305.334017] __x64_sys_recvmmsg+0x20f/0x260 [ 1305.334935] ? ksys_write+0x1a9/0x260 [ 1305.335741] ? __do_sys_socketcall+0x600/0x600 [ 1305.336702] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.337801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.338895] do_syscall_64+0x33/0x40 [ 1305.339681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.340750] RIP: 0033:0x7f9a8d697b19 [ 1305.341528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.345429] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1305.347038] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1305.348540] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1305.350041] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.351549] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1305.353051] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:48:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) r2 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2], 0x1}, 0x58) r3 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r3], 0x1}, 0x58) recvmmsg$unix(r0, &(0x7f0000000500)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/14, 0xe}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x1, 0x10080, 0x0) r4 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r4], 0x1}, 0x58) gettid() clone3(&(0x7f0000000580)={0xc0ca500, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x38}, &(0x7f0000002400)=""/102400, 0x19000, &(0x7f0000000600)=""/148, &(0x7f0000000640)}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0xff, 0x208000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000080)) [ 1305.408263] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1305.423187] FAULT_INJECTION: forcing a failure. [ 1305.423187] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.425906] CPU: 1 PID: 8185 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1305.427622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.429613] Call Trace: [ 1305.430256] dump_stack+0x107/0x167 [ 1305.431299] should_fail.cold+0x5/0xa [ 1305.432134] ? security_file_alloc+0x34/0x170 [ 1305.433288] should_failslab+0x5/0x20 [ 1305.434320] kmem_cache_alloc+0x5b/0x310 [ 1305.435196] security_file_alloc+0x34/0x170 [ 1305.436320] __alloc_file+0xb7/0x320 [ 1305.437253] alloc_empty_file+0x6d/0x170 [ 1305.438267] path_openat+0xe6/0x2770 [ 1305.439284] ? __lock_acquire+0x1657/0x5b00 [ 1305.440352] ? path_lookupat+0x860/0x860 [ 1305.441389] ? perf_trace_lock+0xac/0x490 [ 1305.442321] ? SOFTIRQ_verbose+0x10/0x10 [ 1305.443264] ? find_held_lock+0x2c/0x110 [ 1305.444399] ? __lockdep_reset_lock+0x180/0x180 [ 1305.445476] do_filp_open+0x190/0x3e0 [ 1305.446289] ? may_open_dev+0xf0/0xf0 [ 1305.447126] ? alloc_fd+0x2e7/0x670 [ 1305.448037] ? lock_downgrade+0x6d0/0x6d0 [ 1305.449102] ? do_raw_spin_lock+0x121/0x260 [ 1305.450218] ? rwlock_bug.part.0+0x90/0x90 [ 1305.451175] ? _raw_spin_unlock+0x1a/0x30 [ 1305.452212] ? alloc_fd+0x2e7/0x670 [ 1305.453223] do_sys_openat2+0x171/0x4d0 [ 1305.454100] ? __kasan_slab_free+0x122/0x160 [ 1305.455353] ? build_open_flags+0x6f0/0x6f0 [ 1305.456456] ? __x64_sys_mount+0x227/0x300 [ 1305.457342] ? kfree+0xd7/0x340 [ 1305.458190] __x64_sys_openat+0x13f/0x1f0 [ 1305.459241] ? __ia32_sys_open+0x1c0/0x1c0 [ 1305.460265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.461515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.462881] do_syscall_64+0x33/0x40 [ 1305.463750] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.464836] RIP: 0033:0x7fda13c1fa04 [ 1305.465787] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1305.470006] RSP: 002b:00007fda111e1f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1305.471614] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c1fa04 [ 1305.473108] RDX: 0000000000010000 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1305.474609] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000020000000 [ 1305.476110] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010000 [ 1305.477606] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:48:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x0) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:48:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0xffffff0f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:48:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5451, &(0x7f0000000000)=0x7f) 20:48:27 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:48:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:48:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {0xffffffe4}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:48:48 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 27) 20:48:48 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:48:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000000)=0x7f) 20:48:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x0) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:48:48 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 74) 20:48:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:48:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) fsmount(r1, 0x0, 0x72) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1326.839249] FAULT_INJECTION: forcing a failure. [ 1326.839249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.841836] CPU: 1 PID: 8217 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1326.841847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1326.841853] Call Trace: [ 1326.841877] dump_stack+0x107/0x167 [ 1326.841898] should_fail.cold+0x5/0xa [ 1326.841924] _copy_from_user+0x2e/0x1b0 [ 1326.841950] __copy_msghdr_from_user+0x91/0x4b0 [ 1326.841970] ? __ia32_sys_shutdown+0x80/0x80 [ 1326.841989] ? __lock_acquire+0x1657/0x5b00 [ 1326.842027] ___sys_recvmsg+0xd5/0x200 [ 1326.842048] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1326.842067] ? __fget_files+0x2cf/0x520 [ 1326.842092] ? lock_acquire+0x197/0x470 [ 1326.842109] ? find_held_lock+0x2c/0x110 [ 1326.842133] ? __might_fault+0xd3/0x180 [ 1326.842152] ? lock_downgrade+0x6d0/0x6d0 [ 1326.842190] do_recvmmsg+0x24c/0x6d0 [ 1326.842216] ? ___sys_recvmsg+0x200/0x200 [ 1326.842234] ? lock_downgrade+0x6d0/0x6d0 [ 1326.842275] ? ksys_write+0x12d/0x260 [ 1326.860702] ? wait_for_completion_io+0x270/0x270 [ 1326.860725] ? rcu_read_lock_any_held+0x75/0xa0 [ 1326.860741] ? vfs_write+0x354/0xb10 [ 1326.860773] __x64_sys_recvmmsg+0x20f/0x260 [ 1326.864651] ? ksys_write+0x1a9/0x260 [ 1326.864672] ? __do_sys_socketcall+0x600/0x600 [ 1326.864695] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1326.864714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1326.864735] do_syscall_64+0x33/0x40 [ 1326.864754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1326.864766] RIP: 0033:0x7f9a8d697b19 [ 1326.864785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1326.864794] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1326.864814] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1326.864825] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1326.864835] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1326.864845] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1326.864856] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1326.886691] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:48:48 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:48:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x545d, &(0x7f0000000000)=0x7f) 20:48:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58) [ 1326.987854] FAULT_INJECTION: forcing a failure. [ 1326.987854] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.990377] CPU: 1 PID: 8214 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1326.991832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1326.993566] Call Trace: [ 1326.994128] dump_stack+0x107/0x167 [ 1326.994895] should_fail.cold+0x5/0xa [ 1326.995708] ? create_object.isra.0+0x3a/0xa20 20:48:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x0) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1326.996668] should_failslab+0x5/0x20 [ 1326.997616] kmem_cache_alloc+0x5b/0x310 [ 1326.998482] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1326.999653] create_object.isra.0+0x3a/0xa20 [ 1327.000572] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1327.001637] kmem_cache_alloc+0x159/0x310 [ 1327.002516] security_file_alloc+0x34/0x170 [ 1327.003455] __alloc_file+0xb7/0x320 [ 1327.004347] alloc_empty_file+0x6d/0x170 [ 1327.005454] path_openat+0xe6/0x2770 [ 1327.006246] ? __lock_acquire+0x1657/0x5b00 [ 1327.007185] ? path_lookupat+0x860/0x860 [ 1327.008040] ? perf_trace_lock+0xac/0x490 [ 1327.008908] ? SOFTIRQ_verbose+0x10/0x10 [ 1327.009755] ? find_held_lock+0x2c/0x110 [ 1327.010610] ? __lockdep_reset_lock+0x180/0x180 [ 1327.011611] do_filp_open+0x190/0x3e0 [ 1327.012500] ? may_open_dev+0xf0/0xf0 [ 1327.013427] ? alloc_fd+0x2e7/0x670 [ 1327.014355] ? lock_downgrade+0x6d0/0x6d0 20:48:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r3, r1, 0xead}) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r5) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) recvmsg$unix(r3, &(0x7f0000001780)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000500)=""/87, 0x57}, {&(0x7f0000000580)=""/165, 0xa5}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/140, 0x8c}], 0x6, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x21) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x4, 0xff, 0x65, 0x6, 0x0, 0xffffffffffffcfe4, 0xa0540, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0x9}, 0x2040, 0xffffffff, 0x1ff, 0x9, 0x9, 0x1, 0x1, 0x0, 0x7fff, 0x0, 0x1}, r6, 0x1, 0xffffffffffffffff, 0x9) [ 1327.015270] ? do_raw_spin_lock+0x121/0x260 [ 1327.016293] ? rwlock_bug.part.0+0x90/0x90 [ 1327.017229] ? _raw_spin_unlock+0x1a/0x30 [ 1327.018099] ? alloc_fd+0x2e7/0x670 [ 1327.018880] do_sys_openat2+0x171/0x4d0 [ 1327.019727] ? __kasan_slab_free+0x122/0x160 [ 1327.020658] ? build_open_flags+0x6f0/0x6f0 [ 1327.021581] ? __x64_sys_mount+0x227/0x300 [ 1327.022469] ? kfree+0xd7/0x340 [ 1327.023198] __x64_sys_openat+0x13f/0x1f0 [ 1327.024169] ? __ia32_sys_open+0x1c0/0x1c0 [ 1327.025219] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.026444] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.027554] do_syscall_64+0x33/0x40 [ 1327.028335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1327.029434] RIP: 0033:0x7fda13c1fa04 [ 1327.030221] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1327.034288] RSP: 002b:00007fda111e1f30 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1327.036179] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13c1fa04 [ 1327.037674] RDX: 0000000000010000 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 1327.039188] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000020000000 [ 1327.040690] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010000 [ 1327.042194] R13: 0000000020000100 R14: 00007fda111e2000 R15: 0000000020000080 20:48:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 75) 20:48:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:48:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x3, 0x0, 0x0}, 0x58) 20:48:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) (fail_nth: 28) 20:48:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5460, &(0x7f0000000000)=0x7f) [ 1327.332324] FAULT_INJECTION: forcing a failure. [ 1327.332324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.335053] CPU: 0 PID: 8243 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1327.336615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.338504] Call Trace: [ 1327.339118] dump_stack+0x107/0x167 [ 1327.339942] should_fail.cold+0x5/0xa [ 1327.340817] _copy_from_user+0x2e/0x1b0 [ 1327.341722] __copy_msghdr_from_user+0x91/0x4b0 [ 1327.342774] ? __ia32_sys_shutdown+0x80/0x80 [ 1327.343774] ? __lock_acquire+0x1657/0x5b00 [ 1327.344779] ___sys_recvmsg+0xd5/0x200 [ 1327.345672] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1327.346778] ? trace_hardirqs_on+0x5b/0x180 [ 1327.347775] ? lock_acquire+0x197/0x470 [ 1327.348668] ? find_held_lock+0x2c/0x110 [ 1327.349594] ? __might_fault+0xd3/0x180 [ 1327.350490] ? lock_downgrade+0x6d0/0x6d0 [ 1327.351464] do_recvmmsg+0x24c/0x6d0 [ 1327.352312] ? ___sys_recvmsg+0x200/0x200 [ 1327.353254] ? lock_downgrade+0x6d0/0x6d0 [ 1327.354213] ? ksys_write+0x12d/0x260 [ 1327.355107] ? wait_for_completion_io+0x270/0x270 [ 1327.356205] ? rcu_read_lock_any_held+0x75/0xa0 [ 1327.357254] ? vfs_write+0x354/0xb10 [ 1327.358104] __x64_sys_recvmmsg+0x20f/0x260 [ 1327.359076] ? ksys_write+0x1a9/0x260 [ 1327.359939] ? __do_sys_socketcall+0x600/0x600 [ 1327.360976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.362155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.363340] do_syscall_64+0x33/0x40 [ 1327.364188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1327.365344] RIP: 0033:0x7f9a8d697b19 [ 1327.366182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1327.370364] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1327.372110] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1327.373715] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1327.375335] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1327.376945] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1327.378559] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:48:49 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:48:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1327.539576] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1327.566412] FAULT_INJECTION: forcing a failure. [ 1327.566412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.569147] CPU: 0 PID: 8254 Comm: syz-executor.2 Not tainted 5.10.240 #1 [ 1327.570683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.572553] Call Trace: [ 1327.573154] dump_stack+0x107/0x167 [ 1327.574004] should_fail.cold+0x5/0xa [ 1327.574883] _copy_to_user+0x2e/0x180 [ 1327.575777] simple_read_from_buffer+0xcc/0x160 [ 1327.576843] proc_fail_nth_read+0x198/0x230 [ 1327.577835] ? proc_sessionid_read+0x230/0x230 [ 1327.578870] ? security_file_permission+0xb1/0xe0 [ 1327.579994] ? proc_sessionid_read+0x230/0x230 [ 1327.581042] vfs_read+0x228/0x620 [ 1327.581853] ksys_read+0x12d/0x260 [ 1327.582665] ? vfs_write+0xb10/0xb10 [ 1327.583525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.584717] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.585913] do_syscall_64+0x33/0x40 [ 1327.586762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1327.587932] RIP: 0033:0x7fda13c1f69c [ 1327.588771] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1327.592917] RSP: 002b:00007fda111e2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1327.594644] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fda13c1f69c [ 1327.596258] RDX: 000000000000000f RSI: 00007fda111e21e0 RDI: 0000000000000004 [ 1327.597882] RBP: 00007fda111e21d0 R08: 0000000000000000 R09: 0000000020000000 [ 1327.599494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1327.601111] R13: 00007ffc2d3d0adf R14: 00007fda111e2300 R15: 0000000000022000 20:49:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0}, 0x58) 20:49:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendto(r0, &(0x7f0000000500)="0f06577030efc77dc64d9afd9cecb92b9a776f7131ba70c00683a671c035c1c1f4a630c13ec3cafc248f69099842a66d45efb17f491c900cd4520848b450e6c6a688a1afb17e533a6a0e3567ec0647e6856fc3952857baf7be718863952fb4eedd71ce02b5276b5578fcf58ab81a88948d39e6292058d4eb1f77ccddf7fd412e7b1fa22b8e394973eaf5811080cf82232935128952d39b97212775dc4d9f4de03b8a11a38bcaf363e3aa6ee769996b5f6fe3799205efceffb6952afa90dd9206d6f3426f6276127304af5c7bdde59f9cf59d6abdbafd4e48359281a4ede726f5588fc411c673d97c3b6ceea475f087908c5c8d7c4fe01464157feaa9ee2a398bc12580cd82389476d1f61e35480f5d130312c59ac0d4d173f7a939c1bf9fc0a6e21c596cbed2290d084f7bc86990f7aa0c72d94cd720706f8313537e0556b7e9fa80ae5969b66e2ce6e35219598b5fbf0f95de3d4124c648ebea5284938e1ab8b500caddbe8051324141309af88dcb25c710744bc71446653aad600f5972b440f3c9d9156552e4dff43a759b651f2d0757fe4ee205d8c177d99faeb163b711c79a7bb70e8f9575d9239383c3ea60d54f4308d65294852a6bcd504121b99e72ca31251988d1d6a9c676a65c6c70c87dc07f4423b921a8288656102c9ce7863749f91a34cdecd415a01ab62704568099d6bdb7eb12755d42d62e1712af70ab7a33263e310b5fe563a1b8bff0f0d906ed150092f12116d931a01b92ea30faf52655799031ee66f9c5da1e5d34f29b7c82f7ffe01d267e25df76fb9c241c80b41fb0267537693ac274f950372e117db3061ee164f31ad8bff505d33b752414ae806ec566050e2c08a18d9686e7ee714dbab4302472fb972e4058b6e7b2f0d0b94ebfccf7d1b20f92116bf4a3b7f951ffdffa30a4482231f55eb931fc8229eb4ce6d48ff9ad006158132c850e069ab8ab9e96375d10e065498c334aacf719f39f4fb2c1120b8c7a00daa268c2dafa3c42320004184f39e0a6c1c83d43835369b2f6f9e02270b1f26a1c127cd720ad6b69aa607e0ba486a0886c37c78f9374a4a361d560cf5b77dd69c025809cfe7b48db0bea179fd036fb2ee41a36e3b980cd6c0dc40943025498294d354f780ec71699911bf2e34debebb442fb6da00222d9c172da87c3f1e49a57a11ae3ea419a0c0844ac0db4f2874a4f268a783be11d3bb63ec843623176536d35c6fcf171be3372c183808b01c5e3fd7c9937d048a68d31f49dd18a9130cdc03c49a831b01c81c7645b32a544a9d27f01947f4821bc4f08e9da7adefeb1d9a022449d8416dbb44b0bf5696d36ef2428a1fe16d7929a28d3645396013acf61b77cce757a47f0a6bec516c2355ed3a1c165144fc8d2346cf18226c9dd2db48bc585b502b2dee97397b94df72e057589b4e1f5b12a8984647d3044db361a331b166190cb4b537ed57af3a5dd3722effd07d58e75c1bdb819bba63c103127a10ca4f45bc0934f2a484b2d8c092cfc24fdc0afa3467c14f54e4de38b3626b03ac001545cb294a558a273972f9172d66741dc2dd032f59ab145873b6aea3fbf526cadf0de49682bbb2329cc3f5b35834850840d5158e6226bb359c73a13b27967bfa9d89bf76bc2e3221028f37deeb10f56ad3738e6cd4d31d0a1788bd16a0e7e6b477951ccad5a9e6f5627cb3e6ef8d771cea5f58012a82a8935bad05b6f7b63f8c6b53884fdc603e7e288957808fdd1fea11032b5276b17aaf57e910d94e76d65b32c5ab707c124334bebb2ca11005faaea7eb6b184dcca35596b4847a52e66ce9ce06604b8c4422f031367a1ec167f7da84aac3dc364471d242cb4b7e9c39cefd7a93d5150bcfafa4cbbaa555f6a0848cd6d329e44e6b9dc3e440daf79deef8e1ad22b7b672a805ff8ae6297daad51c32c381cec450949fc0448f8ffeceab3d10201ae6c3071e28d5071530aba76ba8150c726c103e8f92730eed5835e8a1b719dba5dca66ae39054575b91e619d651c01a4453bf98d9ba594eaafb76fd34b67f8c81a2228675a39154d863fc4f159cd92d1f28cadca9555ae1f6b2d70e44b44a795a2e7f1d0dc9d4bb83b5b5c355f617560ec08cda45435dc80591f0939cb923aebb8646644edde0f50b136523ebaed6648aba2d9c3112c1d256691c9c3d9ffcc2e1c3ac7609116404ed5b57d94538e6f9bf63e9653ec169456aa69dcbb7736fa76bf2784b30a06e23befe915bc655d55ecf906238429eb7c7284888214f6cdcd8370e57d2d5950958c3c3cb4ef68a36f10845505eb8efd903d8a98b10ec86824bd04673fc3dfc3efa9262f21dce7baa79077702ae88b9d338d8184325c835f75ab88b9112e314455bdf802808288dc214100dade5cfd87e9d0abe0cf9b5e67705d56dae051300e3dc47c228dd7142795c8fa0fbcdaace1758037c5ff165d06be711b5ab768eebf22ee7aa1b1b834d052f8ee880a5d84356486ccedd5c4f40839115758cab0c7645ecffd48d1199078c972d285b197158e579b221b45d0a90166b81459fc78336854e864d58aa035a8a5c1af2fe3f2eac6d011aa4431e18d1944a820f4059a3acf9e29ceb366aeb919462d2ce7929b5e0084744984d08321188aafa400c747b874d72f3d9688e2bee04c8434f5c24863b2bcddd3e26a1abd0583d6143d1a481b9111f8df76af308c71b2d1fac7cb86e104f0a3610ff3beccbf63e4e1c82c24e2d759dee2e1ef3aa451cda84acca0cb0a6f89636c71e06f10a2ae4cbc67045fbcf5364b67868d215e8ba08c499ce42a4d345735c3690d40a8162943342b819f67fd53c88bf23bba97aecee4331e43b1901faef872d92bcd2ad28ab0c255374363c9ab1ea42e8b3be0f5ad7e4c50e565565c4f0e866c1b1c808841e495fbed0cd02adcdddae60d9e9d3cd25844c22492cde287bf16d4b9d6e5dc3e47a9a0ffbf8f357f0b6c07799142027931b0ed9859cf164ff749d8ed3141f405ff91922b807a6d5136aa9bc28b70886036517dc4d974d69a3ec1075962e18b0f68bffc55535fa40191935177bda92da07a14aa90075eafe8bc61bb32266786e872f87e7ad68cc43fe08c76cb581c21ab5dea044d55105f4add6665f6e50772d43d8dc8f9fa1ba0fcc69f2061481280b333a2c253935d4c33c0e4199456898348a4f48960c3ee3dde7d65e545f5fa4fa6a0b35e130c3d9b8ad44dbd4ebe190d59569e444c75f5e5dca6faf35bb4a94b138a8aa1b134cb4c9a56ff73cae9a2515304592da216749321cc3014432f4415503bf452d599ed46ab13a3dafc6ba55cadedb3fc2b1252f0d10260c78deea638d42cd0b3fe83f5f4bc4cf942cb6d9a7b13d1897a9e60be2de64d3f1af17daa0a67d885432a400ed1087352f06b6b8cd740748f4ef5f841c8bfff134ba78f0a874dbe97a2ee401a2fb5abd5c53204d7eed5c16e1a45cad6fcd9b770c869ec40adb3145a8b19d8d6113888645dfaed71a6d0505db24c06cae88f8874ef47b4c653f6093250115dadd77ecfa9093b1e4e9656c770bc0a6e256f441237934921c83c54426bbf1041c7dfe03f8c59a311b45e348868e083f6e4967a6db63df7f30fe7b5a4223f0f57e57f484918db626c575897cff28e016d2a019801dd8c95287442dd9ca03d58f04bcbc9e5353d55ec466e59856675f23d97400e3606df7f94197440e00cf7adbb3100e844db8c95b7c030e8978107f6614da012607a847dab6347fa60216fe0f4bc0e3b6dba5a377205ebeffcd3724ffb6beaafe3595f8f09a85f308437b3e1c3dbc887d5d4cd218d6b48cef65f97627e76993b21b24f567406511f86ae077314e126f323905dfaaae046ad45a7860b94462748e32426e86b75d1dd22ce228cc0dc6526508fce512940d5bcb60588a37001ae69112120c7e54cee106b7200c3681e0d2ba6cd69bab1a7b0ae4cc0e6959d0607bf6cb658b2c03360bb1f8cb53594552f74e0d2ac22ff65e424436c1c392bf7e146e86a792475ec0a8b3a9245215eba5dc17c1b72e31eacbce6d2260001472d2a482eca7b324f3ced0e0de37a8130d822155cf4549daea273cadf25596ca3a10ea7e33736403e02d3bb7238333cc1aee7f712d4446d1ffcb64b538ec3855587deda6c81fe8a7c885627e34fa80c3d4117fe52bd56cb3465554de48162c633b3adcbe89d61bbc7c640759fa95d1b577232e534637dbdf0f01922a8004d683242c874333e81dba5b5471e3288d2c71a654f9a9ad48f927442b5466c71c31acd899b64399c375d5cb08d945359f4c9bea0b6593fd653249ed321b07e85b7cb9a65f8c49b6f3655fa5f5bc409d7dabf6baf3f9024cab045236703b019d2d8bb007ce5b7e8d01a61e9535ced57947e7ae70376b1eff1a598720b43d1fcf79cb446cdfe70f80f6493ab5a01fe52913642c9260d69d5886e8de7ae717577ed677066c6528fcc99eb48ad955817ed1f35b15123ea57bfbe9aa297969aa3ad013aa066c346e9d49e696de262da53eb91e6b3d12051c30faad7ead0eae1db8e5841e5a37e504d043151eae4a8a63659dc2f1ef7349cf1a67432197cf8aed7f6a6a0be68f7859360b9e0292037ea794317e14225407e362e8d76f4e191a444f1a5d7cd33051532f3fa63993ad4733a7d205287f59610713806bdc4c8a57f83f3ebbb723f57dcd80c8f2cc82af0f2a75f86f9ccadc1581b54f969e136400ca06c90e36e0593f723b44ab21bbbf444267f3b5e999865a33546b62143a1bf0f13f2e037ee7b956d87d20fb98be4611cae43fcba05d354f9a53d62c9163a5b094ebf3826d348d0e67a202e3a2ec0486a90022d23fbc6953b336178bcebae92b99c840a5961a83369d2c239e20f8fa222d535f322985bc484c304468288199e49ac79ec922ee0fb69808d8add2627bef9eebf08da72bec593ad4159cfff8c5873865bb349d2bf06db7f29ddb4711c50b3211029e3626c4fef9767a5260026d6833e07079d36c9031aebb82c18f27c37b887949ab1150e4a0367ef49c597ff902157bbdfe6863ba261f90f9ac2858a081a1e2d510613e5713d103b894c1db944129ba8acee2b0e75358b5ad6d50e967e5e3f283e57fdd4542d92f744dd275e703ab19742562c2234caddd17d137df32f53636ce6a9f68f31efac5e2633585e06119b34fac7556acc19951474b8c475962013259af8928388610a44d0745d95c3f98463dbe92378ab4c24037cd9a53e0a7f1130028440651fe458c468d2551bd2731eccd2a8696659347dd369da2de31b9d9b3eb02e5b55ee653f08fc17c5d5983471db2679403811555f462da27d94e46f61a591649bf5a95d9b3ec3804c07b7f461224aca4a25b339c336d112086201296ecfeebb6e571bc62a958f17e9dd5d1347e0d68054935f9708994134aa40a6c67b34eafddebad794086d41b33e7d39df10c5cd106e0a6b049ec91cb36c54a3be56b28aee136c8dac6419d0cab6a03ac350e4000c8a02e987218c5ade17fbd1aab8d2eaca4cc233a603e48f42db2272b3474f2759e84e6b09fb3b8bef5e4851ad70212ec77516c2e86e8f7e55ee0481368ca30909fd257aab1655f6ec2f52daea78bfc17482891ce193da25bf7b644e1d71f267f1ffd6d2a6b7687df3b6b63781b71b86d77bbd60ff72df9d7f1589ec695cd46484772c3b68856d422bd80d4029369efe2240d67445b6d80318500f4e80f46cfff20dce5f7c20d520d30fee2a8c295445e3250fa9773d0ab85a2ca7abaea25a621c9c6ac19b54b572b63ea7d64cd24fba483f1a270cd96268", 0x1000, 0x5850, &(0x7f0000000080)=@l2={0x1f, 0x7, @any, 0x1, 0x1}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x40010, r2, 0x8000000) 20:49:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:49:03 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r0, 0x1326}, {}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:49:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x40049409, &(0x7f0000000000)=0x7f) 20:49:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:49:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:49:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 76) [ 1341.432440] FAULT_INJECTION: forcing a failure. [ 1341.432440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.435033] CPU: 1 PID: 8276 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1341.436490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.438316] Call Trace: [ 1341.438971] dump_stack+0x107/0x167 [ 1341.439885] should_fail.cold+0x5/0xa [ 1341.440828] _copy_from_user+0x2e/0x1b0 [ 1341.441813] __copy_msghdr_from_user+0x91/0x4b0 [ 1341.442957] ? __ia32_sys_shutdown+0x80/0x80 [ 1341.444045] ? __lock_acquire+0x1657/0x5b00 [ 1341.445139] ___sys_recvmsg+0xd5/0x200 [ 1341.446102] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1341.447315] ? __lockdep_reset_lock+0x180/0x180 [ 1341.448468] ? lock_acquire+0x197/0x470 [ 1341.449443] ? find_held_lock+0x2c/0x110 [ 1341.450447] ? __might_fault+0xd3/0x180 [ 1341.451418] ? lock_downgrade+0x6d0/0x6d0 [ 1341.452451] do_recvmmsg+0x24c/0x6d0 [ 1341.453369] ? ___sys_recvmsg+0x200/0x200 [ 1341.454392] ? lock_downgrade+0x6d0/0x6d0 [ 1341.455422] ? ksys_write+0x12d/0x260 [ 1341.456375] ? wait_for_completion_io+0x270/0x270 20:49:03 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 1341.457546] ? rcu_read_lock_any_held+0x75/0xa0 [ 1341.458896] ? vfs_write+0x354/0xb10 [ 1341.459826] __x64_sys_recvmmsg+0x20f/0x260 [ 1341.460871] ? ksys_write+0x1a9/0x260 [ 1341.461796] ? __do_sys_socketcall+0x600/0x600 [ 1341.463126] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1341.464559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1341.465988] do_syscall_64+0x33/0x40 [ 1341.466988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1341.468416] RIP: 0033:0x7f9a8d697b19 [ 1341.469415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.474654] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1341.476872] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1341.478853] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1341.480796] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.482759] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1341.484714] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1341.525702] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:49:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 77) 20:49:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x5, 0x0, 0x0}, 0x58) 20:49:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:49:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000000)=0x7f) 20:49:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) umount2(&(0x7f0000000080)='./file1\x00', 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x1ff, 0x4) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:49:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:49:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x2, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 1341.721505] FAULT_INJECTION: forcing a failure. [ 1341.721505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.722850] CPU: 0 PID: 8294 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1341.723612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.724529] Call Trace: [ 1341.724842] dump_stack+0x107/0x167 [ 1341.725254] should_fail.cold+0x5/0xa [ 1341.725682] _copy_from_user+0x2e/0x1b0 [ 1341.726130] __copy_msghdr_from_user+0x91/0x4b0 [ 1341.726646] ? __ia32_sys_shutdown+0x80/0x80 [ 1341.727258] ? __lock_acquire+0x1657/0x5b00 [ 1341.727812] ___sys_recvmsg+0xd5/0x200 [ 1341.728244] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1341.728792] ? __fget_files+0x2cf/0x520 [ 1341.729259] ? lock_acquire+0x197/0x470 [ 1341.729720] ? find_held_lock+0x2c/0x110 [ 1341.730182] ? __might_fault+0xd3/0x180 [ 1341.730623] ? lock_downgrade+0x6d0/0x6d0 [ 1341.731092] do_recvmmsg+0x24c/0x6d0 [ 1341.731516] ? ___sys_recvmsg+0x200/0x200 [ 1341.731974] ? lock_downgrade+0x6d0/0x6d0 [ 1341.732467] ? ksys_write+0x12d/0x260 [ 1341.732922] ? wait_for_completion_io+0x270/0x270 [ 1341.733484] ? rcu_read_lock_any_held+0x75/0xa0 [ 1341.734026] ? vfs_write+0x354/0xb10 [ 1341.734461] __x64_sys_recvmmsg+0x20f/0x260 [ 1341.734964] ? ksys_write+0x1a9/0x260 [ 1341.735416] ? __do_sys_socketcall+0x600/0x600 [ 1341.735948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1341.736557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1341.737136] do_syscall_64+0x33/0x40 [ 1341.737571] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1341.738165] RIP: 0033:0x7f9a8d697b19 [ 1341.738598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.740620] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1341.741502] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1341.742290] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1341.743111] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.743947] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1341.744774] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1341.868689] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1341.891029] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:49:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 78) 20:49:15 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:49:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x3, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:49:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:49:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x40087602, &(0x7f0000000000)=0x7f) 20:49:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x0, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:49:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ff) openat(r0, &(0x7f0000000100)='./file1\x00', 0x40, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x13, r0, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x48000, 0x29) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r2, 0x0, &(0x7f0000000280)="e407e52e2e79b3f053a9de33e41dbfb2e66ab530b79b5c86131c7c56f7a6bf622a2dcfe70ceb58109ba2d001c77db43a5cc8ea5f77f7672dacb61e20f1f7d3f58306c3b900be7e32e0bbcf926113de3220d9e40ae7b820da5aac8fb0dedc8fe7e7d5578d07c33f5c74f30c5af0b919a050f7eb6bc76a17322af5fa73185bc75bd7b5d455416f0082941a087ac18ef964ff1db294e0f1763486b2b094779e9dedb6a20fea8a34a46e98c040e031430264a18b8d8368b8f7dce7133637161b1ba8dc19cbc48092c3c0", 0xc8, 0x4004810, 0x1, {0x0, r3}}, 0x5) r4 = openat2(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={0xfa4213d2c5379333, 0x3}, 0x18) syncfs(r4) 20:49:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58) [ 1354.049344] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1354.050646] FAULT_INJECTION: forcing a failure. [ 1354.050646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.052290] CPU: 1 PID: 8318 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1354.053193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1354.054277] Call Trace: [ 1354.054630] dump_stack+0x107/0x167 [ 1354.055111] should_fail.cold+0x5/0xa [ 1354.055629] _copy_from_user+0x2e/0x1b0 [ 1354.056159] __copy_msghdr_from_user+0x91/0x4b0 [ 1354.056778] ? __ia32_sys_shutdown+0x80/0x80 [ 1354.057360] ? __lock_acquire+0x1657/0x5b00 [ 1354.057946] ___sys_recvmsg+0xd5/0x200 [ 1354.058461] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1354.059118] ? __lockdep_reset_lock+0x180/0x180 [ 1354.059736] ? __fget_files+0x2cf/0x520 [ 1354.060269] ? lock_acquire+0x197/0x470 [ 1354.060793] ? find_held_lock+0x2c/0x110 [ 1354.061342] ? __might_fault+0xd3/0x180 [ 1354.061867] ? lock_downgrade+0x6d0/0x6d0 [ 1354.062428] do_recvmmsg+0x24c/0x6d0 [ 1354.062934] ? ___sys_recvmsg+0x200/0x200 [ 1354.063492] ? lock_downgrade+0x6d0/0x6d0 [ 1354.064045] ? ksys_write+0x12d/0x260 [ 1354.064568] ? wait_for_completion_io+0x270/0x270 [ 1354.065210] ? rcu_read_lock_any_held+0x75/0xa0 [ 1354.065821] ? vfs_write+0x354/0xb10 [ 1354.066316] __x64_sys_recvmmsg+0x20f/0x260 [ 1354.066881] ? ksys_write+0x1a9/0x260 [ 1354.067391] ? __do_sys_socketcall+0x600/0x600 [ 1354.067995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1354.068687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1354.069374] do_syscall_64+0x33/0x40 [ 1354.069865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1354.070545] RIP: 0033:0x7f9a8d697b19 [ 1354.071044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.073432] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1354.074437] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1354.075380] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1354.076305] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1354.077234] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1354.078165] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1354.100682] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:49:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x4, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:49:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000000000)=0x7f) 20:49:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 79) 20:49:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58) 20:49:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) r2 = socket$inet(0xa, 0x3, 0xff) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180), 0x4) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x80, 0x1, 0xff, 0x9e, 0x0, 0x1ff, 0x1000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x4, 0x2, 0x5, 0x4, 0xffff, 0x85ef, 0xa5, 0x0, 0x7, 0x0, 0x5}, r1, 0x8, r4, 0x9) r5 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r5], 0x1}, 0x58) getpgrp(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(r0, &(0x7f0000000000)='./file1\x00', 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:49:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x0, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:49:16 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 1354.238104] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1354.249026] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:49:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x158, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 1354.335941] FAULT_INJECTION: forcing a failure. [ 1354.335941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.338456] CPU: 0 PID: 8341 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1354.339980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1354.341656] Call Trace: [ 1354.342196] dump_stack+0x107/0x167 [ 1354.342932] should_fail.cold+0x5/0xa [ 1354.343743] _copy_from_user+0x2e/0x1b0 [ 1354.344556] __copy_msghdr_from_user+0x91/0x4b0 [ 1354.345500] ? __ia32_sys_shutdown+0x80/0x80 [ 1354.346397] ? __lock_acquire+0x1657/0x5b00 [ 1354.347290] ___sys_recvmsg+0xd5/0x200 [ 1354.348091] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1354.349085] ? trace_hardirqs_on+0x5b/0x180 [ 1354.349968] ? lock_acquire+0x197/0x470 [ 1354.350780] ? find_held_lock+0x2c/0x110 [ 1354.351651] ? __might_fault+0xd3/0x180 [ 1354.352480] ? lock_downgrade+0x6d0/0x6d0 [ 1354.353364] do_recvmmsg+0x24c/0x6d0 [ 1354.354133] ? ___sys_recvmsg+0x200/0x200 [ 1354.354979] ? lock_downgrade+0x6d0/0x6d0 [ 1354.355849] ? ksys_write+0x12d/0x260 [ 1354.356629] ? wait_for_completion_io+0x270/0x270 [ 1354.357612] ? rcu_read_lock_any_held+0x75/0xa0 [ 1354.358562] ? vfs_write+0x354/0xb10 [ 1354.359323] __x64_sys_recvmmsg+0x20f/0x260 [ 1354.360207] ? ksys_write+0x1a9/0x260 [ 1354.360987] ? __do_sys_socketcall+0x600/0x600 [ 1354.361923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1354.363001] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1354.364065] do_syscall_64+0x33/0x40 [ 1354.364828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1354.365864] RIP: 0033:0x7f9a8d697b19 [ 1354.366616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.370316] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1354.371860] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1354.373312] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1354.374756] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1354.376214] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1354.377660] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:49:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x5, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:49:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x0, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:49:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x158, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:49:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) accept$unix(r0, &(0x7f0000000080), &(0x7f0000000000)=0x6e) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x1, 0x0, r3, &(0x7f0000000280), &(0x7f0000000140)='./file1\x00', 0x4, 0x1000, 0x0, {0x0, r4}}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:49:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 80) 20:49:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x12c, 0x0, 0x0}, 0x58) 20:49:30 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {0xffffffffffffffff, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:49:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000000)=0x7f) [ 1368.101452] FAULT_INJECTION: forcing a failure. [ 1368.101452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.102196] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1368.104486] CPU: 1 PID: 8366 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1368.104508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1368.109299] Call Trace: [ 1368.109859] dump_stack+0x107/0x167 [ 1368.110630] should_fail.cold+0x5/0xa [ 1368.111444] _copy_from_user+0x2e/0x1b0 [ 1368.112301] __copy_msghdr_from_user+0x91/0x4b0 [ 1368.113277] ? __ia32_sys_shutdown+0x80/0x80 [ 1368.114199] ? __lock_acquire+0x1657/0x5b00 [ 1368.115135] ___sys_recvmsg+0xd5/0x200 [ 1368.115963] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1368.116990] ? __lockdep_reset_lock+0x180/0x180 [ 1368.117975] ? lock_acquire+0x197/0x470 [ 1368.118821] ? find_held_lock+0x2c/0x110 [ 1368.119684] ? __might_fault+0xd3/0x180 [ 1368.120617] ? lock_downgrade+0x6d0/0x6d0 [ 1368.121572] do_recvmmsg+0x24c/0x6d0 [ 1368.122472] ? ___sys_recvmsg+0x200/0x200 [ 1368.123541] ? lock_downgrade+0x6d0/0x6d0 [ 1368.124422] ? ksys_write+0x12d/0x260 [ 1368.125234] ? wait_for_completion_io+0x270/0x270 [ 1368.126243] ? rcu_read_lock_any_held+0x75/0xa0 [ 1368.127216] ? vfs_write+0x354/0xb10 [ 1368.128009] __x64_sys_recvmmsg+0x20f/0x260 [ 1368.128925] ? ksys_write+0x1a9/0x260 [ 1368.129736] ? __do_sys_socketcall+0x600/0x600 [ 1368.130711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1368.131839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1368.132938] do_syscall_64+0x33/0x40 [ 1368.133738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1368.134828] RIP: 0033:0x7f9a8d697b19 [ 1368.135772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1368.140072] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1368.141727] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1368.143247] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1368.145108] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1368.146802] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1368.148622] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1368.171890] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:49:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:49:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x138, 0x0, 0x0}, 0x58) 20:49:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x80045440, &(0x7f0000000000)=0x7f) 20:49:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:49:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x6, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:49:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 81) [ 1368.465712] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1368.493241] FAULT_INJECTION: forcing a failure. [ 1368.493241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.495869] CPU: 1 PID: 8395 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1368.497335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1368.499148] Call Trace: [ 1368.499738] dump_stack+0x107/0x167 [ 1368.500540] should_fail.cold+0x5/0xa [ 1368.501385] _copy_from_user+0x2e/0x1b0 [ 1368.502266] __copy_msghdr_from_user+0x91/0x4b0 [ 1368.503289] ? __ia32_sys_shutdown+0x80/0x80 [ 1368.504265] ? __lock_acquire+0x1657/0x5b00 [ 1368.505236] ___sys_recvmsg+0xd5/0x200 [ 1368.506092] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1368.507168] ? __lockdep_reset_lock+0x180/0x180 [ 1368.508210] ? lock_acquire+0x197/0x470 [ 1368.509082] ? find_held_lock+0x2c/0x110 [ 1368.509982] ? __might_fault+0xd3/0x180 [ 1368.510855] ? lock_downgrade+0x6d0/0x6d0 [ 1368.511796] do_recvmmsg+0x24c/0x6d0 [ 1368.512623] ? ___sys_recvmsg+0x200/0x200 [ 1368.513535] ? lock_downgrade+0x6d0/0x6d0 [ 1368.514454] ? ksys_write+0x12d/0x260 [ 1368.515308] ? wait_for_completion_io+0x270/0x270 [ 1368.516376] ? rcu_read_lock_any_held+0x75/0xa0 [ 1368.517395] ? vfs_write+0x354/0xb10 [ 1368.518216] __x64_sys_recvmmsg+0x20f/0x260 [ 1368.519163] ? ksys_write+0x1a9/0x260 [ 1368.520306] ? __do_sys_socketcall+0x600/0x600 [ 1368.521504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1368.522862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1368.524154] do_syscall_64+0x33/0x40 [ 1368.524970] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1368.526094] RIP: 0033:0x7f9a8d697b19 [ 1368.526907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1368.531052] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1368.532733] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1368.534282] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1368.535848] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1368.537410] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1368.538962] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1368.558958] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:49:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 82) 20:49:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x7, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:49:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x80086601, &(0x7f0000000000)=0x7f) 20:49:44 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {0xffffffffffffffff, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:49:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x300, 0x0, 0x0}, 0x58) 20:49:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x158, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:49:44 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x12042, 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xc200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) r3 = socket$inet(0xa, 0x3, 0xff) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r4) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000800) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @empty}, 0x48, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='team_slave_0\x00', 0x5, 0x0, 0x7}) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r5 = dup(0xffffffffffffffff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) 20:49:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1382.548006] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1382.560286] FAULT_INJECTION: forcing a failure. [ 1382.560286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.562985] CPU: 1 PID: 8410 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1382.564548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1382.566438] Call Trace: [ 1382.567042] dump_stack+0x107/0x167 [ 1382.567877] should_fail.cold+0x5/0xa [ 1382.568748] _copy_from_user+0x2e/0x1b0 [ 1382.569659] __copy_msghdr_from_user+0x91/0x4b0 20:49:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1382.570717] ? __ia32_sys_shutdown+0x80/0x80 [ 1382.571937] ? __lock_acquire+0x1657/0x5b00 [ 1382.572953] ___sys_recvmsg+0xd5/0x200 [ 1382.573840] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1382.574958] ? __lockdep_reset_lock+0x180/0x180 [ 1382.576018] ? __fget_files+0x2cf/0x520 [ 1382.576934] ? lock_acquire+0x197/0x470 [ 1382.577834] ? find_held_lock+0x2c/0x110 [ 1382.578763] ? __might_fault+0xd3/0x180 [ 1382.579682] ? lock_downgrade+0x6d0/0x6d0 [ 1382.580655] do_recvmmsg+0x24c/0x6d0 [ 1382.581516] ? ___sys_recvmsg+0x200/0x200 [ 1382.582454] ? lock_downgrade+0x6d0/0x6d0 [ 1382.583405] ? ksys_write+0x12d/0x260 [ 1382.584308] ? wait_for_completion_io+0x270/0x270 [ 1382.585406] ? rcu_read_lock_any_held+0x75/0xa0 [ 1382.586460] ? vfs_write+0x354/0xb10 [ 1382.587309] __x64_sys_recvmmsg+0x20f/0x260 [ 1382.588287] ? ksys_write+0x1a9/0x260 [ 1382.589154] ? __do_sys_socketcall+0x600/0x600 [ 1382.590182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1382.591349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1382.592529] do_syscall_64+0x33/0x40 [ 1382.593361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1382.594509] RIP: 0033:0x7f9a8d697b19 [ 1382.595341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1382.599472] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1382.601188] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1382.602785] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1382.604396] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1382.605996] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1382.607599] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:49:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x408, 0x0, 0x0}, 0x58) 20:49:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x80087601, &(0x7f0000000000)=0x7f) 20:49:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1382.697232] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:49:44 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {0xffffffffffffffff, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:49:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 83) 20:49:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x8, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 1382.909883] FAULT_INJECTION: forcing a failure. [ 1382.909883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.912921] CPU: 1 PID: 8441 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1382.914554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1382.916584] Call Trace: [ 1382.917178] dump_stack+0x107/0x167 [ 1382.917993] should_fail.cold+0x5/0xa [ 1382.918939] _copy_from_user+0x2e/0x1b0 [ 1382.920005] __copy_msghdr_from_user+0x91/0x4b0 [ 1382.921047] ? __ia32_sys_shutdown+0x80/0x80 [ 1382.922033] ? __lock_acquire+0x1657/0x5b00 [ 1382.923024] ___sys_recvmsg+0xd5/0x200 [ 1382.923994] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1382.925259] ? trace_hardirqs_on+0x5b/0x180 [ 1382.926240] ? lock_acquire+0x197/0x470 [ 1382.927133] ? find_held_lock+0x2c/0x110 [ 1382.928068] ? __might_fault+0xd3/0x180 [ 1382.928963] ? lock_downgrade+0x6d0/0x6d0 [ 1382.929916] do_recvmmsg+0x24c/0x6d0 [ 1382.930771] ? ___sys_recvmsg+0x200/0x200 [ 1382.931710] ? lock_downgrade+0x6d0/0x6d0 [ 1382.932657] ? ksys_write+0x12d/0x260 [ 1382.933536] ? wait_for_completion_io+0x270/0x270 [ 1382.934617] ? rcu_read_lock_any_held+0x75/0xa0 [ 1382.935673] ? vfs_write+0x354/0xb10 [ 1382.936511] __x64_sys_recvmmsg+0x20f/0x260 [ 1382.937498] ? ksys_write+0x1a9/0x260 [ 1382.938352] ? __do_sys_socketcall+0x600/0x600 [ 1382.939379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1382.940565] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1382.941722] do_syscall_64+0x33/0x40 [ 1382.942556] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1382.943721] RIP: 0033:0x7f9a8d697b19 [ 1382.944556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1382.948715] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1382.950416] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1382.952032] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1382.953676] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1382.955317] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1382.956969] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1382.970139] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1382.990994] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:49:57 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x9, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:49:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000)=0x7f) 20:49:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 84) 20:49:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x500, 0x0, 0x0}, 0x58) 20:49:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:49:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:49:57 executing program 1: rt_sigtimedwait(&(0x7f0000000440)={[0x7]}, &(0x7f0000000580), &(0x7f0000000600)={0x0, 0x989680}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x35ae, &(0x7f0000000180)={0x0, 0x4ac1, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}], 0x2}, 0x0, 0x4000000}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x108) setsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x800012d, 0x4, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x3f, 0xf8, 0x20, 0x0, 0x81, 0x200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3ff, 0x2, @perf_bp, 0x4a0, 0x0, 0x1, 0x2, 0x8, 0x280, 0x2, 0x0, 0x80, 0x0, 0x100}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 20:49:57 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:49:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x81c, 0x0, 0x0}, 0x58) [ 1395.954076] FAULT_INJECTION: forcing a failure. [ 1395.954076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.956602] CPU: 0 PID: 8460 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1395.958196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1395.959914] Call Trace: [ 1395.960456] dump_stack+0x107/0x167 [ 1395.961210] should_fail.cold+0x5/0xa [ 1395.962004] _copy_from_user+0x2e/0x1b0 [ 1395.962824] __copy_msghdr_from_user+0x91/0x4b0 [ 1395.963771] ? __ia32_sys_shutdown+0x80/0x80 [ 1395.964683] ? __lock_acquire+0x1657/0x5b00 [ 1395.965582] ___sys_recvmsg+0xd5/0x200 [ 1395.966387] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1395.967391] ? trace_hardirqs_on+0x5b/0x180 [ 1395.968300] ? lock_acquire+0x197/0x470 [ 1395.969103] ? find_held_lock+0x2c/0x110 20:49:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000)=0x7f) [ 1395.969973] ? __might_fault+0xd3/0x180 [ 1395.970955] ? lock_downgrade+0x6d0/0x6d0 [ 1395.971842] do_recvmmsg+0x24c/0x6d0 [ 1395.972610] ? ___sys_recvmsg+0x200/0x200 [ 1395.973456] ? lock_downgrade+0x6d0/0x6d0 [ 1395.974309] ? ksys_write+0x12d/0x260 [ 1395.975097] ? wait_for_completion_io+0x270/0x270 [ 1395.976101] ? rcu_read_lock_any_held+0x75/0xa0 [ 1395.977045] ? vfs_write+0x354/0xb10 [ 1395.977803] __x64_sys_recvmmsg+0x20f/0x260 [ 1395.978673] ? ksys_write+0x1a9/0x260 [ 1395.979445] ? __do_sys_socketcall+0x600/0x600 [ 1395.980427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1395.981499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1395.982543] do_syscall_64+0x33/0x40 [ 1395.983297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1395.984348] RIP: 0033:0x7f9a8d697b19 [ 1395.985102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1395.988870] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1395.990412] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1395.991888] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1395.993353] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1395.994811] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1395.996276] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1396.039927] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1396.063295] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:49:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:49:58 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 85) 20:49:58 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:49:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0xa, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:49:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x15193, r0, 0x0) r2 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x10000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x5, 0x3, &(0x7f0000000000)="cc9469b1bc6e46d330a8ac261509c0be7b60f8df5b9c5516ac7c6d7149536b95e420c0e62e2f0f54e8e326e798", 0x2d, 0x2, 0x1, {0x0, r5}}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:49:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:49:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x1100, 0x0, 0x0}, 0x58) 20:49:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000000)=0x7f) [ 1396.358633] FAULT_INJECTION: forcing a failure. [ 1396.358633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1396.361225] CPU: 0 PID: 8480 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1396.362793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1396.364544] Call Trace: [ 1396.365104] dump_stack+0x107/0x167 [ 1396.365872] should_fail.cold+0x5/0xa [ 1396.366681] _copy_from_user+0x2e/0x1b0 [ 1396.367526] __copy_msghdr_from_user+0x91/0x4b0 [ 1396.368511] ? __ia32_sys_shutdown+0x80/0x80 [ 1396.369439] ? __lock_acquire+0x1657/0x5b00 [ 1396.370367] ___sys_recvmsg+0xd5/0x200 [ 1396.371190] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1396.372258] ? __fget_files+0x2cf/0x520 [ 1396.373108] ? lock_acquire+0x197/0x470 [ 1396.373943] ? find_held_lock+0x2c/0x110 [ 1396.374808] ? __might_fault+0xd3/0x180 [ 1396.375654] ? lock_downgrade+0x6d0/0x6d0 [ 1396.376559] do_recvmmsg+0x24c/0x6d0 [ 1396.377353] ? ___sys_recvmsg+0x200/0x200 [ 1396.378241] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1396.379358] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1396.380301] ? trace_hardirqs_on+0x5b/0x180 [ 1396.381210] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1396.382146] ? finish_task_switch+0x126/0x5d0 [ 1396.383085] ? finish_task_switch+0xef/0x5d0 [ 1396.384045] __x64_sys_recvmmsg+0x20f/0x260 [ 1396.384956] ? ksys_write+0x1a9/0x260 [ 1396.385769] ? __do_sys_socketcall+0x600/0x600 [ 1396.386747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1396.387858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1396.388942] do_syscall_64+0x33/0x40 [ 1396.389726] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1396.390813] RIP: 0033:0x7f9a8d697b19 [ 1396.391598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1396.395489] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1396.397113] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1396.398612] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1396.400122] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1396.401618] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1396.403120] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1396.479552] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1396.500928] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:50:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 86) 20:50:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:50:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0xb, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:50:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0xc020660b, &(0x7f0000000000)=0x7f) 20:50:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x1c08, 0x0, 0x0}, 0x58) 20:50:12 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0, 0xa200}, {}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:50:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) openat(r0, &(0x7f0000000000)='./file1\x00', 0x40000, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) dup2(r0, r1) 20:50:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x20100, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1410.544152] FAULT_INJECTION: forcing a failure. [ 1410.544152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.546876] CPU: 0 PID: 8512 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1410.548625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1410.550787] Call Trace: [ 1410.551367] dump_stack+0x107/0x167 20:50:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) [ 1410.552193] should_fail.cold+0x5/0xa [ 1410.553199] _copy_from_user+0x2e/0x1b0 [ 1410.554095] __copy_msghdr_from_user+0x91/0x4b0 [ 1410.555140] ? __ia32_sys_shutdown+0x80/0x80 [ 1410.556130] ? __lock_acquire+0x1657/0x5b00 [ 1410.557110] ___sys_recvmsg+0xd5/0x200 [ 1410.558153] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1410.559249] ? __lockdep_reset_lock+0x180/0x180 [ 1410.560292] ? __fget_files+0x2cf/0x520 [ 1410.561180] ? lock_acquire+0x197/0x470 [ 1410.562108] ? find_held_lock+0x2c/0x110 [ 1410.563183] ? __might_fault+0xd3/0x180 [ 1410.564061] ? lock_downgrade+0x6d0/0x6d0 [ 1410.564985] do_recvmmsg+0x24c/0x6d0 [ 1410.565798] ? ___sys_recvmsg+0x200/0x200 [ 1410.566695] ? lock_downgrade+0x6d0/0x6d0 [ 1410.567613] ? ksys_write+0x12d/0x260 [ 1410.568471] ? wait_for_completion_io+0x270/0x270 [ 1410.569521] ? rcu_read_lock_any_held+0x75/0xa0 [ 1410.570542] ? vfs_write+0x354/0xb10 [ 1410.571364] __x64_sys_recvmmsg+0x20f/0x260 [ 1410.572317] ? ksys_write+0x1a9/0x260 [ 1410.573155] ? __do_sys_socketcall+0x600/0x600 [ 1410.574149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1410.575286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1410.576425] do_syscall_64+0x33/0x40 [ 1410.577232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1410.577719] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1410.578345] RIP: 0033:0x7f9a8d697b19 [ 1410.578366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1410.578376] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1410.586119] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1410.587687] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1410.589246] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1410.590810] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1410.592369] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1410.616490] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:50:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {0xffffffffffffffff, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r0, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:50:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:50:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x2000, 0x0, 0x0}, 0x58) 20:50:12 executing program 1: r0 = socket$inet(0xa, 0x3, 0xff) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/52) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r4) fcntl$setpipe(r4, 0x407, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r2, 0x0) 20:50:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x10, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:50:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 87) 20:50:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xa) 20:50:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 1410.952203] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1410.997358] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1411.028915] FAULT_INJECTION: forcing a failure. [ 1411.028915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.031425] CPU: 0 PID: 8546 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1411.032832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.034528] Call Trace: [ 1411.035073] dump_stack+0x107/0x167 [ 1411.035830] should_fail.cold+0x5/0xa [ 1411.036627] _copy_from_user+0x2e/0x1b0 [ 1411.037452] __copy_msghdr_from_user+0x91/0x4b0 [ 1411.038434] ? __ia32_sys_shutdown+0x80/0x80 [ 1411.039414] ? __lock_acquire+0x1657/0x5b00 [ 1411.040357] ___sys_recvmsg+0xd5/0x200 [ 1411.041161] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1411.042158] ? trace_hardirqs_on+0x5b/0x180 [ 1411.043093] ? lock_acquire+0x197/0x470 [ 1411.043913] ? find_held_lock+0x2c/0x110 [ 1411.044766] ? __might_fault+0xd3/0x180 [ 1411.045581] ? lock_downgrade+0x6d0/0x6d0 [ 1411.046455] do_recvmmsg+0x24c/0x6d0 [ 1411.047252] ? ___sys_recvmsg+0x200/0x200 [ 1411.048122] ? lock_downgrade+0x6d0/0x6d0 [ 1411.048979] ? ksys_write+0x12d/0x260 [ 1411.049773] ? wait_for_completion_io+0x270/0x270 [ 1411.050803] ? rcu_read_lock_any_held+0x75/0xa0 [ 1411.051758] ? vfs_write+0x354/0xb10 [ 1411.052535] __x64_sys_recvmmsg+0x20f/0x260 [ 1411.053447] ? ksys_write+0x1a9/0x260 [ 1411.054224] ? __do_sys_socketcall+0x600/0x600 [ 1411.055161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.056240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.057373] do_syscall_64+0x33/0x40 [ 1411.058242] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.059560] RIP: 0033:0x7f9a8d697b19 [ 1411.060544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.064574] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 20:50:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0xfe, 0x0, 0x0, 0x4307, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xd21, 0xfffffffffffffffd}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0x10, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1411.066164] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1411.067924] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1411.069505] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1411.071202] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1411.072797] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:50:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x18, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:50:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x2c01, 0x0, 0x0}, 0x58) 20:50:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:50:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) 20:50:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 88) 20:50:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x3801, 0x0, 0x0}, 0x58) [ 1411.268432] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1411.283137] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:50:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x2e, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 1411.397253] FAULT_INJECTION: forcing a failure. [ 1411.397253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.399657] CPU: 1 PID: 8562 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1411.401033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.402700] Call Trace: [ 1411.403243] dump_stack+0x107/0x167 [ 1411.403993] should_fail.cold+0x5/0xa [ 1411.404762] _copy_from_user+0x2e/0x1b0 [ 1411.405580] __copy_msghdr_from_user+0x91/0x4b0 [ 1411.406527] ? __ia32_sys_shutdown+0x80/0x80 [ 1411.407404] ? __lock_acquire+0x1657/0x5b00 [ 1411.408288] ___sys_recvmsg+0xd5/0x200 [ 1411.409068] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1411.410041] ? trace_hardirqs_on+0x5b/0x180 [ 1411.410906] ? lock_acquire+0x197/0x470 [ 1411.411694] ? find_held_lock+0x2c/0x110 [ 1411.412515] ? __might_fault+0xd3/0x180 [ 1411.413304] ? lock_downgrade+0x6d0/0x6d0 [ 1411.414147] do_recvmmsg+0x24c/0x6d0 [ 1411.414901] ? ___sys_recvmsg+0x200/0x200 [ 1411.415720] ? lock_downgrade+0x6d0/0x6d0 [ 1411.416556] ? ksys_write+0x12d/0x260 [ 1411.417329] ? wait_for_completion_io+0x270/0x270 [ 1411.418294] ? rcu_read_lock_any_held+0x75/0xa0 [ 1411.419218] ? vfs_write+0x354/0xb10 [ 1411.419983] __x64_sys_recvmmsg+0x20f/0x260 [ 1411.420841] ? ksys_write+0x1a9/0x260 [ 1411.421598] ? __do_sys_socketcall+0x600/0x600 [ 1411.422513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.423562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.424601] do_syscall_64+0x33/0x40 [ 1411.425338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.426356] RIP: 0033:0x7f9a8d697b19 [ 1411.427099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.430736] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1411.432233] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1411.433633] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1411.435059] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1411.436477] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1411.437894] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1411.632257] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1411.650483] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:50:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x300, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:50:27 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {0xffffffffffffffff, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r0, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:50:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:50:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x102, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) r1 = getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001c40)=0x0) clone3(&(0x7f0000001cc0)={0x80010900, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000002c0), {0x1b}, &(0x7f0000000300)=""/181, 0xb5, &(0x7f00000003c0)=""/106, &(0x7f0000001c80)=[r2], 0x1, {r0}}, 0x58) ptrace$getsig(0x4202, r1, 0xfffffffffffffffb, &(0x7f0000000080)) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0xca, 0x1000, 0x400, 0x4, 0xffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000001000000000000d4686627756daf349f1d117d75a8097986760c82e0b94546a2bd8f2ab6a95d5e109e559ec13aa78afacb537c1b89fbda5e59a3385d661723ee78b26957e6d668b7e8bf257f1c3f01aefb5428d6e807ceaf664f0908e5888ad9021e066f77d8657b03af40d92ba017f84540d40c3d3e12246d937f12a2bb16d67021e68b97578e9fe2763c05522936e0063ac83e9e5e117e6ed41e2acf9ef8b8a534d192692580df495c4b8dc5a2e0290db5a87b1a66a98d6aab85177ba47e07bcfc1ce800f866e351d186bb1f4325074c48d56413e518ed7f7d", @ANYRES32=r3, @ANYBLOB="02000000000000002e2f66696c653000"]) signalfd(r5, &(0x7f0000000500), 0x8) 20:50:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) 20:50:27 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 89) 20:50:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:50:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x3f00, 0x0, 0x0}, 0x58) [ 1425.920749] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1425.929563] FAULT_INJECTION: forcing a failure. [ 1425.929563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.932474] CPU: 1 PID: 8588 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1425.933911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1425.935650] Call Trace: [ 1425.936216] dump_stack+0x107/0x167 [ 1425.936988] should_fail.cold+0x5/0xa [ 1425.937802] _copy_from_user+0x2e/0x1b0 [ 1425.938640] __copy_msghdr_from_user+0x91/0x4b0 [ 1425.939614] ? __ia32_sys_shutdown+0x80/0x80 [ 1425.940548] ? __lock_acquire+0x1657/0x5b00 [ 1425.941471] ___sys_recvmsg+0xd5/0x200 [ 1425.942298] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1425.943332] ? trace_hardirqs_on+0x5b/0x180 [ 1425.944280] ? lock_acquire+0x197/0x470 [ 1425.945113] ? find_held_lock+0x2c/0x110 [ 1425.945975] ? __might_fault+0xd3/0x180 [ 1425.946820] ? lock_downgrade+0x6d0/0x6d0 [ 1425.947719] do_recvmmsg+0x24c/0x6d0 [ 1425.948519] ? ___sys_recvmsg+0x200/0x200 [ 1425.949397] ? lock_downgrade+0x6d0/0x6d0 [ 1425.950278] ? ksys_write+0x12d/0x260 [ 1425.951099] ? wait_for_completion_io+0x270/0x270 [ 1425.952122] ? rcu_read_lock_any_held+0x75/0xa0 [ 1425.953109] ? vfs_write+0x354/0xb10 [ 1425.953910] __x64_sys_recvmmsg+0x20f/0x260 [ 1425.954824] ? ksys_write+0x1a9/0x260 [ 1425.955629] ? __do_sys_socketcall+0x600/0x600 [ 1425.956608] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1425.957721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1425.958811] do_syscall_64+0x33/0x40 [ 1425.959596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1425.960684] RIP: 0033:0x7f9a8d697b19 [ 1425.961467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1425.965353] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1425.966964] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1425.968639] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1425.970374] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1425.971881] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1425.973397] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:50:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) 20:50:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58) 20:50:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) openat(r0, &(0x7f0000000440)='./file1\x00', 0x2080, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10804}, 0x0, 0x5, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000300)=""/152, 0x98}, {&(0x7f0000000500)=""/194, 0xc2}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x10000000005, 0x20020000000000e, r2}) [ 1425.992040] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:50:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 90) 20:50:42 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x500, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:50:42 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {0xffffffffffffffff, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r0, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:50:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x7, 0x81, 0x0, 0x0, 0x8, 0x20400, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x22, 0x1, @perf_bp, 0x2577, 0x631e, 0x3ff, 0x4, 0x2, 0x4, 0x1c, 0x0, 0x20f, 0x0, 0xfffffffffffff801}, 0xffffffffffffffff, 0x9, r1, 0x8) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:50:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1a) 20:50:42 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:50:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x20010, 0x0, 0x0}, 0x58) 20:50:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 1440.823925] FAULT_INJECTION: forcing a failure. [ 1440.823925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1440.826650] CPU: 1 PID: 8613 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1440.827941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1440.829514] Call Trace: [ 1440.830014] dump_stack+0x107/0x167 [ 1440.830698] should_fail.cold+0x5/0xa [ 1440.831424] _copy_from_user+0x2e/0x1b0 [ 1440.832193] __copy_msghdr_from_user+0x91/0x4b0 [ 1440.833091] ? __ia32_sys_shutdown+0x80/0x80 [ 1440.834056] ? __lock_acquire+0x1657/0x5b00 [ 1440.834968] ___sys_recvmsg+0xd5/0x200 [ 1440.835848] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1440.836800] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1440.837823] ? lock_acquire+0x197/0x470 [ 1440.838570] ? find_held_lock+0x2c/0x110 [ 1440.839343] ? __might_fault+0xd3/0x180 [ 1440.840092] ? lock_downgrade+0x6d0/0x6d0 [ 1440.840892] do_recvmmsg+0x24c/0x6d0 [ 1440.841595] ? ___sys_recvmsg+0x200/0x200 [ 1440.842362] ? lock_downgrade+0x6d0/0x6d0 [ 1440.843138] ? ksys_write+0x12d/0x260 [ 1440.843856] ? wait_for_completion_io+0x270/0x270 [ 1440.844787] ? rcu_read_lock_any_held+0x75/0xa0 [ 1440.845650] ? vfs_write+0x354/0xb10 [ 1440.846347] __x64_sys_recvmmsg+0x20f/0x260 [ 1440.847148] ? ksys_write+0x1a9/0x260 [ 1440.847856] ? __do_sys_socketcall+0x600/0x600 [ 1440.848718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1440.849690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1440.850650] do_syscall_64+0x33/0x40 [ 1440.851341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1440.852299] RIP: 0033:0x7f9a8d697b19 [ 1440.852992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1440.856414] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1440.857831] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1440.859152] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1440.860492] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1440.861812] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1440.863124] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1440.876482] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1440.901473] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:50:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x20200, 0x0, 0x0}, 0x58) 20:50:59 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {0xffffffffffffffff, 0xa200}, {0xffffffffffffffff, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r0, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:50:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1c) 20:50:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x3ffff, 0x0, 0x0}, 0x58) 20:50:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=[&(0x7f0000000080)='*(#^$}\x00', &(0x7f00000000c0)='system_u:object_r:udev_exec_t:s0\x00', &(0x7f0000000140)=':&\\+\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:udev_exec_t:s0\x00', &(0x7f0000000280)='{}\x00', &(0x7f00000002c0)='security.selinux\x00'], &(0x7f00000003c0)=[&(0x7f0000000340)='.\x00', &(0x7f0000000380)='security.selinux\x00'], 0x400) getpgrp(0xffffffffffffffff) signalfd4(r0, &(0x7f0000000400)={[0x6]}, 0x8, 0x80800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:50:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x600, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:50:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:50:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:50:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 91) [ 1457.896745] FAULT_INJECTION: forcing a failure. [ 1457.896745] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1457.899618] CPU: 0 PID: 8647 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1457.901171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1457.902951] Call Trace: [ 1457.903529] dump_stack+0x107/0x167 [ 1457.904317] should_fail.cold+0x5/0xa [ 1457.905172] __alloc_pages_nodemask+0x182/0x600 [ 1457.906174] ? lock_chain_count+0x20/0x20 [ 1457.907080] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1457.908400] alloc_pages_vma+0xbb/0x410 [ 1457.909285] wp_page_copy+0xee7/0x1f00 [ 1457.910187] ? print_bad_pte+0x5a0/0x5a0 [ 1457.911071] ? lock_downgrade+0x6d0/0x6d0 [ 1457.911963] ? vm_normal_page+0x162/0x2e0 [ 1457.912879] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1457.914012] do_wp_page+0x27b/0x1390 [ 1457.914833] handle_mm_fault+0x1cc7/0x3500 [ 1457.915756] ? simple_copy_to_iter+0x54/0x70 [ 1457.916726] ? __pmd_alloc+0x630/0x630 [ 1457.917558] ? vmacache_find+0x55/0x2a0 [ 1457.918401] do_user_addr_fault+0x56e/0xc60 [ 1457.919318] exc_page_fault+0xa2/0x1a0 [ 1457.920149] asm_exc_page_fault+0x1e/0x30 [ 1457.921031] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1457.922085] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 71 bf 1c 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 52 bf 1c 02 66 90 48 bb f9 ef ff ff ff 7f [ 1457.925969] RSP: 0018:ffff888040bc79c8 EFLAGS: 00050206 [ 1457.927104] RAX: 0000000000000028 RBX: ffffffff8311aa00 RCX: 0000000020003030 [ 1457.928611] RDX: 1ffff11008178fc3 RSI: ffffffff831105ba RDI: 0000000000000005 [ 1457.930135] RBP: ffff888040bc7dc8 R08: 0000000000000001 R09: ffff88804847085f [ 1457.931641] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000020003030 [ 1457.933158] R13: 0000000020003000 R14: 0000000000000062 R15: 0000000000000004 [ 1457.934681] ? sock_common_getsockopt+0xb0/0xb0 [ 1457.935670] ? ____sys_recvmsg+0x2aa/0x590 [ 1457.936575] ____sys_recvmsg+0x2dd/0x590 [ 1457.937449] ? kernel_recvmsg+0x80/0x80 [ 1457.938283] ? __import_iovec+0x458/0x590 [ 1457.939165] ? import_iovec+0x83/0xb0 [ 1457.939978] ___sys_recvmsg+0x127/0x200 [ 1457.940826] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1457.941852] ? trace_hardirqs_on+0x5b/0x180 [ 1457.942766] ? lock_acquire+0x197/0x470 [ 1457.943607] ? find_held_lock+0x2c/0x110 [ 1457.944463] ? __might_fault+0xd3/0x180 [ 1457.945305] ? lock_downgrade+0x6d0/0x6d0 [ 1457.946204] do_recvmmsg+0x24c/0x6d0 [ 1457.946992] ? ___sys_recvmsg+0x200/0x200 [ 1457.947859] ? lock_downgrade+0x6d0/0x6d0 [ 1457.948740] ? ksys_write+0x12d/0x260 [ 1457.949563] ? wait_for_completion_io+0x270/0x270 [ 1457.950572] ? rcu_read_lock_any_held+0x75/0xa0 [ 1457.951550] ? vfs_write+0x354/0xb10 [ 1457.952337] __x64_sys_recvmmsg+0x20f/0x260 [ 1457.953254] ? ksys_write+0x1a9/0x260 [ 1457.954054] ? __do_sys_socketcall+0x600/0x600 [ 1457.955017] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1457.956115] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1457.957206] do_syscall_64+0x33/0x40 [ 1457.957987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1457.959065] RIP: 0033:0x7f9a8d697b19 [ 1457.959842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1457.963713] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1457.965316] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1457.966817] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1457.968309] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1457.969817] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1457.971317] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:50:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0}, 0x58) 20:50:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$VT_WAITACTIVE(r3, 0x5607) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r5) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)={0x4cbd9c0f61233ed0, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) [ 1457.990084] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:51:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:51:00 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x700, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:51:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 92) 20:51:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x1, 0x0, 0x0, 0x400000000004307, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x1) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000c, 0x11, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x100010, r0, 0x10000000) execveat(0xffffffffffffffff, &(0x7f0000000680)='./file1\x00', &(0x7f0000000700)=[&(0x7f00000006c0)='\x00'], &(0x7f00000007c0)=[&(0x7f0000000740)='[\x00', &(0x7f0000000780)='\'(#\x00'], 0x1000) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad, 0x0, 0x1, 0x300, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f00000003c0)}, 0x80000000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x80000001) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x1c4a, &(0x7f0000000300)={0x0, 0x7e81, 0x2, 0x3, 0x14e, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x3, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r6, &(0x7f0000000500), &(0x7f0000000380)='./file1\x00', 0x1, 0x100}, 0x40) 20:51:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:51:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x101000, 0x0, 0x0}, 0x58) [ 1458.303236] FAULT_INJECTION: forcing a failure. [ 1458.303236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1458.306147] CPU: 1 PID: 8669 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1458.308034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1458.309888] Call Trace: [ 1458.310468] dump_stack+0x107/0x167 [ 1458.311256] should_fail.cold+0x5/0xa [ 1458.312091] _copy_from_user+0x2e/0x1b0 [ 1458.312971] __copy_msghdr_from_user+0x91/0x4b0 [ 1458.314149] ? __ia32_sys_shutdown+0x80/0x80 [ 1458.315297] ? __lock_acquire+0x1657/0x5b00 [ 1458.316332] ___sys_recvmsg+0xd5/0x200 [ 1458.317186] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1458.318244] ? __fget_files+0x2cf/0x520 [ 1458.319090] ? lock_acquire+0x197/0x470 [ 1458.319924] ? find_held_lock+0x2c/0x110 [ 1458.320793] ? __might_fault+0xd3/0x180 [ 1458.321630] ? lock_downgrade+0x6d0/0x6d0 [ 1458.322747] do_recvmmsg+0x24c/0x6d0 [ 1458.323810] ? ___sys_recvmsg+0x200/0x200 [ 1458.324797] ? lock_downgrade+0x6d0/0x6d0 [ 1458.325708] ? ksys_write+0x12d/0x260 [ 1458.326548] ? wait_for_completion_io+0x270/0x270 [ 1458.327605] ? rcu_read_lock_any_held+0x75/0xa0 [ 1458.328617] ? vfs_write+0x354/0xb10 [ 1458.329424] __x64_sys_recvmmsg+0x20f/0x260 [ 1458.330357] ? ksys_write+0x1a9/0x260 [ 1458.331186] ? __do_sys_socketcall+0x600/0x600 [ 1458.332179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1458.333329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1458.334447] do_syscall_64+0x33/0x40 [ 1458.335251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1458.336361] RIP: 0033:0x7f9a8d697b19 [ 1458.337181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.341183] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1458.342833] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1458.344384] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1458.345938] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.347469] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1458.349020] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1458.405745] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1458.428003] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:51:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 93) 20:51:13 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xe9c) syncfs(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0000, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) 20:51:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x523502, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:51:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {0xffffffffffffffff, 0xa200}, {0xffffffffffffffff, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r0, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:51:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:51:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0}, 0x58) 20:51:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:51:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x900, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 1471.476174] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1471.487521] FAULT_INJECTION: forcing a failure. [ 1471.487521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1471.489437] CPU: 0 PID: 8700 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1471.490523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1471.491838] Call Trace: [ 1471.492263] dump_stack+0x107/0x167 [ 1471.492865] should_fail.cold+0x5/0xa [ 1471.493483] _copy_from_user+0x2e/0x1b0 [ 1471.494131] __copy_msghdr_from_user+0x91/0x4b0 [ 1471.494871] ? __ia32_sys_shutdown+0x80/0x80 [ 1471.495576] ? __lock_acquire+0x1657/0x5b00 [ 1471.496274] ___sys_recvmsg+0xd5/0x200 [ 1471.496901] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1471.497689] ? __fget_files+0x2cf/0x520 [ 1471.498336] ? lock_acquire+0x197/0x470 [ 1471.498964] ? find_held_lock+0x2c/0x110 [ 1471.499626] ? __might_fault+0xd3/0x180 [ 1471.500261] ? lock_downgrade+0x6d0/0x6d0 [ 1471.500947] do_recvmmsg+0x24c/0x6d0 [ 1471.501549] ? ___sys_recvmsg+0x200/0x200 [ 1471.502214] ? lock_downgrade+0x6d0/0x6d0 [ 1471.502880] ? ksys_write+0x12d/0x260 [ 1471.503500] ? wait_for_completion_io+0x270/0x270 [ 1471.504266] ? rcu_read_lock_any_held+0x75/0xa0 [ 1471.505016] ? vfs_write+0x354/0xb10 [ 1471.505611] __x64_sys_recvmmsg+0x20f/0x260 [ 1471.506287] ? ksys_write+0x1a9/0x260 [ 1471.506898] ? __do_sys_socketcall+0x600/0x600 [ 1471.507627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1471.508466] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1471.509302] do_syscall_64+0x33/0x40 [ 1471.509890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1471.510713] RIP: 0033:0x7f9a8d697b19 [ 1471.511305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1471.514234] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1471.515439] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1471.516564] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1471.517718] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1471.518855] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1471.520003] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:51:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x2000000, 0x0, 0x0}, 0x58) [ 1471.570937] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:51:13 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0xb65, @mcast2, 0xfffffffc}, 0x1c) r1 = creat(0x0, 0x0) fcntl$addseals(r1, 0x409, 0x9) write$binfmt_elf64(r1, &(0x7f00000008c0)=ANY=[], 0x629) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x368a, &(0x7f0000000240)={0x0, 0x343e, 0x4, 0x1, 0x365}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000020, 0x0, {0x3}}, 0x281) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0xc000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c00, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xe2041, 0x10, 0xa}, 0x18) 20:51:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:51:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) dup(r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x200, 0x70bd25, 0x25dfdbff, {0x7, 0x7, './file1', './file1'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040841) r3 = getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0xff, 0x7b, 0x1, 0x0, 0x8, 0x100, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3ff, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10010, 0x8, 0x6, 0x2, 0x1, 0x4, 0x1f, 0x0, 0x4, 0x0, 0x9}, r3, 0xa, r0, 0x8) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x0, 0x6, 0x4, 0x0, 0x7, 0x80, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000000), 0x13}, 0x5700, 0x9, 0xfff, 0x7, 0x0, 0x40, 0x58dc, 0x0, 0x81, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'syzkaller1\x00', &(0x7f0000000340)=@ethtool_eee={0x45, 0x0, 0x4, 0x2, 0x4, 0x7, 0x2, 0x9, [0x7, 0xfffffff8]}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:51:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0xa00, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:51:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 94) 20:51:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:51:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) [ 1471.786398] FAULT_INJECTION: forcing a failure. [ 1471.786398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1471.788355] CPU: 0 PID: 8717 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1471.789583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1471.791211] Call Trace: [ 1471.791687] dump_stack+0x107/0x167 [ 1471.792405] should_fail.cold+0x5/0xa [ 1471.793068] _copy_from_user+0x2e/0x1b0 [ 1471.793852] __copy_msghdr_from_user+0x91/0x4b0 [ 1471.794619] ? __ia32_sys_shutdown+0x80/0x80 [ 1471.795479] ? __lock_acquire+0x1657/0x5b00 [ 1471.796341] ___sys_recvmsg+0xd5/0x200 [ 1471.797123] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1471.798094] ? trace_hardirqs_on+0x5b/0x180 [ 1471.798941] ? lock_acquire+0x197/0x470 [ 1471.799723] ? find_held_lock+0x2c/0x110 [ 1471.800523] ? __might_fault+0xd3/0x180 [ 1471.801317] ? lock_downgrade+0x6d0/0x6d0 [ 1471.802145] do_recvmmsg+0x24c/0x6d0 [ 1471.802757] ? ___sys_recvmsg+0x200/0x200 [ 1471.803567] ? lock_downgrade+0x6d0/0x6d0 [ 1471.804406] ? ksys_write+0x12d/0x260 [ 1471.805176] ? wait_for_completion_io+0x270/0x270 [ 1471.806114] ? rcu_read_lock_any_held+0x75/0xa0 [ 1471.807034] ? vfs_write+0x354/0xb10 [ 1471.807765] __x64_sys_recvmmsg+0x20f/0x260 [ 1471.808607] ? ksys_write+0x1a9/0x260 [ 1471.809355] ? __do_sys_socketcall+0x600/0x600 [ 1471.810253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1471.811165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1471.812170] do_syscall_64+0x33/0x40 [ 1471.812838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1471.813830] RIP: 0033:0x7f9a8d697b19 [ 1471.814489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1471.818062] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1471.819583] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1471.820983] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1471.822378] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1471.823781] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1471.825080] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:51:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x3000000, 0x0, 0x0}, 0x58) 20:51:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1471.906050] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1471.925898] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:51:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 95) 20:51:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0xb00, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:51:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:51:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400001, 0x8) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = socket$inet(0xa, 0x3, 0xff) r7 = dup(r6) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000180), 0x4) r8 = dup(r7) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2004, @fd=r8, 0x20, 0x0, 0x0, 0x1, 0x1, {0x2}}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:51:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:51:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) r5 = dup(r4) ppoll(&(0x7f0000000340)=[{r5, 0x8000}, {0xffffffffffffffff, 0xa200}, {0xffffffffffffffff, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r0, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:51:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:51:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x5000000, 0x0, 0x0}, 0x58) [ 1489.762475] FAULT_INJECTION: forcing a failure. [ 1489.762475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1489.765478] CPU: 0 PID: 8746 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1489.767169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1489.769244] Call Trace: [ 1489.769913] dump_stack+0x107/0x167 [ 1489.770837] should_fail.cold+0x5/0xa [ 1489.771805] _copy_from_user+0x2e/0x1b0 [ 1489.772813] __copy_msghdr_from_user+0x91/0x4b0 [ 1489.773990] ? __ia32_sys_shutdown+0x80/0x80 [ 1489.775100] ? __lock_acquire+0x1657/0x5b00 [ 1489.776223] ___sys_recvmsg+0xd5/0x200 [ 1489.777375] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1489.778627] ? __fget_files+0x2cf/0x520 [ 1489.779636] ? lock_acquire+0x197/0x470 [ 1489.780636] ? find_held_lock+0x2c/0x110 [ 1489.781639] ? __might_fault+0xd3/0x180 [ 1489.782479] ? lock_downgrade+0x6d0/0x6d0 [ 1489.783362] do_recvmmsg+0x24c/0x6d0 [ 1489.784149] ? ___sys_recvmsg+0x200/0x200 [ 1489.785028] ? lock_downgrade+0x6d0/0x6d0 [ 1489.785906] ? ksys_write+0x12d/0x260 [ 1489.786719] ? wait_for_completion_io+0x270/0x270 [ 1489.787726] ? rcu_read_lock_any_held+0x75/0xa0 [ 1489.788688] ? vfs_write+0x354/0xb10 [ 1489.789476] __x64_sys_recvmmsg+0x20f/0x260 [ 1489.790387] ? ksys_write+0x1a9/0x260 [ 1489.791189] ? __do_sys_socketcall+0x600/0x600 [ 1489.792162] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1489.793271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1489.794350] do_syscall_64+0x33/0x40 [ 1489.795123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1489.796197] RIP: 0033:0x7f9a8d697b19 [ 1489.797002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1489.800916] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1489.802570] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1489.804116] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1489.805681] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1489.807210] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1489.808747] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1489.869236] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:51:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1489.897968] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:51:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, 0x0}, 0x58) 20:51:31 executing program 4: ptrace$peekuser(0x3, 0x0, 0x401) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:51:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 96) 20:51:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x1800, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:51:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, 0x0, 0x0) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x3, 0x7, &(0x7f0000002600)=[{&(0x7f0000000500)="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", 0x1000, 0x9}, {&(0x7f0000000140)="68463d66f616bd1a8f760635fa93502528ab825ce5c8694fdb686344f3c21d5190aef1674fc56714a1640e7fbc01e1fab5f3ebcd98114547350e051ca83c4010ab3482ca54e2052eeab94cf89308b63f6431196c54fc73fcd89df943a87316745248796dff931f", 0x67, 0x80}, {&(0x7f0000000280)="001c3f4bfbf0f4192fe18b89045bb2e06f7c0eb656bff91335d6d4f69396f83ba728140fee97a279427c93c1232a8d67a85aaa2c45893b373d4a0e717661b4312cca0c808b06ed36a8f32f5fdfbc7ea3c031136b9daf7bdaf273c3b0df19295f6bbf7824be96acfbd1a77f5c66cc438d", 0x70}, {&(0x7f00000000c0)="1e26258b37", 0x5, 0x5}, {&(0x7f0000000300)="e20254e6d9a0ab823e6ad5464af2b1d8a62abb7b8378b02f2347857cbb077e568a1b040ea3ab17b25228eed60e33a6ab6733502c67a8db651fb0885bff0fb2770a06faf284121e8c6bf445276a7e51ae3d26038a709f14c57297522910961ad1f6a6f39a52757d872380f1fdc420ca0113d5cc98014695f5fbb62255a17a77f20d55f189711533dd4be01bd7e2f2b19a8cecb2dd14c3717cb585d02594534cbcf5eb87d160696e3d5a05cfd7b6341ec23a70fa69ae9bb934faf0ff0cc10d2e45947a58985679bac9c12aa5937bb22c49a8ed13efc4c2b3a5ea4f1cfe3d27ac620ca22ce7bfd3182ebb957b0deee97077f3a3145f4778", 0xf6, 0x401}, {&(0x7f0000001500)="5d9704ba73fbeb391966578670e1458e69272c16ab926702275916613930c70772fba244661f1d56878e92b811bb25061cc67afbaa8566bb983ffee8e75f9fb152b42bc1013c10c903036d0a933c45420ce749f3466c42cc43ddabf129eab611b17ac762b754b086458bdea9b99156d480c80d630e2ac87cb282b7d0172570a227e7dc3f1b746aa9dae9bdd473e5506cde42d2bd062ad624b2994dc2168cd5de7e329e32fa1222c98e25f2c5e0d1c8d51711d8f1b5bb19b666d063bb0e3ce74d8b1637e4f7414b95fddc6e06735f09879c44279a99ae64b20192ab1a159498f1774599", 0xe3, 0x81}, {&(0x7f0000001600)="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", 0x1000, 0x7}], 0x1180068, &(0x7f00000026c0)={[{@bh}, {@auto_da_alloc}, {@noinit_itable}, {@noload}], [{@uid_gt={'uid>', r1}}, {@euid_eq={'euid', 0x3d, r2}}, {@dont_measure}, {@fowner_lt={'fowner<', r3}}]}) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0xa, 0x3, 0xff) utime(&(0x7f0000002800)='./file1\x00', &(0x7f0000002840)={0x7, 0x1}) r6 = dup(r5) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000180), 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000002780)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f00000027c0)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:51:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) [ 1490.143169] FAULT_INJECTION: forcing a failure. [ 1490.143169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.145693] CPU: 0 PID: 8770 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1490.147140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1490.148890] Call Trace: [ 1490.149456] dump_stack+0x107/0x167 [ 1490.150228] should_fail.cold+0x5/0xa [ 1490.151036] _copy_from_user+0x2e/0x1b0 [ 1490.151894] __copy_msghdr_from_user+0x91/0x4b0 [ 1490.152883] ? __ia32_sys_shutdown+0x80/0x80 [ 1490.153829] ? __lock_acquire+0x1657/0x5b00 [ 1490.154760] ___sys_recvmsg+0xd5/0x200 [ 1490.155579] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1490.156617] ? trace_hardirqs_on+0x5b/0x180 [ 1490.157541] ? lock_acquire+0x197/0x470 [ 1490.158385] ? find_held_lock+0x2c/0x110 [ 1490.159246] ? __might_fault+0xd3/0x180 [ 1490.160088] ? lock_downgrade+0x6d0/0x6d0 [ 1490.161007] do_recvmmsg+0x24c/0x6d0 [ 1490.161802] ? ___sys_recvmsg+0x200/0x200 [ 1490.162678] ? lock_downgrade+0x6d0/0x6d0 [ 1490.163556] ? ksys_write+0x12d/0x260 [ 1490.164379] ? wait_for_completion_io+0x270/0x270 [ 1490.165402] ? rcu_read_lock_any_held+0x75/0xa0 [ 1490.166358] ? vfs_write+0x354/0xb10 [ 1490.167140] __x64_sys_recvmmsg+0x20f/0x260 [ 1490.168049] ? ksys_write+0x1a9/0x260 [ 1490.168835] ? __do_sys_socketcall+0x600/0x600 [ 1490.169812] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1490.170896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1490.171977] do_syscall_64+0x33/0x40 [ 1490.172759] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1490.173848] RIP: 0033:0x7f9a8d697b19 [ 1490.174632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.178492] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1490.180083] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1490.181584] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1490.183072] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.184577] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1490.186080] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:51:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x8040000, 0x0, 0x0}, 0x58) [ 1490.255032] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1490.276612] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:51:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 97) 20:51:49 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0}, {0xffffffffffffffff, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:51:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) r1 = socket$inet(0xa, 0x4, 0x8000081) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c1204098060b50800000000000000000000000000000000fe880000000000000000000000000001fc020000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000bb20010000000000000000000000000000fc010000000000000000000000000001fe8000000000000000000000000000aafc01000000000000000000000000000098bb8bd0ff0c62644ed20a32989c5563633ba6b6a86a95b8fb6fe7738927243a78f081407be5f316884384d23a38537557bbf50aeb3270d463b22f656fc21a92ba2545d03d"], 0x98) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) splice(r3, &(0x7f0000000080)=0xfff, r0, &(0x7f00000000c0)=0x7, 0x80000000, 0x1) 20:51:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x158, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:51:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x1b84, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:51:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x3bb, 0x34, 0x2, 0xf06a, 0x3, [0x781, 0xe661, 0xfffffffa, 0xffff]}) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:51:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x81c0000, 0x0, 0x0}, 0x58) 20:51:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1507.083128] FAULT_INJECTION: forcing a failure. [ 1507.083128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.085829] CPU: 1 PID: 8789 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1507.087365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.089245] Call Trace: [ 1507.089846] dump_stack+0x107/0x167 [ 1507.090667] should_fail.cold+0x5/0xa [ 1507.091532] _copy_from_user+0x2e/0x1b0 [ 1507.092576] __copy_msghdr_from_user+0x91/0x4b0 [ 1507.093844] ? __ia32_sys_shutdown+0x80/0x80 [ 1507.094885] ? __lock_acquire+0x1657/0x5b00 [ 1507.095875] ___sys_recvmsg+0xd5/0x200 [ 1507.096753] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1507.097878] ? trace_hardirqs_on+0x5b/0x180 [ 1507.098865] ? lock_acquire+0x197/0x470 [ 1507.099755] ? find_held_lock+0x2c/0x110 [ 1507.100672] ? __might_fault+0xd3/0x180 [ 1507.101730] ? lock_downgrade+0x6d0/0x6d0 [ 1507.102713] do_recvmmsg+0x24c/0x6d0 [ 1507.103752] ? ___sys_recvmsg+0x200/0x200 [ 1507.104689] ? lock_downgrade+0x6d0/0x6d0 [ 1507.105648] ? ksys_write+0x12d/0x260 [ 1507.106519] ? wait_for_completion_io+0x270/0x270 [ 1507.107606] ? rcu_read_lock_any_held+0x75/0xa0 [ 1507.108647] ? vfs_write+0x354/0xb10 [ 1507.109504] __x64_sys_recvmmsg+0x20f/0x260 [ 1507.110475] ? ksys_write+0x1a9/0x260 [ 1507.111498] ? __do_sys_socketcall+0x600/0x600 [ 1507.112540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1507.113982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1507.115189] do_syscall_64+0x33/0x40 [ 1507.116028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1507.117194] RIP: 0033:0x7f9a8d697b19 [ 1507.118031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1507.122302] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1507.124280] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1507.125980] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1507.127591] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1507.129416] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1507.131360] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1507.173565] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:51:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffff, 0x0, 0x0}, 0x58) 20:51:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/239, 0xef}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/142, 0x8e}, {&(0x7f0000001240)}, {&(0x7f0000001280)=""/225, 0xe1}, {&(0x7f0000001380)=""/115, 0x73}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/102, 0x66}, {&(0x7f00000014c0)=""/106, 0x6a}], 0x9, &(0x7f0000001600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x2021) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001680)=0xff) 20:51:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r2) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0xc483, 0x5, 0x1, 0x1, 0x5, [{0x2, 0x8, 0xffffffff, '\x00', 0x80}, {0x431, 0x82, 0x6, '\x00', 0x4}, {0x6, 0x7, 0x2800000000, '\x00', 0x3082}, {0x4ed4d3fe, 0x8, 0x8a, '\x00', 0x1}, {0x2595, 0xffffffffffff1242, 0x9, '\x00', 0x210c}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x2df, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1}, {0xa, 0x4e21, 0x0, @empty}, 0x3, [0x8, 0xfff, 0x6, 0x6, 0x4, 0x1c000, 0x9, 0x401]}, 0x5c) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:51:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x2000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:51:49 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0}, {0xffffffffffffffff, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:51:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 98) 20:51:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:51:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x158, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:51:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000004c0)={0x1, 0x0, 0x1b, 0x1f, 0x17, &(0x7f00000000c0)}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:51:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, 0x0}, 0x58) [ 1507.533913] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1507.562751] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1507.571631] FAULT_INJECTION: forcing a failure. [ 1507.571631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.574592] CPU: 0 PID: 8824 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1507.576216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.578069] Call Trace: [ 1507.578668] dump_stack+0x107/0x167 [ 1507.579478] should_fail.cold+0x5/0xa [ 1507.580336] _copy_from_user+0x2e/0x1b0 [ 1507.581240] __copy_msghdr_from_user+0x91/0x4b0 [ 1507.582273] ? __ia32_sys_shutdown+0x80/0x80 [ 1507.583255] ? __lock_acquire+0x1657/0x5b00 [ 1507.584235] ___sys_recvmsg+0xd5/0x200 [ 1507.585124] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1507.586219] ? __fget_files+0x2cf/0x520 [ 1507.587107] ? lock_acquire+0x197/0x470 [ 1507.588001] ? find_held_lock+0x2c/0x110 [ 1507.588914] ? __might_fault+0xd3/0x180 [ 1507.589812] ? lock_downgrade+0x6d0/0x6d0 [ 1507.590752] do_recvmmsg+0x24c/0x6d0 [ 1507.591587] ? ___sys_recvmsg+0x200/0x200 [ 1507.592514] ? lock_downgrade+0x6d0/0x6d0 [ 1507.593460] ? ksys_write+0x12d/0x260 [ 1507.594317] ? wait_for_completion_io+0x270/0x270 [ 1507.595394] ? rcu_read_lock_any_held+0x75/0xa0 [ 1507.596420] ? vfs_write+0x354/0xb10 [ 1507.597271] __x64_sys_recvmmsg+0x20f/0x260 [ 1507.598240] ? ksys_write+0x1a9/0x260 [ 1507.599099] ? __do_sys_socketcall+0x600/0x600 [ 1507.600134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1507.601306] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1507.602484] do_syscall_64+0x33/0x40 [ 1507.603324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1507.604480] RIP: 0033:0x7f9a8d697b19 [ 1507.605325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1507.609504] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1507.611230] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1507.612835] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1507.614451] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1507.616065] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1507.617684] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 20:51:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x2e00, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 1507.904659] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1507.921048] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:05 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) r6 = dup(r5) ppoll(&(0x7f0000000340)=[{r6, 0x8000}, {r0}, {0xffffffffffffffff, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x6, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:52:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 20:52:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) execveat(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)=[&(0x7f0000000080)='(\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)=',*-+\x12-\x00'], &(0x7f0000000340)=[&(0x7f00000001c0)='system_u:object_r:udev_exec_t:s0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000300)='security.selinux\x00'], 0x1000) getpgrp(0xffffffffffffffff) fallocate(r1, 0x40, 0x80, 0x6) write$cgroup_devices(r0, &(0x7f0000000380)={'a', ' *:* ', 'rwm\x00'}, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:52:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x4000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:52:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 99) 20:52:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x158, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:52:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58) 20:52:05 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:52:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) creat(&(0x7f00000000c0)='./file0\x00', 0x8) r1 = socket$inet(0xa, 0x3, 0xff) dup(r1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x4, 0x1, 0x3, 0x5, 0x5529}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) [ 1523.281131] FAULT_INJECTION: forcing a failure. [ 1523.281131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.283236] CPU: 1 PID: 8861 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1523.284424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1523.285872] Call Trace: [ 1523.286341] dump_stack+0x107/0x167 [ 1523.286977] should_fail.cold+0x5/0xa [ 1523.287649] _copy_from_user+0x2e/0x1b0 [ 1523.288351] __copy_msghdr_from_user+0x91/0x4b0 [ 1523.289160] ? __ia32_sys_shutdown+0x80/0x80 [ 1523.289946] ? __lock_acquire+0x1657/0x5b00 [ 1523.290727] ___sys_recvmsg+0xd5/0x200 [ 1523.291406] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1523.292268] ? __lockdep_reset_lock+0x180/0x180 [ 1523.293077] ? __fget_files+0x2cf/0x520 [ 1523.293792] ? lock_acquire+0x197/0x470 [ 1523.294480] ? find_held_lock+0x2c/0x110 [ 1523.295199] ? __might_fault+0xd3/0x180 [ 1523.295899] ? lock_downgrade+0x6d0/0x6d0 [ 1523.296633] do_recvmmsg+0x24c/0x6d0 [ 1523.297306] ? ___sys_recvmsg+0x200/0x200 [ 1523.298029] ? lock_downgrade+0x6d0/0x6d0 [ 1523.298766] ? ksys_write+0x12d/0x260 [ 1523.299451] ? wait_for_completion_io+0x270/0x270 [ 1523.300283] ? rcu_read_lock_any_held+0x75/0xa0 [ 1523.301102] ? vfs_write+0x354/0xb10 [ 1523.301774] __x64_sys_recvmmsg+0x20f/0x260 [ 1523.302519] ? ksys_write+0x1a9/0x260 [ 1523.303184] ? __do_sys_socketcall+0x600/0x600 [ 1523.303965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1523.304866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1523.305769] do_syscall_64+0x33/0x40 [ 1523.306428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1523.307317] RIP: 0033:0x7f9a8d697b19 [ 1523.307954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1523.311154] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1523.312481] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1523.313719] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1523.314958] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1523.316200] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000002 [ 1523.317431] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1523.322281] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, 0x0}, 0x58) [ 1523.363460] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x2c010000, 0x0, 0x0}, 0x58) 20:52:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7f) 20:52:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:52:20 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x841b, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:52:20 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) dup(r5) ppoll(&(0x7f0000000340)=[{r0, 0xa200}, {0xffffffffffffffff, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:52:20 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x181180, 0x1f3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400000000004307, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0xfffffffffffffff7, 0x8, 0x9, 0xffffffff}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) r5 = socket$inet(0xa, 0x2, 0xff) r6 = dup(r5) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000180), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f00000001c0)=0x1e) dup(r6) kcmp(0x0, r4, 0x0, r3, r6) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000c, 0x11, r0, 0x0) 20:52:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:52:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) (fail_nth: 100) 20:52:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x38010000, 0x0, 0x0}, 0x58) 20:52:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) pread64(r0, &(0x7f00000000c0)=""/210, 0xd2, 0x5) [ 1538.272406] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1538.281513] FAULT_INJECTION: forcing a failure. [ 1538.281513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1538.285018] CPU: 1 PID: 8893 Comm: syz-executor.3 Not tainted 5.10.240 #1 [ 1538.287006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1538.289140] Call Trace: [ 1538.289812] dump_stack+0x107/0x167 [ 1538.290704] should_fail.cold+0x5/0xa [ 1538.291655] _copy_from_user+0x2e/0x1b0 [ 1538.292650] __copy_msghdr_from_user+0x91/0x4b0 [ 1538.293794] ? __ia32_sys_shutdown+0x80/0x80 [ 1538.294858] ? __lock_acquire+0x1657/0x5b00 [ 1538.295938] ___sys_recvmsg+0xd5/0x200 [ 1538.297098] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1538.298492] ? __lockdep_reset_lock+0x180/0x180 [ 1538.299630] ? lock_acquire+0x197/0x470 [ 1538.300605] ? find_held_lock+0x2c/0x110 [ 1538.301595] ? __might_fault+0xd3/0x180 [ 1538.302570] ? lock_downgrade+0x6d0/0x6d0 [ 1538.303615] do_recvmmsg+0x24c/0x6d0 [ 1538.304540] ? ___sys_recvmsg+0x200/0x200 [ 1538.305564] ? lock_downgrade+0x6d0/0x6d0 [ 1538.306591] ? ksys_write+0x12d/0x260 [ 1538.307544] ? wait_for_completion_io+0x270/0x270 [ 1538.308738] ? rcu_read_lock_any_held+0x75/0xa0 [ 1538.309892] ? vfs_write+0x354/0xb10 [ 1538.310792] __x64_sys_recvmmsg+0x20f/0x260 [ 1538.311854] ? ksys_write+0x1a9/0x260 [ 1538.312792] ? __do_sys_socketcall+0x600/0x600 [ 1538.314104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1538.315673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1538.316935] do_syscall_64+0x33/0x40 [ 1538.317863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1538.319108] RIP: 0033:0x7f9a8d697b19 [ 1538.320160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.324943] RSP: 002b:00007f9a8ac0d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1538.327051] RAX: ffffffffffffffda RBX: 00007f9a8d7aaf60 RCX: 00007f9a8d697b19 [ 1538.328949] RDX: 0000000000000300 RSI: 0000000020001a00 RDI: 0000000000000003 [ 1538.330720] RBP: 00007f9a8ac0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1538.332463] R10: 0000000000010062 R11: 0000000000000246 R12: 0000000000000003 [ 1538.334627] R13: 00007ffd720814df R14: 00007f9a8ac0d300 R15: 0000000000022000 [ 1538.378677] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:52:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:52:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1/../file0\x00', 0x88000, 0x1a) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x11, r0, 0x0) 20:52:20 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) dup(r5) ppoll(&(0x7f0000000340)=[{r0, 0xa200}, {0xffffffffffffffff, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:52:20 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x80000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:52:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:52:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x3f000000, 0x0, 0x0}, 0x58) 20:52:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:52:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1538.756537] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1538.782290] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 20:52:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, 0x0}, 0x58) 20:52:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r2) close(r2) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r3, 0x5396, &(0x7f0000000080)={0x10000}) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:52:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:52:20 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0xe0ffff, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 1539.041982] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1539.062412] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x2, 0x0}}], 0x300, 0x10062, 0x0) 20:52:33 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) dup(r4) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0xa200}, {0xffffffffffffffff, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r0, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:52:33 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x1000000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:52:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x128, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth1_to_hsr\x00', 0x9}) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r1, 0xc, 0x3, 0x587) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:52:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0xe4ffffff, 0x0, 0x0}, 0x58) 20:52:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x184, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:52:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, &(0x7f0000000080)=0x9b, r0, &(0x7f00000000c0)=0xf976, 0x3, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:52:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1551.960851] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1551.996904] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0xffff0300, 0x0, 0x0}, 0x58) 20:52:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x4, 0x0}}], 0x300, 0x10062, 0x0) 20:52:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1c200, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0xb3, 0x2, &(0x7f00000001c0)}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000180), 0x4) r5 = dup(r4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$LOOP_SET_FD(r2, 0x4c00, r5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:52:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42442, 0x1ff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000}, 0x0, 0x10000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) close(r0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x8010, r1, 0xa5e7e000) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file1\x00'}) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb4, 0x2, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x8}]}}, @CTA_TUPLE_REPLY={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 20:52:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x2000000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 1552.190589] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1552.211088] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x2000, 0x0}}], 0x300, 0x10062, 0x0) 20:52:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:52:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:52:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0xffffff0f, 0x0, 0x0}, 0x58) 20:52:47 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r1, 0x0) 20:52:47 executing program 4: r0 = socket$inet(0xa, 0x3, 0xff) fcntl$dupfd(r0, 0x406, r0) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), 0x4) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x0, "9aa0fccd3962f3da142b066e4e44db42eb6ab32f1bd566067795936333e16c558bc90e9be5d2d26d62c1ab5e8a83f426a97c8bdcc74707d79d1baeb39c1b807a"}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)) r4 = socket$inet(0xa, 0x3, 0xff) dup(r4) read(r4, &(0x7f0000000080), 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7f) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xdd4, 0x200}}, './file0\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000140)=0x1000, 0x4) dup(r4) pidfd_getfd(0xffffffffffffffff, r5, 0x0) 20:52:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x3000000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:52:47 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) dup(r4) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0xa200}, {0xffffffffffffffff, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r0, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) [ 1565.527727] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) fcntl$setlease(r1, 0x400, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) r3 = getpid() fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x2, 0x4, 0x3ff, 0x7, r3}) pidfd_open(r3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1565.577094] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:52:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x4000, 0x0}}], 0x300, 0x10062, 0x0) 20:52:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffe4, 0x0, 0x0}, 0x58) 20:52:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:52:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$KDSETLED(r0, 0x4b32, 0xd28f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:52:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x4000000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:52:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a2113185c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ac4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21dd27eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f98d6c0100f132000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a416e9d21c4205a49f4dab9365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf1043f51a4cc65025709fe667be413ce0bacd2e1552f286ec203e1177459114325bd52c030067f294570a4deea92884b850695783f870c711a3bb1eb413defceea6b69677431799c2aa837c1277868cc33ca48eddd6a1174411d7771660aa061d6ab295620d232269a74cb4f0961b23827908b71d5ffa5ab2af1df005abbb58a5bb0357b4cc178b1e2a5c04593a4d9cb36828d6f2f198c746da94929f3aeac385800e7ce8a586c4d498dff31f4697e87ef99bd1d64b3dd10b8b251773c11feb638be763deac6e4e5ddd24543490cfdb33b010c704ee0a16ae17d2ca93996a28f272e44"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:52:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x8000000) r3 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x10000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x5, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x4e5) r7 = socket$inet(0xa, 0x3, 0xff) r8 = dup(r7) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r8) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f00000002c0), &(0x7f00000000c0)='./file1\x00', 0x200, 0x4000}, 0x1000) 20:52:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x100000800, 0x0, 0x0}, 0x58) [ 1565.797898] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1565.819558] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:52:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x40000, 0x0}}], 0x300, 0x10062, 0x0) 20:52:47 executing program 4: setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004811) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:52:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x5000000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:52:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:52:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x10000000000, 0x0, 0x0}, 0x58) [ 1565.966117] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1565.997408] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:53:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) 20:53:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) 20:53:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000180)=0xa4ffffff, 0x4) r4 = socket$inet(0xa, 0x1, 0xfffffffe) r5 = dup(r4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180), 0x4) r6 = dup(r5) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f0000000180)=0xa5000004, 0x4) syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x0) r7 = socket$inet(0xa, 0x3, 0xff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) r8 = dup(r7) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r8) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x5a) 20:53:03 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x3, 0xff) dup(r4) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0xa200}, {0xffffffffffffffff, 0x1326}, {r3}, {0xffffffffffffffff, 0x81}, {r0, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:53:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x200000, 0x0}}], 0x300, 0x10062, 0x0) 20:53:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:53:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x40800000000, 0x0, 0x0}, 0x58) 20:53:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x6000000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 1581.206110] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:53:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x2000000, 0x0}}], 0x300, 0x10062, 0x0) [ 1581.241912] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:53:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x2001000000000, 0x0, 0x0}, 0x58) 20:53:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:53:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x7000000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) [ 1581.494533] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1581.505810] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:53:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x154, 0x0, 0xeb7a6f461d0d8851, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2600c040}, 0x4008000) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x24000040) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) fcntl$dupfd(0xffffffffffffffff, 0xac147466986f3dc5, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) unshare(0x48020200) 20:53:19 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) dup(r5) ppoll(&(0x7f0000000340)=[{r0}, {0xffffffffffffffff, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:53:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) getpgrp(0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={@id={0x2, 0x0, @a}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x50, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffffffa) 20:53:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x8000000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:53:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x10000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xd2b, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x4000000, 0x0}}], 0x300, 0x10062, 0x0) 20:53:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x2020000000000, 0x0, 0x0}, 0x58) 20:53:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x68b4, 0xa6, 0xffffffff, 0x1ff, 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0040, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000100)) 20:53:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r2, &(0x7f0000000380)=""/215, 0xd7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x6a4e5309ea842515) perf_event_open(&(0x7f0000001640)={0x0, 0x80, 0x3f, 0x1f, 0xf9, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x1000, 0x10001, 0x2, 0x8, 0xffffffff, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x1) [ 1598.063602] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1598.084230] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:53:20 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x9000000, 0x0, 0x0, 0x2004070, &(0x7f0000000080)) 20:53:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xaa, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() clone3(&(0x7f0000002380)={0xa2080100, 0x0, 0x0, 0x0, {}, 0x0, 0x4000000000000, 0x0, 0x0}, 0x58) 20:53:20 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f0000000700)={0x0, 0x8000, 0x0, 0x20000000, 0x12b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6da9, &(0x7f00000000c0)={0x0, 0x472b, 0x2, 0x3, 0x1b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x758) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x3, 0xff) dup(r5) ppoll(&(0x7f0000000340)=[{r0}, {0xffffffffffffffff, 0x1326}, {r4}, {0xffffffffffffffff, 0x81}, {r1, 0x250}], 0x5, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x7f]}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001868a500", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2e2f002f44663864dd93f7c703000053c3f0a216de74b305243ed1d8318f8f45fe3b41b1cfda2e56f2be276e39d879726e4910a989faf5665d2594f322bc080a2e0357a8581839ae335ba07ae2e10e44118ee687af309d62d070e339054729b896344fbae07fec"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x2a26, 0xd368, 0x0, &(0x7f0000000180)={[0x7]}, 0x8) 20:53:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x6) r6 = socket$inet(0xa, 0x3, 0xff) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x800, 0x1, &(0x7f00000001c0)="785547dca8028273e85b729abfb87e4b67027ad5322318b0c56ba844deeb058972a95af33adabdabb114ec8d48357cbf7f647468557c3d08a5f9e26479e7d4fd5d6051a4324840adb0dbe17ec10c1958be4f94", 0x4, 0x0, 0x0, {0x1, r7}}, 0x6) r8 = dup(r6) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(r8) r9 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x10000) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r8, &(0x7f0000000080)={0x28840, 0x1, 0x1d}, &(0x7f00000000c0)='.\x00', 0x18, 0x0, 0x12345, {0x0, r12}}, 0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 20:53:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=user,mmap,afid=0x0000000000000003,smackfshat=)$,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c726f6f74636f6e746578b75c73797374656d5f752c00"]) close(r0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) [ 1598.242553] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1598.256520] EXT4-fs (sda): re-mounted. Opts: ,errors=continue VM DIAGNOSIS: 20:58:24 Registers: info registers vcpu 0 RAX=ffffffff83e953c0 RBX=0000000000000000 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7dce23c010 CR3=0000000009cec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=002e02fe016c6c6f502e726567616e61 XMM02=000000000000000041077b8000000000 XMM03=000006060201e96e13e3fc4ad30ce3fc XMM04=2465746972770a29307830202c313830 XMM05=3778302826202c307228776172646968 XMM06=6638223d293030353030303030303066 XMM07=0a29357830202c226566353061616532 XMM08=06060606060606060606060606060606 XMM09=06060606060606060606060606060606 XMM10=06060606060606060606060606060606 XMM11=06060606060606060606060606060606 XMM12=00000100000606060606060606060606 XMM13=06060606060606060606060606060606 XMM14=06060606060606060606060606060606 XMM15=00000100000606060606060606060606 info registers vcpu 1 RAX=ffffffff83e953c0 RBX=0000000000000001 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555fe63098 CR3=0000000009cec000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000416bbd8d00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000