8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.887296] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2513.888248] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2513.889125] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2513.890002] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.890884] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000001 [ 2513.891755] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2513.892663] CPU: 1 PID: 15155 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2513.894079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.895745] Call Trace: [ 2513.896303] dump_stack+0x107/0x167 [ 2513.897045] should_fail.cold+0x5/0xa [ 2513.897925] ? create_object.isra.0+0x3a/0xa20 [ 2513.898985] should_failslab+0x5/0x20 [ 2513.899762] kmem_cache_alloc+0x5b/0x310 [ 2513.900606] ? mark_held_locks+0x9e/0xe0 [ 2513.901450] create_object.isra.0+0x3a/0xa20 [ 2513.902363] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2513.903408] kmem_cache_alloc_bulk+0x168/0x320 [ 2513.904378] io_submit_sqes+0x6f76/0x85c0 [ 2513.905252] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2513.906254] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2513.907232] ? lock_downgrade+0x6d0/0x6d0 [ 2513.908072] ? find_held_lock+0x2c/0x110 [ 2513.908894] ? io_submit_sqes+0x85c0/0x85c0 [ 2513.909770] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2513.910743] ? wait_for_completion_io+0x270/0x270 [ 2513.911714] ? rcu_read_lock_any_held+0x75/0xa0 [ 2513.911842] Option 'Ä!u¬¾³ùO Þ”ÌyiTP¯f\}Ÿ' to dns_resolver key: bad/missing value [ 2513.912652] ? vfs_write+0x354/0xa70 [ 2513.912681] ? fput_many+0x2f/0x1a0 [ 2513.915071] ? ksys_write+0x1a9/0x260 [ 2513.915837] ? __ia32_sys_read+0xb0/0xb0 [ 2513.916686] do_syscall_64+0x33/0x40 [ 2513.917441] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2513.918482] RIP: 0033:0x7fc3c8881b19 [ 2513.919253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.923029] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2513.924581] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2513.926032] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2513.927486] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.929168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2513.930765] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 18:44:56 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 8) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:44:56 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:44:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x8f26d5309b039a71, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4040044) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r3) 18:44:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x400c100) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=@report={0x2f0, 0x20, 0x4, 0x70bd26, 0x25dfdbfb, {0x2b, {@in=@multicast1, @in=@remote, 0x4e21, 0x100, 0x4e20, 0x3, 0xa, 0x80, 0xa0, 0x62, r3, r4}}, [@coaddr={0x14, 0xe, @in=@multicast1}, @algo_auth_trunc={0xd4, 0x14, {{'nhpoly1305-generic\x00'}, 0x440, 0xa0, "87f6e538373ca739f98103c38bea02b7525e6c930192211167e98f28bbeab37ee5e1ee891a79bd735363fa34fe909497811536edaa8e1d9e1cb39127f7fbda36da7d6c3c8afafee5e51b4960227abcf9c59b664ed1b30ee89596acf05493b95c1a5ca791713b6849981c92ef57c618bd842df451b120ef6a272fd2314a7a06cb9d5cc5c24cf362f3"}}, @algo_aead={0x9d, 0x12, {{'ccm-aes-ce\x00'}, 0x288, 0x0, "4104423ac07d3587483860c676ce467499f4e532f004e617d74ee60e33353b40b5b4e5480bcd7753eb593d08ef18172c44d8cd9240dfc6167b832df6ef7d225c198eff2ce1b12fcba25640a9258f2da428"}}, @srcaddr={0x14, 0xd, @in6=@local}, @algo_auth_trunc={0xdc, 0x14, {{'sha1-ni\x00'}, 0x480, 0x0, "eda530b46ebde16d43922cf2b1158790a08badec1b07bc283c418a8fc0619e1bc9f5a6a2c1135502f17060130d7b9d42abea5c4c276289b1437f6bd38ee987216f11d38fce0dacb5c42a20f3e9ebd918f8bbd49e63f662609ba0e5abe631c73e3d8acd14e7dbf57327cbe301221510e7e6ebc480965feada7473eebe7fb36d018240dc91ae85d0f5aac3d4e6a6e9385c"}}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8001}, 0x40054) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x15c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @replay_esn_val={0x1e, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}]}, 0x15c}}, 0x0) 18:44:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf0ffffff00000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:44:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = openat(r0, &(0x7f0000000300)='./file1/file0\x00', 0x282001, 0x82) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='./file1/file0\x00', 0x4000, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x20000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) accept4$unix(r4, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000000000000000000001fd3a82ae382fe0bc4313113a461b249ce27118824a923bfeed56888de5651411fd9421d0f98c0426db968ffbb16a96c5961b1e71ad4d99f92ac296e00339b8e3449271c25ff31b68158ecc0482670981f7941"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000180)={0x33, @loopback, 0x4e20, 0x4, 'wlc\x00', 0x26, 0xf70, 0x67}, 0x2c) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) timerfd_create(0x8, 0x0) unshare(0x48020200) 18:44:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x7, "dbf57d"}) 18:44:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x1000}}, './file0\x00'}) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000001c0)) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) [ 2528.264680] FAULT_INJECTION: forcing a failure. [ 2528.264680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2528.267667] CPU: 1 PID: 15194 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2528.268436] FAULT_INJECTION: forcing a failure. [ 2528.268436] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.269088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.269137] Call Trace: [ 2528.273603] dump_stack+0x107/0x167 [ 2528.274352] should_fail.cold+0x5/0xa [ 2528.275134] __alloc_pages_nodemask+0x182/0x600 [ 2528.276085] ? lock_chain_count+0x20/0x20 [ 2528.276942] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2528.278162] ? perf_trace_lock+0xac/0x490 [ 2528.279009] alloc_pages_vma+0xbb/0x410 [ 2528.279818] wp_page_copy+0xee7/0x1f00 [ 2528.280634] ? print_bad_pte+0x5a0/0x5a0 [ 2528.281452] ? lock_downgrade+0x6d0/0x6d0 [ 2528.282291] ? vm_normal_page+0x162/0x2e0 [ 2528.283137] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2528.284216] do_wp_page+0x27b/0x1390 [ 2528.284982] handle_mm_fault+0x1cc7/0x3500 [ 2528.285855] ? __lock_acquire+0x1657/0x5b00 [ 2528.286737] ? __pmd_alloc+0x5e0/0x5e0 [ 2528.287533] ? vmacache_find+0x55/0x2a0 [ 2528.288371] do_user_addr_fault+0x56e/0xc60 [ 2528.289257] exc_page_fault+0xa2/0x1a0 [ 2528.290050] asm_exc_page_fault+0x1e/0x30 [ 2528.290891] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2528.291897] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 91 2c 1e 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 72 2c 1e 02 66 90 48 bb f9 ef ff ff ff 7f [ 2528.295630] RSP: 0018:ffff88805262fcf0 EFLAGS: 00050293 [ 2528.296730] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020004d38 [ 2528.298176] RDX: 0000000000040000 RSI: ffffffff830fa6f2 RDI: ffff888048d80938 [ 2528.299610] RBP: 000000000004c000 R08: 0000000000000000 R09: 0000000000000000 [ 2528.301057] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 2528.302495] R13: 0000000020004d00 R14: 0000000000000400 R15: 00000000000003ff [ 2528.303955] ? __sys_sendmmsg+0x1c2/0x470 [ 2528.304859] __sys_sendmmsg+0x1cf/0x470 [ 2528.305690] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2528.306602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2528.307659] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2528.308767] ? trace_hardirqs_on+0x5b/0x180 [ 2528.309644] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2528.310761] __x64_sys_sendmmsg+0x99/0x100 [ 2528.311628] do_syscall_64+0x33/0x40 [ 2528.312400] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2528.313445] RIP: 0033:0x7f9d069ffb19 [ 2528.314200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.317934] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2528.319467] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2528.320924] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2528.322360] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.323794] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000001 [ 2528.325233] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2528.326734] CPU: 0 PID: 15196 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2528.328207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.329874] Call Trace: [ 2528.330407] dump_stack+0x107/0x167 [ 2528.331151] should_fail.cold+0x5/0xa [ 2528.331921] ? create_object.isra.0+0x3a/0xa20 [ 2528.332863] should_failslab+0x5/0x20 [ 2528.333634] kmem_cache_alloc+0x5b/0x310 [ 2528.334458] ? mark_held_locks+0x9e/0xe0 [ 2528.335288] create_object.isra.0+0x3a/0xa20 [ 2528.336196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2528.337571] kmem_cache_alloc_bulk+0x168/0x320 [ 2528.338675] io_submit_sqes+0x6f76/0x85c0 [ 2528.339721] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2528.340950] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2528.342104] ? lock_downgrade+0x6d0/0x6d0 [ 2528.343086] ? find_held_lock+0x2c/0x110 [ 2528.344059] ? io_submit_sqes+0x85c0/0x85c0 [ 2528.345113] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2528.346268] ? wait_for_completion_io+0x270/0x270 [ 2528.347425] ? rcu_read_lock_any_held+0x75/0xa0 [ 2528.348540] ? vfs_write+0x354/0xa70 [ 2528.349432] ? fput_many+0x2f/0x1a0 [ 2528.350304] ? ksys_write+0x1a9/0x260 [ 2528.351223] ? __ia32_sys_read+0xb0/0xb0 [ 2528.352238] do_syscall_64+0x33/0x40 [ 2528.353111] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2528.354146] RIP: 0033:0x7fc3c8881b19 [ 2528.354899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.358629] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2528.360186] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2528.361643] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2528.363090] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.364561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2528.366009] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 [ 2528.454611] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2528.474807] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:44:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffff000003"], 0x28}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) 18:44:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf6ffffff00000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:44:57 executing program 3: ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x101000) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x8, 0xff, 0x9, 0x80, 0x0, 0x7, 0x9c, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0xa00}, 0x100, 0x1, 0x1, 0x7, 0x4, 0x6, 0x9d65, 0x0, 0x8000, 0x0, 0x1}, 0xffffffffffffffff, 0xf, r1, 0x8) finit_module(r0, &(0x7f0000000140)='!-*[]}}\x00', 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r4) pread64(r4, &(0x7f0000000100)=""/51, 0x33, 0x8001) 18:44:57 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x5e, 0x9, 0x3, 0x80, 0x0, 0x2, 0x200, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x55, 0x4, @perf_config_ext={0x2, 0x3}, 0x80, 0x4f9, 0x2, 0x9, 0x0, 0x3f, 0x8, 0x0, 0x20, 0x0, 0x60b5520e}, r3, 0xc, r0, 0x8) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) 18:44:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x12, "dbf57d"}) 18:44:57 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2528.866347] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2528.883549] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:44:57 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf82f000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2528.930107] FAULT_INJECTION: forcing a failure. [ 2528.930107] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.932423] CPU: 0 PID: 15234 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2528.933863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.935546] Call Trace: [ 2528.936089] dump_stack+0x107/0x167 [ 2528.936839] should_fail.cold+0x5/0xa [ 2528.937616] ? create_object.isra.0+0x3a/0xa20 [ 2528.938544] should_failslab+0x5/0x20 [ 2528.939315] kmem_cache_alloc+0x5b/0x310 [ 2528.940139] ? mark_held_locks+0x9e/0xe0 [ 2528.940987] create_object.isra.0+0x3a/0xa20 [ 2528.941919] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2528.942969] kmem_cache_alloc_bulk+0x168/0x320 [ 2528.943916] io_submit_sqes+0x6f76/0x85c0 [ 2528.944802] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2528.945822] __do_sys_io_uring_enter+0x6b5/0x1920 18:44:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x3}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)="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", 0x2a4}, {&(0x7f0000000000)="4155f426d9b68eb593e957b07c23f507", 0x9}, {&(0x7f0000000100)="31f8601665624089193779036cf9017f2c975d28648f0c6eee16a198ad846d028f1dd1273abf29335c6b58508fc4355633750fe2b75ee2d9579c7436102b0facb4833b", 0x3d}], 0x3) [ 2528.946815] ? lock_downgrade+0x6d0/0x6d0 [ 2528.947800] ? find_held_lock+0x2c/0x110 [ 2528.948665] ? io_submit_sqes+0x85c0/0x85c0 [ 2528.949546] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2528.950522] ? wait_for_completion_io+0x270/0x270 [ 2528.951493] ? rcu_read_lock_any_held+0x75/0xa0 [ 2528.952435] ? vfs_write+0x354/0xa70 [ 2528.953191] ? fput_many+0x2f/0x1a0 [ 2528.953923] ? ksys_write+0x1a9/0x260 [ 2528.954695] ? __ia32_sys_read+0xb0/0xb0 [ 2528.955541] do_syscall_64+0x33/0x40 [ 2528.956323] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2528.957376] RIP: 0033:0x7fc3c8881b19 [ 2528.958118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.961838] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2528.963382] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2528.964840] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2528.966283] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.967712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2528.969149] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 [ 2528.974179] ata2.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 frozen [ 2528.975742] ata2.00: ATAPI check failed (ireason=0x2 bytes=4) [ 2528.977138] ata2.00: cmd a0/00:00:00:04:00/00:00:00:00:00/a0 tag 0 pio 4 out [ 2528.977138] Inquiry 12 00 00 00 db f5res 58/00:02:00:04:00/00:00:00:00:00/a0 Emask 0x2 (HSM violation) [ 2528.980795] ata2.00: status: { DRDY DRQ } [ 2528.981798] ata2: soft resetting link [ 2529.140126] ata2.00: configured for MWDMA2 [ 2529.145613] ata2: EH complete 18:44:57 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 9) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:44:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0xe5, 0x5, 0x0, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x40008, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) execveat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000180)=']%:\x00'], &(0x7f0000000380)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)=':/+\x00'], 0x100) write$bt_hci(0xffffffffffffffff, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5}, 0x68) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0xb1, 0x7f, 0x0, 0x4d, 0x0, 0x81, 0x800, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f00000003c0), 0xc}, 0x48204, 0x3, 0x9, 0x6, 0xb3, 0x23, 0x401, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x5) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000480)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, 0x0) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) 18:44:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) ioctl$TUNSETLINK(r1, 0x400454cd, 0x321) close(r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) r3 = openat$random(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x10c001, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}, {@access_client}, {@aname={'aname', 0x3d, '$['}}, {@cache_none}, {@version_9p2000}, {@nodevmap}, {@fscache}], [{@measure}, {@subj_user}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@audit}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@pcr={'pcr', 0x3d, 0x3c}}]}}) 18:44:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x1b, "dbf57d"}) 18:44:57 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:44:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:44:58 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf904000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2529.511743] FAULT_INJECTION: forcing a failure. [ 2529.511743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2529.513615] CPU: 1 PID: 15267 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2529.514661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2529.515910] Call Trace: [ 2529.516349] dump_stack+0x107/0x167 [ 2529.516909] should_fail.cold+0x5/0xa [ 2529.517498] _copy_from_user+0x2e/0x1b0 [ 2529.518119] __copy_msghdr_from_user+0x91/0x4b0 [ 2529.518830] ? __ia32_sys_shutdown+0x80/0x80 [ 2529.519510] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2529.520324] ? perf_trace_lock+0xac/0x490 [ 2529.520973] sendmsg_copy_msghdr+0xa1/0x160 [ 2529.521634] ? do_recvmmsg+0x6d0/0x6d0 [ 2529.522240] ? handle_mm_fault+0x9e9/0x3500 [ 2529.522880] ? __lock_acquire+0x1657/0x5b00 [ 2529.523538] ? find_held_lock+0x2c/0x110 [ 2529.524169] ___sys_sendmsg+0xc6/0x170 [ 2529.524787] ? sendmsg_copy_msghdr+0x160/0x160 [ 2529.525490] ? vmacache_find+0x55/0x2a0 [ 2529.526115] ? do_user_addr_fault+0x5b0/0xc60 [ 2529.526824] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2529.527628] ? exc_page_fault+0xca/0x1a0 [ 2529.528280] ? trace_hardirqs_on+0x5b/0x180 [ 2529.528931] ? exc_page_fault+0xca/0x1a0 [ 2529.529559] ? asm_exc_page_fault+0x1e/0x30 [ 2529.530244] __sys_sendmmsg+0x195/0x470 [ 2529.530836] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2529.531502] ? lock_downgrade+0x6d0/0x6d0 [ 2529.532168] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2529.532933] ? wait_for_completion_io+0x270/0x270 [ 2529.533681] ? rcu_read_lock_any_held+0x75/0xa0 [ 2529.534396] ? vfs_write+0x354/0xa70 [ 2529.534974] ? fput_many+0x2f/0x1a0 [ 2529.535554] ? ksys_write+0x1a9/0x260 [ 2529.536140] ? __ia32_sys_read+0xb0/0xb0 [ 2529.536770] __x64_sys_sendmmsg+0x99/0x100 [ 2529.537382] do_syscall_64+0x33/0x40 [ 2529.537933] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2529.538726] RIP: 0033:0x7f9d069ffb19 [ 2529.539301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2529.542145] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2529.543312] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2529.544417] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2529.545496] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2529.546605] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000001 [ 2529.547684] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2529.551859] FAULT_INJECTION: forcing a failure. [ 2529.551859] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.553651] CPU: 1 PID: 15266 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2529.554706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2529.555955] Call Trace: [ 2529.556367] dump_stack+0x107/0x167 [ 2529.556919] should_fail.cold+0x5/0xa [ 2529.557492] ? create_object.isra.0+0x3a/0xa20 [ 2529.558180] should_failslab+0x5/0x20 [ 2529.558764] kmem_cache_alloc+0x5b/0x310 [ 2529.559374] ? mark_held_locks+0x9e/0xe0 [ 2529.559985] create_object.isra.0+0x3a/0xa20 [ 2529.560654] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2529.561431] kmem_cache_alloc_bulk+0x168/0x320 [ 2529.562145] io_submit_sqes+0x6f76/0x85c0 [ 2529.562791] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2529.563549] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2529.564320] ? lock_downgrade+0x6d0/0x6d0 [ 2529.564933] ? find_held_lock+0x2c/0x110 [ 2529.565554] ? io_submit_sqes+0x85c0/0x85c0 [ 2529.566210] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2529.566945] ? wait_for_completion_io+0x270/0x270 [ 2529.567672] ? rcu_read_lock_any_held+0x75/0xa0 [ 2529.568378] ? vfs_write+0x354/0xa70 [ 2529.568945] ? fput_many+0x2f/0x1a0 [ 2529.569489] ? ksys_write+0x1a9/0x260 [ 2529.570066] ? __ia32_sys_read+0xb0/0xb0 [ 2529.570686] do_syscall_64+0x33/0x40 [ 2529.571247] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2529.572012] RIP: 0033:0x7fc3c8881b19 [ 2529.572578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2529.575325] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2529.576479] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2529.577539] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2529.578663] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2529.579759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2529.580839] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 18:45:13 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 10) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:45:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:45:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf92f000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:45:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:45:13 executing program 3: sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r1, &(0x7f0000000180)={0x20000, 0x85, 0x2}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x7) write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIOCLEX(r2, 0x5451) pidfd_getfd(r1, r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r3) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'macvtap0\x00'}) 18:45:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x5e, 0x9, 0x3, 0x80, 0x0, 0x2, 0x200, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x55, 0x4, @perf_config_ext={0x2, 0x3}, 0x80, 0x4f9, 0x2, 0x9, 0x0, 0x3f, 0x8, 0x0, 0x20, 0x0, 0x60b5520e}, r3, 0xc, r0, 0x8) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) 18:45:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x1d, "dbf57d"}) 18:45:13 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2544.404458] FAULT_INJECTION: forcing a failure. [ 2544.404458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2544.406538] CPU: 0 PID: 15298 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2544.407570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.408808] Call Trace: [ 2544.409211] dump_stack+0x107/0x167 [ 2544.409765] should_fail.cold+0x5/0xa [ 2544.410378] _copy_from_user+0x2e/0x1b0 [ 2544.411112] __copy_msghdr_from_user+0x91/0x4b0 [ 2544.411729] ? __ia32_sys_shutdown+0x80/0x80 [ 2544.412355] ? udp_v6_push_pending_frames+0x360/0x360 [ 2544.413020] ? inet6_sendmsg+0xbd/0x140 [ 2544.413517] ? inet6_compat_ioctl+0x320/0x320 [ 2544.414170] ? __sock_sendmsg+0x55/0x190 [ 2544.414746] sendmsg_copy_msghdr+0xa1/0x160 [ 2544.415316] ? do_recvmmsg+0x6d0/0x6d0 [ 2544.415822] ? __lock_acquire+0x1657/0x5b00 [ 2544.416380] ___sys_sendmsg+0xc6/0x170 [ 2544.416875] ? sendmsg_copy_msghdr+0x160/0x160 [ 2544.417464] ? vmacache_find+0x55/0x2a0 [ 2544.417985] ? __lockdep_reset_lock+0x180/0x180 [ 2544.418584] ? lock_acquire+0x197/0x470 [ 2544.419101] ? find_held_lock+0x2c/0x110 [ 2544.419622] ? __might_fault+0xd3/0x180 [ 2544.420133] ? lock_downgrade+0x6d0/0x6d0 [ 2544.420677] ? asm_exc_page_fault+0x1e/0x30 [ 2544.421234] __sys_sendmmsg+0x195/0x470 [ 2544.421742] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2544.422273] ? lock_downgrade+0x6d0/0x6d0 [ 2544.422823] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2544.423437] ? wait_for_completion_io+0x270/0x270 [ 2544.424065] ? rcu_read_lock_any_held+0x75/0xa0 [ 2544.424670] ? vfs_write+0x354/0xa70 [ 2544.425154] ? fput_many+0x2f/0x1a0 [ 2544.425625] ? ksys_write+0x1a9/0x260 [ 2544.426112] ? __ia32_sys_read+0xb0/0xb0 [ 2544.426639] __x64_sys_sendmmsg+0x99/0x100 [ 2544.427176] do_syscall_64+0x33/0x40 [ 2544.427646] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2544.428309] RIP: 0033:0x7f9d069ffb19 [ 2544.428778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.431135] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2544.432109] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2544.433030] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2544.433913] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.434846] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2544.435749] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2544.464338] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2544.473395] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2544.493207] FAULT_INJECTION: forcing a failure. [ 2544.493207] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.494974] CPU: 0 PID: 15306 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2544.496074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.497212] Call Trace: [ 2544.497558] dump_stack+0x107/0x167 [ 2544.498014] should_fail.cold+0x5/0xa [ 2544.498499] ? create_object.isra.0+0x3a/0xa20 [ 2544.499063] should_failslab+0x5/0x20 [ 2544.499540] kmem_cache_alloc+0x5b/0x310 [ 2544.500037] ? mark_held_locks+0x9e/0xe0 [ 2544.500538] create_object.isra.0+0x3a/0xa20 [ 2544.501081] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2544.501697] kmem_cache_alloc_bulk+0x168/0x320 [ 2544.502255] io_submit_sqes+0x6f76/0x85c0 [ 2544.502793] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2544.503434] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2544.504043] ? lock_downgrade+0x6d0/0x6d0 [ 2544.504579] ? find_held_lock+0x2c/0x110 [ 2544.505107] ? io_submit_sqes+0x85c0/0x85c0 [ 2544.505648] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2544.506270] ? wait_for_completion_io+0x270/0x270 [ 2544.506876] ? rcu_read_lock_any_held+0x75/0xa0 [ 2544.507472] ? vfs_write+0x354/0xa70 [ 2544.507935] ? fput_many+0x2f/0x1a0 [ 2544.508399] ? ksys_write+0x1a9/0x260 [ 2544.508876] ? __ia32_sys_read+0xb0/0xb0 [ 2544.509405] do_syscall_64+0x33/0x40 [ 2544.509876] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2544.510514] RIP: 0033:0x7fc3c8881b19 [ 2544.510991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.513280] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2544.514214] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2544.515123] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2544.515999] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.516892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2544.517762] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 [ 2544.547606] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2544.551887] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:45:13 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:45:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x37, "dbf57d"}) 18:45:13 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x22, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x6e, 0x0, 0x1, 0x7f, 0x0, 0x80000001, 0x80200, 0xb, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xffffffff, 0x8fb}, 0x8a00, 0xffff, 0x7, 0x5, 0x400, 0xdea1, 0x4, 0x0, 0xfffffeff, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',nvd', @ANYRESHEX]) 18:45:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf9fdffff00000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:45:13 executing program 1: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd_index=0x2, 0xfffffffffffffffe, &(0x7f0000000240)="f222bcccfd02ff0d52a52ef8782e15a9336aab4c5cc03d0218d947bbe174bc237be2803fe9aef3b8a0c72ccd67638c3d7fdfc636381de9b2250d6cf0859e8bda993cdfc1631099b8a7b02ecb54f41a3d96145bebe6be5aab0f7dc31a26b9db7e554cdec16adc47b29890a16dba138c0f7a7d87407b3e821362fd43476982d9e9cdff32b75d053b06164c92aaa322a008c987459ff0eb54c1dd33f28d597b0cfd018fe6ce52b3f0ef0dda27b297ce30899b29d99414bbf08f7a613b5bbfc3997e0a39fb3ed8ae6e8696608703a115c1456185c24d7a62af7adf31f25b1450968d7a51e96609dd980d7cff7a2a9ffbcc65d5ceae08924643abf18c5061f42276f2862b11ae36298ebbf7b6ef3289c6ebb0e73480c514ad10196e31a0de4da47486524af83a033764c2939b69111f13f6be22738f59df9fe6810390f738fcf81ec84465a111ee7d327da71024d2cecb9c235dc78b6ba7c451cf05b591f9e017bd4196abcd5d8e187ad416a634fde44a09a9a252b998297af8ecda9d7b1c87004f270af2221fa15299477ae87fc67f466525b0bb0453ca28e82b8a0eb02a90829ad14a02e69e61d9df37ac90c55af9dc4bc9bca7ee798b00b8bb5b6a41c937df5d7297b815e86c66750bda109f8eb37c1887f2f1e867db58c8ee53e0c71c344272d824fe60d2f065d22f0d1bd9f3b9ba018cc739e5504d4fc6fdbe33c610746f0d17b8e568b893bcb050a578df612c078edd003c9de3d03360a64e41b0a89c24064cc09e3b67f2a2c694d98440b2feab60003544f0de966da16d385a9693b0846ecdb1276975bc0ad7874eaac248ccd8fc951249e658e1da64e51f26d1e2e032de8e451a93886ea7d1a47433ae0a28f6c0f0ac41f7291dcb1b92ae5d611671a16e848b2292a2471c3398b4066be380133dcf07d1295b3d8a04bf55e7d804640b20ff62907d676464e090dcb8d9051fabc030e5a6edcc5dbb85eeb570aaec14d55aa0159b695855d2b2504bfcd7fbdcc4eed8ef1ff99027ee79d7081d5808118c66e58624a8466c175edf3be58b6a3fd54a3b606a9d50be4526af63ffa8326fc6b8031cae0838033e3ed4d7e5e65edea5f8a841917a7c73834b2bb2e1d39e25c6859917fb7b76913fb9f606d54551be5e6a67d183ebb5c9a21ca6c6cbdf55029538da521eabfabb2f7b1d6db385358e7cea449c5f2ffbbc00b6c8139f0bb66a42ca82c124f71c816f955c9c0f595aa9cce2c6c3c6e0a8367ec040d61411fcaf9c7c133aa47cfb60818eaf2e186e8129686090f81b7b71422e9d3629ac3f67dc9edb8235a8e318d87007abcf7ab9a7d0012f7ec6eefc242cb634e6456db2ba1cdcec56dcb2037be5d7909b94e96d8f361e7efcf2cf3392d34dbf8deec7195efb2cecf9ca123e9ae3c136f4c087e3d74f77b216a18a78736e5542e9edeb101bedd9a6943d4709ff299d7dd33f285aa10fba8f74ab0a289338bbf9993e18ae1e3d3c179061567ae7e3e88e253c5170871a3d4d778aff6257cf5a2e0cd7cdf2799330378f663156dc1a9cd12ac1a0be990f03210014386ff849822c395033c4faa59b93a22a0418c2b86d505b40f20038bef920cbbe5f08c84fe115e49e4cb7f67faf19a264ff2dd34afc1399c417c710a7109db2582b83136902efc709c4ab1e05983611b86191387c19b5ece0ebf40b40d834eecb1b00c4f33d5526d2a15d9ad9af90759959776accfd5ba919f478dbb0ddcd9898d4dc204700693ff8f600df30a4a20a1f85717bae06e6749359aa997139fcf4cbf46d7b25e7808cdb988c48e36f7615a71ef2ddd84fe61ea2c6f12fc6ad0a8c3a2b1366bbae8c3243ea146e76695aa51014637d66eb0b459616148be22c1507af5ae6a1d55dc09742945a81138022d49c3346cf6e2e3969f16338314ede6b97f903821421414b34296ad22e5fc8063eaf1c7172368856031f3691a39f9e44d433a5818c460499033c149125fe449237c63ad5990708d81bbae39e7554e916ea2550b4f77567a3da65a46cc9a5e0ebf0d103253f42e51f5c7a8ffa3a9aefddd271e75d4d3832e2c98beca25e4d0b5af513c23782348999f2362cfb0666bb75543b7902ade88d3e31bd2bf028772df1083d15d03da2d5af975766772a4790359b269bf7b4a94c3c1020d3c187384dbb319dae0c46eb2d934f0694405d4912ee3d03a3431e930c352b8c55800d0cb304e73f3da7f93d4b4a211cb0794b8cf5664d7443a636cb2578fa0cb0740fb7cf25df19edf5ca620b51801e266ca9f9c597c45f15a7b425b1172655027f260af473a8df0203acb19e148b5d830ce1e8ee3cb248d7afaa2d2f22941cce54cfdfb72ea52aae8c6475d42ad554ac9bab634bbc1d372991a4f33615b0e9ac5d32a58b787c1c7c2ccf934791657a243d7ccdc7e1ff2840fb6ec16e1f70903e899fd52d9208d68aaa15bb898e22bb8c2460576ed619541b8b8763496d383fed227bb67f5eda53694c4caafc260248853c983815df4933c129393f919db95c02847cc27da2edfcb7d373ce5f381dfb14de015f6c3c874c9e72ff83415465f0642f190cda8887977a0e0f1ceeb64f20043031ebd94c9cbb1b5eeefaa78b42171c90aaf02fff86d2e6bf553db29a0c53b74ae649b4c3f0d487691ab1e3972d19aa6f4f1970da3ee252f27f040bcfbaed463145d31581aed4f368be5b3ed1577572f2834b43944cc6ac5515963974b8ab305937fbf4bedd00115061c1356c6c69af2eaf2c852058507df900d22c9f071322deab10112371809f904d10df7cbad04d529c44d405911c9ab231f717723ea722e1293d1a02c6ad5816f01a548cca374cb222a4eaa59d532ab593903b65281bdd637764cd6a842a0760c2b44dd68ca6b54ee1792305b04c59006b1f5eee1749573c1f6ca05014d55a040ba6b028c4099e732c0db962504a8420a6891d338a92ec6a95d5822ec3019927f69c5b20737b102ca85edce18ab28c5800c4a93fe2a88e46d73b25ca2621c99b68a17ac2bbdf143e823404e6609ee0cd554744329ec25907b96208addee22571858c3a375c0f6d543ef9d8fcc0ec7beca60aa55fee08efbe7e79b29008906de2213b0e3380691f40110721d4d7cbf5dbb26d13b68a93d5592775c34a7f6df7321eb1ea53f5099248e9a084ba0273844b42ec246ad93edc2e3b8b81864e69cc44e06019ac8f0cfcf1c1e06cbf2c7439bd8bc54429e177d2f8156e6107ddc6e5cfa9c9a5ec4fd5780f0903dd4a870056d6f30945b350b0e4311ba95b232ef047c8c1da3ecf7f56d3f7124dffa8279e7f70c09434d3e3512effcb9be3d3b76bd50b83f0f7557277b5672115345c812c4ee6d1f3c35d69f8b7a965bd3d25154bdbc6979261639be52d0b0955dd13c7ddf43d69c7da97becfbe169def708c33fe11e051969baa2302f1731493ea904558f0358e7442895861409f40184675b8db4a6ae64d95e7760a9899aeae783963ef4fc21fd3d61b8638b30689c6ca12a85e350f8d960541d0350224729750022cd16077362a81a4403c3bd81cfe21328ef6dc42a680be7be04c30607a7e20cd4dfabee2da19d5d257c06634edb69e4ac03ec49b7ec131b19390a581249b8fb9575abfe6a1d669acff71b324201a274fcb2691a4e6d38500839d028176f0aeec3fc8a379bfd94d7c76a138fc352c4fc5567fb4708a1420fe0a300351a3b5418027e121689cbf561f7150db2cccee80b986898d109a1fc94f041e47992289c2ee726e4b46e5f68179adf3214c78aaa5f1e821e200e31af09fa15c43eb235751c0d6b71fb86a6eca253c0f6d874896c2ae91df80e7d1e994b605688de8fd1cf9d02744344b2e908c7790055170d4d4789f5a2d8ab864999691fb9b76363a8eac2bb0892c8a56d1c8a3032a3dbb877a452ee55242e5047062ddb4ae9079d1f4fbe21e09e2824c4cdfac84d00aafd92d0f285ebadde01ee94d563b7701773b0e8b7615b51977099278bc4468e9cdf6e8e50e274f8cde978c295eb691ba9dc4a5d42ac24f72d3910b3e5f3e60cc3e0df776fd550b0d83dad885dd897393fadca1ec7c39903c3f36ce3e0175dd2918c005bc1e470cb0ca3241aba5f5e960e430a93807b9dd5f8119e0d31affe84f63427eacf1deb9360c2123c600d080eb34997753cc8f6892a29417edd3f0cf5b0e86062b082cacc3a3a861c43d9df2778e9d7df343dbdfc552da9446fdafbc12f3a63b420f1b020accdd90f4285cbd115bc6b2e73f7c4f6af3803e315561bab11425ab1bdf2ac26a7d21f17ceca6f49e524f710a8a86d587d05a47faba3ef44dd0911769b4bd6973c8cfe13356b71c6ab85d52667318ae7dfdb4f405d48eef7d8b3e062034d44bc4a60d0ed348f1478d5c6447eb11e087c7c2091830699af169d69be6d762209f9119544f861fab6fc047bc2dc5c3f814ede89dafaadd9defa781b17becacbafe2bbb00677fd1921b5f4db34fbe147806f252a09beeab17a90e81fe57f8032e4b8246549ee156b70269c653f16aecb98132f6e66fa03ca2097c2061e93ca94c44d81cb7b516f804f321ffc4c78752e94e155f62fe80358e781e447c1d3679cc68ef6071a4e44b1bf756357c6929b47d6649f0c25f0aa11c7e0a89056ca4cf615e4f4e0e70ded3b2a4a5d46c766cf197497ad4ebec17b9fb137ce7e811209c6a06bd58baeefdff23ccdd4aed8be891f9f2b4a2595c59c45b088d3f8cd6f1c1a0a266e1974a85016f0525b819ea31d1be00d61a78d6b2d7732f0214d6aa75d063226dcc336cf6e5172b6b3bcb97c8f66c0221de6533fc0aefb61e9a75cc56237ed5f40bd2eb05e6549e67e28f3cf10161d475354e7824c43a7be85636985de66404e58adec9f9a43cd146d226d381bb52a11f135192fe20b7844177bdcaefc0f8c7050cce6b4c29b0360359c24d65763988830eebf5b78cd52d0be10481e5ce5f9a1847a10ea4761fee5c4eedb525f0572ce9084144bee4336b5a98b3295a086eb4736b138860db2107b2a30158383438f401e365fb44cea30eb32bda977e999e5aec2336af2ab4ab73a21964db54fb7b2f5898ed00ebadbc36bf84862f9b039304be92334d85b6816d6353f174166d100b95e720c8a0e7bb201a4a6434c95c94297ef70cf5c259cc12815186e135fba6ebf3c7132e2635da64fbfd53344c865fe0cbf1c09989b327596f7cecdb3f6ed1fbd2a800d7bf94d5d229a5e8b071c64d267b824421c1160bc7d74d9d21aa3d6e2cc7efa30f339495a6a8e2b9fd35a15be4ba7363d8b1aa8f78cbfda4828ee7d4e6afa2bc7949e91957b7b4d4aefa2074654484766bc749a7347bbf30c3965dd552edb9e28fb9bb1f2d6f5ba6e6b8543bd9733ea7229b76e79d31ae8a1e15148aa0ab59dab4c503e49d28138d3e0285781011b8997bf349c2c40d78f262e968e7b3ba4f21b7e5b82ccab71f379a5521646b90ca3cd14b07a4126b3ceeafe3186addf481f13eeea1348bf668bf954478cc5f59a357fe9c528c60f486c0d02660a60efe6ae423aebe6d48f96a62a67d9f026443adb6112e4a01b8afe8883bc645781483244e1a5de5bbb498fc53de9ddf1038dc69f386d92f9afa8b438f1a822fc72341f359f7f935450edcaef712f20e60dbf8fb5b9af54abf01e2737981f4a2a47cc320a65fe3a060ae1241cafba50cbcc9f2818dc2609d88803a47f1c6b05cf5ea9b92fc9a2f01c5908ab2578eaafb62badccb83dc34f68c66ff952e27a20bf55aedc5d0a54252fa2814ef7979de0ddb8fad7ac526dd7639e8f7ea61f3b43b0e", 0x1000, 0x2, 0x1}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x4000007ffffffc) ftruncate(r3, 0x9) 18:45:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x37}, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x8, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x7fffffff) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) lseek(r1, 0xffff, 0x4) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) [ 2544.823384] FAULT_INJECTION: forcing a failure. [ 2544.823384] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.824644] CPU: 0 PID: 15328 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2544.825378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.826281] Call Trace: [ 2544.826585] dump_stack+0x107/0x167 [ 2544.826975] should_fail.cold+0x5/0xa [ 2544.827391] ? create_object.isra.0+0x3a/0xa20 [ 2544.827886] should_failslab+0x5/0x20 [ 2544.828296] kmem_cache_alloc+0x5b/0x310 [ 2544.828737] ? mark_held_locks+0x9e/0xe0 [ 2544.829182] create_object.isra.0+0x3a/0xa20 [ 2544.829645] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2544.830198] kmem_cache_alloc_bulk+0x168/0x320 [ 2544.830723] io_submit_sqes+0x6f76/0x85c0 [ 2544.831287] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2544.831810] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2544.832332] ? lock_downgrade+0x6d0/0x6d0 [ 2544.832789] ? find_held_lock+0x2c/0x110 [ 2544.833225] ? io_submit_sqes+0x85c0/0x85c0 [ 2544.833729] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2544.834253] ? wait_for_completion_io+0x270/0x270 [ 2544.834788] ? rcu_read_lock_any_held+0x75/0xa0 [ 2544.835317] ? vfs_write+0x354/0xa70 [ 2544.835732] ? fput_many+0x2f/0x1a0 [ 2544.836129] ? ksys_write+0x1a9/0x260 [ 2544.836561] ? __ia32_sys_read+0xb0/0xb0 [ 2544.837017] do_syscall_64+0x33/0x40 [ 2544.837424] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2544.837985] RIP: 0033:0x7fc3c8881b19 [ 2544.838396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.840484] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2544.841350] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2544.842158] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2544.842960] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.843752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2544.844552] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 18:45:13 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) [ 2544.876231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=15327 comm=syz-executor.1 [ 2544.885427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=15327 comm=syz-executor.1 [ 2544.887584] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2544.889988] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:45:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfa2f000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2544.906958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=15327 comm=syz-executor.1 [ 2544.911443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=15327 comm=syz-executor.1 [ 2544.975570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=15327 comm=syz-executor.1 [ 2544.980678] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2544.981949] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2544.993416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15327 comm=syz-executor.1 [ 2545.016539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=15327 comm=syz-executor.1 [ 2545.026536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=15327 comm=syz-executor.1 [ 2545.033713] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2545.034823] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2545.093290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=15327 comm=syz-executor.1 [ 2545.095981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=15327 comm=syz-executor.1 18:45:28 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:45:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12100, &(0x7f0000000180)={0xa, 0x4e23, 0x400, @private1}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x6359, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) 18:45:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x1000, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="013820230000000012dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c1cf3e01f6cfeb7f8c540ead710a20633bf5448732d7217c4236cee028bb28031ad48baa1210830d8a538aac2933e45b1e6b667344f9deb3d7bbcdd62001e24a27324994e159243318a44240678591e458101a6a8301515486e36020007e9de064177a77d8b99c6786d123d717126e7a143f3867f588bd51ab8c54dd08813179f245ea22d7322296def610db07df721ab7e61cef127e09a1b124a008c72f9b5733c7d2eba5cfb15c113df3968478b9e4f5bb369df531d7470ed69f778c98f2ff04605cd2b19a63f91f5332e9ca095318288122e28e929fb6618500d1aa4306efb7028b52d29506e1096a6a17c3498cc79911adcd90aba7739f59dee28cae641399f0d02b142f3497f66afe0882c45ffe7e295bc82b03d23bc02d4a5221d77b34a470dce758da10e26f9c9fb753a725ea4900c171c32070dc3c1f2ffd0c3b4f844dc27135b990d1a3d08a7"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r4}, 0x68) openat(r4, &(0x7f0000000080)='./file0\x00', 0x743842, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 18:45:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x63, "dbf57d"}) 18:45:28 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20020000) unshare(0x40000) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x802) dup2(r3, r0) setns(r2, 0x0) 18:45:28 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xfff}}, './file0\x00'}) 18:45:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfc2f000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:45:28 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 11) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) [ 2559.701766] FAULT_INJECTION: forcing a failure. [ 2559.701766] name failslab, interval 1, probability 0, space 0, times 0 [ 2559.704153] CPU: 0 PID: 15371 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2559.705573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2559.707251] Call Trace: [ 2559.707797] dump_stack+0x107/0x167 [ 2559.708554] should_fail.cold+0x5/0xa [ 2559.709351] ? create_object.isra.0+0x3a/0xa20 [ 2559.710285] should_failslab+0x5/0x20 [ 2559.711063] kmem_cache_alloc+0x5b/0x310 [ 2559.711891] ? mark_held_locks+0x9e/0xe0 [ 2559.712741] create_object.isra.0+0x3a/0xa20 [ 2559.713630] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2559.714675] kmem_cache_alloc_bulk+0x168/0x320 [ 2559.715618] io_submit_sqes+0x6f76/0x85c0 [ 2559.716486] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2559.717521] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2559.718525] ? lock_downgrade+0x6d0/0x6d0 [ 2559.719367] ? find_held_lock+0x2c/0x110 [ 2559.720196] ? io_submit_sqes+0x85c0/0x85c0 [ 2559.721101] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2559.722090] ? wait_for_completion_io+0x270/0x270 [ 2559.723070] ? rcu_read_lock_any_held+0x75/0xa0 [ 2559.724013] ? vfs_write+0x354/0xa70 [ 2559.724788] ? fput_many+0x2f/0x1a0 [ 2559.725524] ? ksys_write+0x1a9/0x260 [ 2559.726298] ? __ia32_sys_read+0xb0/0xb0 [ 2559.727132] do_syscall_64+0x33/0x40 [ 2559.727886] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2559.728935] RIP: 0033:0x7fc3c8881b19 [ 2559.729687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.733505] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2559.735037] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2559.736489] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2559.737984] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2559.739466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2559.739568] FAULT_INJECTION: forcing a failure. [ 2559.739568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2559.740911] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 [ 2559.745663] CPU: 1 PID: 15370 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2559.746771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2559.748107] Call Trace: [ 2559.748534] dump_stack+0x107/0x167 [ 2559.749129] should_fail.cold+0x5/0xa [ 2559.749739] _copy_from_user+0x2e/0x1b0 [ 2559.750376] __copy_msghdr_from_user+0x91/0x4b0 [ 2559.751119] ? __ia32_sys_shutdown+0x80/0x80 [ 2559.751822] ? udp_v6_push_pending_frames+0x360/0x360 [ 2559.752630] ? inet6_sendmsg+0xbd/0x140 [ 2559.753252] ? inet6_compat_ioctl+0x320/0x320 [ 2559.753957] ? __sock_sendmsg+0x55/0x190 [ 2559.754583] sendmsg_copy_msghdr+0xa1/0x160 [ 2559.755290] ? do_recvmmsg+0x6d0/0x6d0 [ 2559.755927] ? __lock_acquire+0x1657/0x5b00 [ 2559.756648] ___sys_sendmsg+0xc6/0x170 [ 2559.757239] ? sendmsg_copy_msghdr+0x160/0x160 [ 2559.757832] ? vmacache_find+0x55/0x2a0 [ 2559.758348] ? __lockdep_reset_lock+0x180/0x180 [ 2559.758946] ? lock_acquire+0x197/0x470 [ 2559.759461] ? find_held_lock+0x2c/0x110 [ 2559.759992] ? __might_fault+0xd3/0x180 [ 2559.760503] ? lock_downgrade+0x6d0/0x6d0 [ 2559.761033] ? asm_exc_page_fault+0x1e/0x30 [ 2559.761606] __sys_sendmmsg+0x195/0x470 [ 2559.762118] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2559.762670] ? lock_downgrade+0x6d0/0x6d0 [ 2559.763217] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2559.763842] ? wait_for_completion_io+0x270/0x270 [ 2559.764470] ? rcu_read_lock_any_held+0x75/0xa0 [ 2559.765048] ? vfs_write+0x354/0xa70 [ 2559.765524] ? fput_many+0x2f/0x1a0 [ 2559.765983] ? ksys_write+0x1a9/0x260 [ 2559.766458] ? __ia32_sys_read+0xb0/0xb0 [ 2559.766958] __x64_sys_sendmmsg+0x99/0x100 [ 2559.767494] do_syscall_64+0x33/0x40 [ 2559.767951] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2559.768620] RIP: 0033:0x7f9d069ffb19 [ 2559.769080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.771382] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2559.772366] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2559.773290] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2559.774197] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2559.775101] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2559.776011] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 18:45:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfcfdffff00000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2559.802714] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2559.805500] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:45:28 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r5, 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x10}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x44f7, &(0x7f0000000140)={0x0, 0xaf51, 0x2, 0x3, 0xe4, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) [ 2559.880311] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2559.884170] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:45:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x6400, "dbf57d"}) 18:45:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) [ 2560.105326] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2560.106740] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:45:28 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:45:28 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT=r7, @ANYRES64, @ANYRESHEX, @ANYBLOB, @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x4, r7}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r8, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x4, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2560.240516] FAULT_INJECTION: forcing a failure. [ 2560.240516] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.243047] CPU: 0 PID: 15408 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2560.244511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2560.246196] Call Trace: [ 2560.246740] dump_stack+0x107/0x167 [ 2560.247484] should_fail.cold+0x5/0xa [ 2560.248257] ? create_object.isra.0+0x3a/0xa20 [ 2560.249195] ? create_object.isra.0+0x3a/0xa20 [ 2560.250125] should_failslab+0x5/0x20 [ 2560.250893] kmem_cache_alloc+0x5b/0x310 [ 2560.251710] ? mark_held_locks+0x9e/0xe0 [ 2560.252528] create_object.isra.0+0x3a/0xa20 [ 2560.253439] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2560.254479] kmem_cache_alloc_bulk+0x168/0x320 [ 2560.255404] io_submit_sqes+0x6f76/0x85c0 [ 2560.256276] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2560.257287] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2560.258265] ? lock_downgrade+0x6d0/0x6d0 [ 2560.259101] ? find_held_lock+0x2c/0x110 [ 2560.259930] ? io_submit_sqes+0x85c0/0x85c0 [ 2560.260827] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2560.261809] ? wait_for_completion_io+0x270/0x270 [ 2560.262783] ? rcu_read_lock_any_held+0x75/0xa0 [ 2560.263726] ? vfs_write+0x354/0xa70 [ 2560.264488] ? fput_many+0x2f/0x1a0 [ 2560.265275] ? ksys_write+0x1a9/0x260 [ 2560.266043] ? __ia32_sys_read+0xb0/0xb0 [ 2560.266889] do_syscall_64+0x33/0x40 [ 2560.267649] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2560.268693] RIP: 0033:0x7fc3c8881b19 [ 2560.269452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2560.273199] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2560.274734] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2560.276170] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2560.277620] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2560.279060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2560.280496] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 18:45:48 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') creat(&(0x7f0000000200)='./file1\x00', 0x2) chroot(&(0x7f0000000280)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = getuid() quotactl(0x3, &(0x7f0000000300)='./file2\x00', r1, &(0x7f0000000440)="953ab53f321e3da87aecec6ac389ebb6e362527cd460818292c5db540818cfc40830490129c211d649963a132dfc5cb3ee0aa0562666266a87dcce2e1fbb513c50") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r0, &(0x7f0000000380)="0249e99a7f0211ef77a2e6ddf80889819eecd945439d8a17fd966a028b5a0d7d6da10a8b16bf2bf2b67ed8b591", 0x2d) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000400)) sendfile(r0, r2, 0x0, 0x100000001) 18:45:48 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:45:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfd2f000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:45:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c118, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:45:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x20000, "dbf57d"}) 18:45:48 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x214000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x114, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40004}, 0x4000010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x40}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x20000040) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$inet(r3, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x28c142, 0x12, 0x1}, 0x18) preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000500)=""/57, 0x39}], 0x1, 0x9, 0x9) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x2, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x810) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r3) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf48b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4048080) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x274, 0x0, 0x2, 0x70bd2a, 0x1, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x982}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff329}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x52}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x747c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x10001, @empty, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40045}, 0x0) r7 = eventfd2(0x0, 0x80801) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000c40)=0x7fffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x78, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x486, 0xfffffe01}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c0}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x376}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x156}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800c) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18:45:48 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 12) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:45:48 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "e6a2e51d013042"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004dc80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004de80)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000004e080)={{0x0, 0xfffffffffffffc00, 0x8, 0x800, 0x3, 0xfffffffffffffffa, 0xfb, 0x0, 0x3, 0x4, 0x28c, 0x100000001, 0x7ebb, 0x7288, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f080)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r7}, {}, {}, {r9}, {0x0, r11}, {}, {r12}, {}, {r14}, {}, {r16}], 0x3, "1a902cd26e2993"}) [ 2580.276014] FAULT_INJECTION: forcing a failure. [ 2580.276014] name failslab, interval 1, probability 0, space 0, times 0 [ 2580.278522] CPU: 0 PID: 15435 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2580.279916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2580.281613] Call Trace: [ 2580.282200] dump_stack+0x107/0x167 [ 2580.283007] should_fail.cold+0x5/0xa [ 2580.283785] should_failslab+0x5/0x20 [ 2580.284556] kmem_cache_alloc_bulk+0x4b/0x320 [ 2580.285495] io_submit_sqes+0x6f76/0x85c0 [ 2580.286367] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2580.287370] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2580.288357] ? lock_downgrade+0x6d0/0x6d0 [ 2580.289198] ? find_held_lock+0x2c/0x110 [ 2580.290025] ? io_submit_sqes+0x85c0/0x85c0 [ 2580.290904] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2580.291884] ? wait_for_completion_io+0x270/0x270 [ 2580.292901] ? rcu_read_lock_any_held+0x75/0xa0 [ 2580.293845] ? vfs_write+0x354/0xa70 [ 2580.294607] ? fput_many+0x2f/0x1a0 [ 2580.295347] ? ksys_write+0x1a9/0x260 [ 2580.296119] ? __ia32_sys_read+0xb0/0xb0 [ 2580.296964] do_syscall_64+0x33/0x40 [ 2580.297721] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2580.298751] RIP: 0033:0x7fc3c8881b19 [ 2580.299502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2580.303205] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2580.304740] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2580.306179] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2580.307612] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2580.309067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2580.310521] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 [ 2580.332626] FAULT_INJECTION: forcing a failure. [ 2580.332626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2580.335350] CPU: 1 PID: 15438 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2580.336729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2580.338478] Call Trace: [ 2580.339078] dump_stack+0x107/0x167 [ 2580.339898] should_fail.cold+0x5/0xa [ 2580.340760] _copy_from_user+0x2e/0x1b0 [ 2580.341674] __copy_msghdr_from_user+0x91/0x4b0 [ 2580.342732] ? __ia32_sys_shutdown+0x80/0x80 [ 2580.343727] ? udp_v6_push_pending_frames+0x360/0x360 [ 2580.344898] ? inet6_sendmsg+0xbd/0x140 [ 2580.345791] ? inet6_compat_ioctl+0x320/0x320 [ 2580.346784] ? __sock_sendmsg+0x55/0x190 [ 2580.347701] sendmsg_copy_msghdr+0xa1/0x160 [ 2580.348674] ? do_recvmmsg+0x6d0/0x6d0 [ 2580.349566] ? __lock_acquire+0x1657/0x5b00 [ 2580.350553] ___sys_sendmsg+0xc6/0x170 [ 2580.351432] ? sendmsg_copy_msghdr+0x160/0x160 [ 2580.352468] ? __lockdep_reset_lock+0x180/0x180 [ 2580.353533] ? lock_acquire+0x197/0x470 [ 2580.354398] ? find_held_lock+0x2c/0x110 [ 2580.355246] ? __might_fault+0xd3/0x180 [ 2580.356064] ? lock_downgrade+0x6d0/0x6d0 [ 2580.356929] ? asm_exc_page_fault+0x1e/0x30 [ 2580.357833] __sys_sendmmsg+0x195/0x470 [ 2580.358656] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2580.359524] ? lock_downgrade+0x6d0/0x6d0 [ 2580.360391] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2580.361388] ? wait_for_completion_io+0x270/0x270 [ 2580.362364] ? rcu_read_lock_any_held+0x75/0xa0 [ 2580.363302] ? vfs_write+0x354/0xa70 [ 2580.364058] ? fput_many+0x2f/0x1a0 [ 2580.364794] ? ksys_write+0x1a9/0x260 [ 2580.365573] ? __ia32_sys_read+0xb0/0xb0 [ 2580.366403] __x64_sys_sendmmsg+0x99/0x100 [ 2580.367262] do_syscall_64+0x33/0x40 [ 2580.368025] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2580.369079] RIP: 0033:0x7f9d069ffb19 [ 2580.369825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2580.373590] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2580.375103] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2580.376519] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2580.377942] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2580.379359] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2580.380789] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2580.408038] FAT-fs (loop7): Unrecognized mount option "./file2" or missing value 18:45:49 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:45:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfdfdffff00000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:45:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0xffffff85, "dbf57d"}) 18:45:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 18:45:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8001) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x6) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:45:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1a) openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x4) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x0, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xf88c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)=ANY=[@ANYBLOB="013820231f00000012dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"], 0x27) fstatfs(r0, &(0x7f0000001180)=""/134) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)="ae19e9710b", 0x5, r3}, 0x2b) dup2(r2, r3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000180)={{r5, 0x1, 0x66ad, 0x800, 0x7, 0x7, 0x4a47, 0x7f, 0x200, 0x8, 0x3, 0x1, 0xd376, 0x1f, 0x20}}) [ 2580.777884] FAULT_INJECTION: forcing a failure. [ 2580.777884] name failslab, interval 1, probability 0, space 0, times 0 [ 2580.779758] CPU: 0 PID: 15474 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2580.780830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2580.782144] Call Trace: [ 2580.782567] dump_stack+0x107/0x167 [ 2580.783137] should_fail.cold+0x5/0xa [ 2580.783724] ? create_object.isra.0+0x3a/0xa20 [ 2580.784429] should_failslab+0x5/0x20 [ 2580.785031] kmem_cache_alloc+0x5b/0x310 [ 2580.785657] ? mark_held_locks+0x9e/0xe0 [ 2580.786292] create_object.isra.0+0x3a/0xa20 [ 2580.786958] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2580.787746] kmem_cache_alloc_bulk+0x168/0x320 [ 2580.788441] io_submit_sqes+0x6f76/0x85c0 [ 2580.789131] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2580.789909] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2580.790693] ? lock_downgrade+0x6d0/0x6d0 [ 2580.791332] ? find_held_lock+0x2c/0x110 [ 2580.791979] ? io_submit_sqes+0x85c0/0x85c0 [ 2580.792666] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2580.793439] ? wait_for_completion_io+0x270/0x270 [ 2580.794194] ? rcu_read_lock_any_held+0x75/0xa0 [ 2580.794932] ? vfs_write+0x354/0xa70 [ 2580.795533] ? fput_many+0x2f/0x1a0 [ 2580.796086] ? ksys_write+0x1a9/0x260 [ 2580.796694] ? __ia32_sys_read+0xb0/0xb0 [ 2580.797340] do_syscall_64+0x33/0x40 [ 2580.797903] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2580.798707] RIP: 0033:0x7fc3c8881b19 [ 2580.799281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2580.802092] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2580.803264] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2580.804356] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2580.805484] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2580.806575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2580.807653] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 [ 2580.936663] FAT-fs (loop7): Unrecognized mount option "./file2" or missing value 18:46:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfeffffff00000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:46:06 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 13) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:46:06 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:46:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0xffffffa5, "dbf57d"}) 18:46:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) sendmsg$nl_generic(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x4f0, 0x24, 0x800, 0x70bd2c, 0x25dfdbfd, {0x1e}, [@typed={0x8, 0x73, 0x0, 0x0, @u32=0x9}, @generic="9a4738452895b8e3bdd86179a521d1316a465138c5df4c42571908ec104de50eef272d0e26bdd2968c24797a553e39e35dc98d5a198033744ca9ed896a15a3472382f9", @typed={0x6f, 0x6c, 0x0, 0x0, @binary="69cbfef8c6a5c2c720852b1daac0baeeeb98c21f93aed2869a69fe3d795c5e404b116243457cbd714320225dfa6898d6210a22c2d60d56596c626227ec7ce577c729231618cb946ab6be43e6133a59e4952bc9d1509ad3fe7fdf87f112b69d5db1f4de894214353e10e174"}, @typed={0x14, 0x46, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x335, 0x19, 0x0, 0x1, [@generic="326ea6d03581113bab342ee6bdfc94bb006856a74403592d65f0efb760040f6151fc6561059e67d0b1763b231c1616d5f67960c2d17408", @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@mcast1}, @generic="4c3cc1de87070d2614b2a79eff93d0e11d0479b12b9f9e60b30e1b6fda660cad68c3175005368b911ddf72b2a359", @typed={0x7, 0x49, 0x0, 0x0, @str='(-\x00'}, @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="1ead1c45b850636eda2a7348cc3f66428503ccbff695000588f29041919c8054e0a480aebb6e285ced5c753cef16bd9282dc4c485917b3c9449392760e17ec94469adcb4b65cf3129989f05de7fdb8b7f5bc2a483f0790f7738c9131d33746b456d6d18c14b88a807169453858382c23352ecd07fdb4874d08a2d26509e277b30b52db9def1bb75f184bddfe28cfa0eb5597b7c5716ed4f0b2678665f96d35464d59409eb84739a7f0163ba0511006f30c35dc8bea7735451b93478391efecd6", @generic="6afbcde314c242f1810c4a5bb5638aa9bc13009a03894095a6d95d9991707a8cbfafe6903757c720bf092d9d8cc152d1646220f717c88c632df6e0434192f34f74ade6b0df53c87e012481f3373a73ec56281519f0c8f3aaa6bd19e854ccef1970071917fa4c4e18709bcf4252974c0d4cadb335ce1fb57cfa670cc17e4c71c8e50b79aa629bca2efb744b9048f286e6ee17faa170cf0acc117f44f8214fccde356a01dd9e4eccf9f393fa23c29ace9dfab02ad05615dc20047b3f4b677d19c3f8d0ce0421210722b1ecfaf52d506904cf7b785dcb94575bbf72c8731450057452d67ff90f", @generic="7484c670a51154ba73b0cc9fc61ad90172d2c0b6d6298d4717371ea61c0318270384f945931b39", @generic="ecbc9b74c65253d209b0bdba01f27a6e8a3bbe1f9f576a9c53bd5b63e482b0f8598cf72600d9ee9e96c47b7014811da023ff7e1ed5b378df9e7f43d562d46c782798db7ff229320f3ff0cd9e4720541940651e275484c7862fcc8cadc35c65b8052bb68554748834c517f002297cc4fc7343fc52ff6a0525a0b3a380db10bf6dbdbe4d23c95823ca320caff60ecc9e3e7a687b9a42539951e6877d251c8bd4ca6b076690de0e8a8f144f04671a7d5869d887beb28a190f1a39d1ce43c9621d0f849849b5b37d30c8d88f3cc82d1eba2b"]}, @typed={0x8, 0x94, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="7bc77ce2e1cf2b3b4d11305f115aaaffe3eb05f79444ccbf6bafbfd57d30e6fbac50e5f6d7c32e884bd5e652c57b2273f4055472c663e8427aee26a60451d8d29a0bb5a3833bf732017d0e61a02bfea48ad0b04da06c95d6691b1266594467cc74b5bebacdd0395c3b5a1e7073357d6af4545847033455b443ef5fbcfb5e2420c13c073a820c4c483d827ea5147eb5d152d943d38edee5f48a0b89b62c60e569e24597cf4fbea61d9c1215a2cb7ca4bd6a4622e264f4b4576b316f44e910b33a3a536d3e8c92eee26554b5"]}, 0x4f0}, 0x1, 0x0, 0x0, 0x20048084}, 0x4008800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x81}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 18:46:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8001) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x6) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:46:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfb, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000140)) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x20000, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) 18:46:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) fcntl$dupfd(r0, 0x406, r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f00000000c0)=@v3={0x3000000, [{0x5, 0xff}, {0x8}], r5}, 0x18, 0x0) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROM_DEBUG(r6, 0x5330, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) [ 2597.416143] FAULT_INJECTION: forcing a failure. [ 2597.416143] name failslab, interval 1, probability 0, space 0, times 0 [ 2597.419096] CPU: 0 PID: 15511 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2597.420775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2597.422807] Call Trace: [ 2597.423449] dump_stack+0x107/0x167 [ 2597.424336] should_fail.cold+0x5/0xa [ 2597.425277] ? create_object.isra.0+0x3a/0xa20 [ 2597.426385] should_failslab+0x5/0x20 [ 2597.427429] kmem_cache_alloc+0x5b/0x310 [ 2597.428422] create_object.isra.0+0x3a/0xa20 [ 2597.429510] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2597.430646] kmem_cache_alloc+0x159/0x310 [ 2597.431512] alloc_pid+0xd7/0xd30 [ 2597.432243] copy_process+0x3a8e/0x7800 [ 2597.433055] ? stack_trace_save+0x8c/0xc0 [ 2597.433924] ? stack_trace_consume_entry+0x160/0x160 [ 2597.434976] ? __cleanup_sighand+0xb0/0xb0 [ 2597.435838] ? __lockdep_reset_lock+0x180/0x180 [ 2597.436786] ? lock_acquire+0x197/0x470 [ 2597.437602] ? create_object.isra.0+0x3ad/0xa20 [ 2597.438553] ? lock_release+0x680/0x680 [ 2597.439358] ? find_held_lock+0x2c/0x110 [ 2597.440187] ? io_wqe_dec_running+0x220/0x220 [ 2597.441113] create_io_thread+0xb6/0xf0 [ 2597.441922] ? pidfd_pid+0x90/0x90 [ 2597.442643] ? mark_held_locks+0x9e/0xe0 [ 2597.443470] ? io_wqe_dec_running+0x220/0x220 [ 2597.444393] ? __init_swait_queue_head+0xc6/0x150 [ 2597.445384] create_io_worker+0x23a/0x620 [ 2597.446229] io_wqe_enqueue+0x69e/0xbe0 [ 2597.447041] ? create_worker_cb+0x260/0x260 [ 2597.447918] ? io_wq_hash_work+0xd/0x60 [ 2597.448729] ? io_prep_async_work+0x21b/0x540 [ 2597.449659] io_queue_async_work+0x26b/0x4f0 [ 2597.450558] __io_queue_sqe+0x5cc/0x9d0 [ 2597.451370] ? io_issue_sqe+0x7700/0x7700 [ 2597.452215] ? io_prep_rw+0x7f5/0x1050 [ 2597.453011] io_submit_sqes+0x4461/0x85c0 [ 2597.453891] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2597.454899] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2597.455879] ? lock_downgrade+0x6d0/0x6d0 [ 2597.456714] ? find_held_lock+0x2c/0x110 [ 2597.457565] ? io_submit_sqes+0x85c0/0x85c0 [ 2597.458451] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2597.459433] ? wait_for_completion_io+0x270/0x270 [ 2597.460411] ? rcu_read_lock_any_held+0x75/0xa0 [ 2597.461359] ? vfs_write+0x354/0xa70 [ 2597.462117] ? fput_many+0x2f/0x1a0 [ 2597.462854] ? ksys_write+0x1a9/0x260 [ 2597.463626] ? __ia32_sys_read+0xb0/0xb0 [ 2597.464464] do_syscall_64+0x33/0x40 [ 2597.465229] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2597.466266] RIP: 0033:0x7fc3c8881b19 [ 2597.467021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2597.470754] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2597.472292] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2597.473741] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2597.475180] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2597.476617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2597.478068] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 [ 2597.544512] FAULT_INJECTION: forcing a failure. [ 2597.544512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2597.547164] CPU: 1 PID: 15521 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2597.548581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2597.550277] Call Trace: [ 2597.550831] dump_stack+0x107/0x167 [ 2597.551576] should_fail.cold+0x5/0xa [ 2597.552359] _copy_from_user+0x2e/0x1b0 [ 2597.553206] __copy_msghdr_from_user+0x91/0x4b0 [ 2597.554150] ? __ia32_sys_shutdown+0x80/0x80 [ 2597.555046] ? udp_v6_push_pending_frames+0x360/0x360 [ 2597.556094] ? inet6_sendmsg+0xbd/0x140 [ 2597.556905] ? inet6_compat_ioctl+0x320/0x320 [ 2597.557829] ? __sock_sendmsg+0x55/0x190 [ 2597.558660] sendmsg_copy_msghdr+0xa1/0x160 [ 2597.559533] ? do_recvmmsg+0x6d0/0x6d0 [ 2597.560328] ? __lock_acquire+0x1657/0x5b00 [ 2597.561225] ___sys_sendmsg+0xc6/0x170 [ 2597.562017] ? sendmsg_copy_msghdr+0x160/0x160 [ 2597.562949] ? __lockdep_reset_lock+0x180/0x180 [ 2597.563888] ? trace_hardirqs_on+0x5b/0x180 [ 2597.564773] ? lock_acquire+0x197/0x470 [ 2597.565591] ? find_held_lock+0x2c/0x110 [ 2597.566422] ? __might_fault+0xd3/0x180 [ 2597.567228] ? lock_downgrade+0x6d0/0x6d0 [ 2597.568072] ? io_schedule_timeout+0x140/0x140 [ 2597.569014] __sys_sendmmsg+0x195/0x470 [ 2597.569847] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2597.570721] ? lock_downgrade+0x6d0/0x6d0 [ 2597.571577] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2597.572557] ? wait_for_completion_io+0x270/0x270 [ 2597.573543] ? rcu_read_lock_any_held+0x75/0xa0 [ 2597.574482] ? vfs_write+0x354/0xa70 [ 2597.575241] ? fput_many+0x2f/0x1a0 [ 2597.575984] ? ksys_write+0x1a9/0x260 [ 2597.576756] ? __ia32_sys_read+0xb0/0xb0 [ 2597.577596] __x64_sys_sendmmsg+0x99/0x100 [ 2597.578455] do_syscall_64+0x33/0x40 [ 2597.579212] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2597.580249] RIP: 0033:0x7f9d069ffb19 [ 2597.581006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2597.584749] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2597.586298] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2597.587738] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2597.589191] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2597.590631] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2597.592072] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2597.630052] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2597.636250] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:46:06 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x107142, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x18000, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pata_amd', 0x40000, 0x10) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000dde916be5b0ea5914c31f09d25e7b7fdbe50169e32ba8e556b2184b9a26464461c89d56d33b2fa23a3a18611b4817987e2c5055a74a4b1cfdfa1c4099784fd8c8ece40588d6d4143fce5f766583588049508c0374aca30c05c1c5005ff518effa6ef5f87f7eeb3de9e0798580b90405825a3193e01c950d792f97006a0bbda5ce40db30d810ea7b5bd138f78667b21d99c8a", @ANYRES16=r2, @ANYBLOB="210300000000000000000b00000004000180"], 0x18}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x4000, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) unshare(0x48020200) 18:46:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xff0f000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:46:06 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:46:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x142, 0x93, 0xf}, 0xfffffffffffffd78) close(r1) 18:46:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40104593, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x14b2, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x13, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/26) 18:46:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 18:46:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0xffffffb8, "dbf57d"}) [ 2597.952717] FAULT_INJECTION: forcing a failure. [ 2597.952717] name failslab, interval 1, probability 0, space 0, times 0 [ 2597.955360] CPU: 0 PID: 15551 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2597.956850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2597.958582] Call Trace: [ 2597.959132] dump_stack+0x107/0x167 [ 2597.959895] should_fail.cold+0x5/0xa [ 2597.960695] ? create_object.isra.0+0x3a/0xa20 [ 2597.961647] should_failslab+0x5/0x20 [ 2597.962414] kmem_cache_alloc+0x5b/0x310 [ 2597.963267] ? mark_held_locks+0x9e/0xe0 [ 2597.964103] create_object.isra.0+0x3a/0xa20 [ 2597.964991] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2597.966040] kmem_cache_alloc_bulk+0x168/0x320 [ 2597.966971] io_submit_sqes+0x6f76/0x85c0 [ 2597.967850] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2597.968901] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2597.970039] ? lock_downgrade+0x6d0/0x6d0 [ 2597.970896] ? find_held_lock+0x2c/0x110 [ 2597.971738] ? io_submit_sqes+0x85c0/0x85c0 [ 2597.972646] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2597.973684] ? wait_for_completion_io+0x270/0x270 [ 2597.974751] ? rcu_read_lock_any_held+0x75/0xa0 [ 2597.975728] ? vfs_write+0x354/0xa70 [ 2597.976508] ? fput_many+0x2f/0x1a0 [ 2597.977259] ? ksys_write+0x1a9/0x260 [ 2597.978054] ? __ia32_sys_read+0xb0/0xb0 [ 2597.978911] do_syscall_64+0x33/0x40 [ 2597.979688] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2597.980744] RIP: 0033:0x7fc3c8881b19 [ 2597.981516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2597.985322] RSP: 002b:00007fc3c5df7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2597.986900] RAX: ffffffffffffffda RBX: 00007fc3c8994f60 RCX: 00007fc3c8881b19 [ 2597.988367] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2597.989837] RBP: 00007fc3c5df71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2597.991307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2597.992768] R13: 00007fff85cad04f R14: 00007fc3c5df7300 R15: 0000000000022000 [ 2598.018339] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2598.021172] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:46:06 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x464, 0x8, 0x70bd28, 0x25dfdbfb, "a105e5af1463cbecd5006d9be9aca15f0202b4c8bfd9c23f176526ea1ff8dd3efc95b0e89edf469f70712b06ba3a7b61e1e62e94c5637e4c52e9a9b38f526031768b5a6f41b8835c882c4ad3689686", ["", "", "", "", "", ""]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x40000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) 18:46:22 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:46:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000100)={0x0, 0x1000}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000020c0)={{r2, 0x8, 0xfb, 0x80000001, 0x40, 0x4, 0xfffffffffffffff7, 0x3f, 0x5, 0x6, 0x8e, 0x7, 0x9, 0xffffffff, 0xb2}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052900)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x81, "d5e2b485aca084"}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@dev}]}]}, 0x28}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f00000010c0)=""/4080, 0xff0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000003f80)=0x20000000, 0x4) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) 18:46:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x480c01) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:46:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffdffff00000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:46:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) readv(r2, &(0x7f0000000fc0)=[{&(0x7f0000000040)=""/194, 0xc2}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000300)=""/133, 0x85}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/137, 0x89}], 0x6) 18:46:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x13c, 0x18, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1}, @in6=@private1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newspdinfo={0x2c, 0x24, 0x8507a0f9722935d5, 0x70bd2b, 0x25dfdbfd, 0x4ce41be9, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x2c}}, 0x5) 18:46:22 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:46:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x95c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller0\x00'}) close(r0) [ 2613.677413] FAULT_INJECTION: forcing a failure. [ 2613.677413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2613.678890] CPU: 0 PID: 15589 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2613.679732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2613.680735] Call Trace: [ 2613.681069] dump_stack+0x107/0x167 [ 2613.681508] should_fail.cold+0x5/0xa [ 2613.681975] _copy_from_user+0x2e/0x1b0 [ 2613.682447] __copy_msghdr_from_user+0x91/0x4b0 [ 2613.682992] ? __ia32_sys_shutdown+0x80/0x80 [ 2613.683537] ? udp_v6_push_pending_frames+0x360/0x360 [ 2613.684179] ? inet6_sendmsg+0xbd/0x140 [ 2613.684686] ? inet6_compat_ioctl+0x320/0x320 [ 2613.685245] ? __sock_sendmsg+0x55/0x190 [ 2613.685770] sendmsg_copy_msghdr+0xa1/0x160 [ 2613.686310] ? do_recvmmsg+0x6d0/0x6d0 [ 2613.686801] ? __lock_acquire+0x1657/0x5b00 [ 2613.687342] ___sys_sendmsg+0xc6/0x170 [ 2613.687828] ? sendmsg_copy_msghdr+0x160/0x160 [ 2613.688396] ? vmacache_find+0x55/0x2a0 [ 2613.688871] ? __lockdep_reset_lock+0x180/0x180 [ 2613.689465] ? lock_acquire+0x197/0x470 [ 2613.689960] ? find_held_lock+0x2c/0x110 [ 2613.690476] ? __might_fault+0xd3/0x180 [ 2613.690972] ? lock_downgrade+0x6d0/0x6d0 [ 2613.691498] ? asm_exc_page_fault+0x1e/0x30 [ 2613.692048] __sys_sendmmsg+0x195/0x470 [ 2613.692547] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2613.693086] ? lock_downgrade+0x6d0/0x6d0 [ 2613.693632] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2613.694238] ? wait_for_completion_io+0x270/0x270 [ 2613.694843] ? rcu_read_lock_any_held+0x75/0xa0 [ 2613.695419] ? vfs_write+0x354/0xa70 [ 2613.695882] ? fput_many+0x2f/0x1a0 [ 2613.696337] ? ksys_write+0x1a9/0x260 [ 2613.696808] ? __ia32_sys_read+0xb0/0xb0 [ 2613.697320] __x64_sys_sendmmsg+0x99/0x100 [ 2613.697849] do_syscall_64+0x33/0x40 [ 2613.698308] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2613.698917] RIP: 0033:0x7f9d069ffb19 [ 2613.699381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2613.701671] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2613.702615] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2613.703495] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2613.704333] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2613.705230] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2613.706124] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2613.743999] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2613.767149] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2613.773741] mac80211_hwsim hwsim14 wlan1: refused to change device tx_queue_len 18:46:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x40, 0x0, 0xa2, 0x40, 0x0, 0x94b, 0x0, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x7, 0x7fff}, 0x50108, 0x800, 0x9, 0x3, 0x3, 0x1, 0x3, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xe, r1, 0x1) close(r0) [ 2613.846799] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2613.854384] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2613.871687] mac80211_hwsim hwsim14 wlan1: refused to change device tx_queue_len 18:46:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffff1f0000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2613.905513] scsi_io_completion_action: 125 callbacks suppressed [ 2613.905610] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2613.909775] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2613.911315] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2613.912740] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 10 00 [ 2613.914565] print_req_error: 125 callbacks suppressed [ 2613.914584] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 2613.920357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2613.921569] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2613.923592] Buffer I/O error on dev sr0, logical block 0, async page read [ 2613.926533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2613.928127] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2613.930153] Buffer I/O error on dev sr0, logical block 1, async page read [ 2613.933470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2613.934634] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2613.936882] Buffer I/O error on dev sr0, logical block 2, async page read [ 2613.942495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2613.943670] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2613.945791] Buffer I/O error on dev sr0, logical block 3, async page read [ 2613.947713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2613.948879] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2613.950968] Buffer I/O error on dev sr0, logical block 4, async page read [ 2613.952477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2613.953632] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 2613.955636] Buffer I/O error on dev sr0, logical block 5, async page read [ 2613.957067] Buffer I/O error on dev sr0, logical block 6, async page read [ 2613.958505] Buffer I/O error on dev sr0, logical block 7, async page read 18:46:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffff7f00000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:46:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) lseek(r1, 0x9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 18:46:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:46:22 executing program 0: lstat(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2033}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x0, 0xfffffffffffffffb, 0x38, 0x1, @scatter={0x8, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000080)=""/150, 0x96}, {&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000f00)=""/242, 0xf2}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000001000)=""/190, 0xbe}]}, &(0x7f00000010c0)="aef3df6868f98276a930484f2ef957dce3d4458189e1c9738f4626c66800ea7277ec5645c8f689f71b6561f2790b4b34f505cb586c626eea", &(0x7f0000001100)=""/95, 0x9, 0x1, 0x1, &(0x7f0000001180)}) r3 = memfd_create(&(0x7f0000001240)='\'@#\x00', 0x6) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x200) fcntl$setown(r4, 0x8, 0x0) 18:46:22 executing program 1: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0xfe) r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000780)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r3, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@hci={0x1f, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000280)}, {&(0x7f00000003c0)="b3c018d855a1667c1d2bd1db4252f407e00a1e0f0db382a3d620330e13bea32f549623df6de4d26a92a323ea654db808dc3210d75a01560b67b209c9ca319c5c3279e56b11e239fbea133faf6d478a0897d7fad9d5f816b1d6de90bfc22408afd8de5fc7b2f02956920da446adf97b26498221e0", 0x74}, {&(0x7f0000000440)="2111e2b0d0f44bec7b9d0c8a6230f829e8961a96c49406addf4d908bad9179f6f29543d1fe6d9efcd4e155bfc0e1826d64d0441fab9cbd2c53fe6d1c67cf3cd2d78c1b443c57176819d32e01bad9b78a4a5142062daf973c1ecdb21e1ae85f9d97f3414e17f350e50c39b6c6b1a990a12b116271fbd320fce7842f8d8e5691ace762b75d5e08f19372497778ddad490863325a48960dcad88c0c017d03b204a676af472b55bdc1b86199fa9a3e547bd68effe276e0b856ab759b956c88599a23d6efe8308839410040335893d2aa3459699f1d1fd90355baf60dc59b7533f1c3581b5b34ea468f074d53c1eb3137c33a926a90", 0xf3}, {0x0}, {&(0x7f0000000580)="0e4061cd0fbe95e9b9e9e5d4847a3b8505978c4505ae2ad49ec0c07e083471020daba6ae62441a1750d3ab6b261d1bd78fc77276483ea9971e8a39bb1da02fc6d5fb0ec8c969a615a4c1b81a27457d066c2abbba560dc1f73f8c7091345c0dabe697ea97e6dc238542ab46001d2e33ba0a31e37569ec127d6b19b2e1daf1c027b046b7bb9f80bb39cb680ea88a2b89f61a63e7ce214e02558c5712d7bf241be62015fca7fb852d960cdccba315f9f3594e8403082e237ab0208ffb", 0xbb}], 0x5, &(0x7f0000001e00)=[{0x50, 0xff, 0x1, "c0ed9d91c0ca77b4092cdc2e83e096c946fa4467763077d5b9e102be5f13ca0131689aa49d4ca4d0056683caa0dfa95335e76cc732e246232eb465ed"}, {0xfd0, 0x0, 0x5, "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"}, {0x100, 0x1, 0x101, "bd15b7b48269c2ee6339ee6515aac944480ce5fad19a0818c7350da9d0b6c42717157be2d49413710299ae736d78f71022159a8f9f1934ac7afe84391208ede6854f8f390cf76077526b9753f47b997397733c4cd9d11daf1bfa70a8d123d835457e41bff4970b1ff471d6df0a596879248407d49f17087694b116e73730f257d51d3f3d0b39f44f9563166943a23cb549e3aa843f00d8d91b753e5d2e0d9b65a54073af9aed375c5779ce793b442bc52f2de404293eb035651d361b449542f961aa28535f7aa38b2d3b2c63cb0df006e1b0efed4115d7dc8e9ed0b572ff7c3125a8bdc2d36f0f86234d"}, {0x10, 0x0, 0xffffffff}], 0x1130}, 0x0, 0x40004, 0x1}, 0x1) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000540)={0xfbd, 0x1f, 0xf74, 0x0, 0x6b, "a8b13ef6b3eafae0e16938c5c63f8c2eba6096", 0x1, 0x7}) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000640)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r3, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x20) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "f81af11f72f735cf", "6cea1bf8668f6981e6ffbe1d93b2e6acbba6f69e4bffab9659f93f0f8f314ecd", "84e4ce92", "017f3d96eeaac022"}, 0x38) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:46:23 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2614.372301] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2614.374844] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2614.427532] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2614.433117] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:46:38 executing program 0: sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40000040) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x400010e, 0xc000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r5, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r6, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r6}, 0x68) ioctl$DVD_AUTH(r6, 0x5390, &(0x7f00000001c0)=@hrpcs={0xb, 0x6c}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r5}, 0x68) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x56283) poll(&(0x7f0000000140)=[{r0, 0x20}, {r4, 0x2400}, {r5, 0x8}, {r7, 0x88}], 0x4, 0x80000000) 18:46:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x26, 0x100, 0x70bd26, 0x25dfdbfb, {0x5}, [@typed={0xc, 0x5c, 0x0, 0x0, @u64=0x1ff}, @typed={0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x200400d4) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x7f, 0xc1, 0x81, 0x94, 0x0, 0x3, 0x11, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000002c0), 0xb}, 0x40002, 0x3, 0x439f, 0x2, 0x1f, 0x3f, 0x6, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r2, 0x8) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x4, 0x9, 0x81, 0x0, 0x7, 0x20000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x8, 0x4, 0x1, 0x0, 0x4, 0x1, 0xf0d0, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0xa}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x2404c0c1}, 0x1) close(r1) 18:46:38 executing program 1: lstat(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2033}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x0, 0xfffffffffffffffb, 0x38, 0x1, @scatter={0x8, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000080)=""/150, 0x96}, {&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000f00)=""/242, 0xf2}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000001000)=""/190, 0xbe}]}, &(0x7f00000010c0)="aef3df6868f98276a930484f2ef957dce3d4458189e1c9738f4626c66800ea7277ec5645c8f689f71b6561f2790b4b34f505cb586c626eea", &(0x7f0000001100)=""/95, 0x9, 0x1, 0x1, &(0x7f0000001180)}) r3 = memfd_create(&(0x7f0000001240)='\'@#\x00', 0x6) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x200) fcntl$setown(r4, 0x8, 0x0) 18:46:38 executing program 7: mq_notify(0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x422902, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/video', 0x0, 0x144) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x260d01, 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '/dev/sr0\x00'}, {0x20, '/dev/sr0\x00'}, {0x20, '+'}, {0x20, '/dev/sr0\x00'}, {0x20, '\xfe'}, {}, {0x20, '$--'}], 0xa, "cef7071a4b8260b7e7fcc38f7fb1cc1304a2a8f691cc1138869a2a9a304ac103ba7df14cfbc3a28f6dd87068868b1f8305be8fa5f1de5b10c620206fd6fb887c053b772c533008e0d42af77ae8a19d951d661b202dc16e7143680bd36dff441883a856210a1caefcfb94535d74198b9397b5189b494af9454e70adb8c7aa363f65367a13d2eb832b6589a8e4c263da20825f0b8554f18bac0b092f46e101dfb6b4d26e296f767ccb75f70b7884cd3bd5763c51c11f5870572642e1570de5da"}, 0xf2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)=ANY=[@ANYBLOB="013830230000000012dbe6b4d124ee9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x40, 0x38, 0xf8, 0x4, 0x0, 0x6, 0x98802, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7c, 0x1, @perf_bp={&(0x7f0000000240)}, 0x401d, 0x10000, 0x10000, 0x5, 0x9, 0x8, 0x0, 0x0, 0x101, 0x0, 0x4}, 0x0, 0xa, r3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/ieee802154', 0x2a9800, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)={0x95c, 0x98, 0x2, 0x6, 0x9, 0x4}) dup3(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000fea000/0x13000)=nil, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x400010e, 0xc000) dup3(r4, r1, 0x80000) 18:46:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffffff00000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:46:38 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 15) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:46:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$CDROMRESUME(r3, 0x5302) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:46:38 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2629.875396] FAULT_INJECTION: forcing a failure. [ 2629.875396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2629.877054] CPU: 1 PID: 15677 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2629.877952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2629.878999] Call Trace: [ 2629.879338] dump_stack+0x107/0x167 [ 2629.879811] should_fail.cold+0x5/0xa [ 2629.880296] _copy_from_user+0x2e/0x1b0 [ 2629.880803] __copy_msghdr_from_user+0x91/0x4b0 [ 2629.881395] ? __ia32_sys_shutdown+0x80/0x80 [ 2629.881969] ? udp_v6_push_pending_frames+0x360/0x360 [ 2629.882625] ? inet6_sendmsg+0xbd/0x140 [ 2629.883126] ? inet6_compat_ioctl+0x320/0x320 [ 2629.883687] ? __sock_sendmsg+0x55/0x190 [ 2629.884212] sendmsg_copy_msghdr+0xa1/0x160 [ 2629.884752] ? do_recvmmsg+0x6d0/0x6d0 [ 2629.885249] ? __lock_acquire+0x1657/0x5b00 [ 2629.885830] ___sys_sendmsg+0xc6/0x170 [ 2629.886346] ? sendmsg_copy_msghdr+0x160/0x160 [ 2629.886925] ? vmacache_find+0x55/0x2a0 [ 2629.887453] ? __lockdep_reset_lock+0x180/0x180 [ 2629.888050] ? lock_acquire+0x197/0x470 [ 2629.888578] ? find_held_lock+0x2c/0x110 [ 2629.889094] ? __might_fault+0xd3/0x180 [ 2629.889635] ? lock_downgrade+0x6d0/0x6d0 [ 2629.890167] ? asm_exc_page_fault+0x1e/0x30 [ 2629.890745] __sys_sendmmsg+0x195/0x470 [ 2629.891257] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2629.891829] ? lock_downgrade+0x6d0/0x6d0 [ 2629.892368] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2629.893028] ? wait_for_completion_io+0x270/0x270 [ 2629.893659] ? rcu_read_lock_any_held+0x75/0xa0 [ 2629.894262] ? vfs_write+0x354/0xa70 [ 2629.894756] ? fput_many+0x2f/0x1a0 [ 2629.895233] ? ksys_write+0x1a9/0x260 [ 2629.895726] ? __ia32_sys_read+0xb0/0xb0 [ 2629.896263] __x64_sys_sendmmsg+0x99/0x100 [ 2629.896814] do_syscall_64+0x33/0x40 [ 2629.897301] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2629.897986] RIP: 0033:0x7f9d069ffb19 [ 2629.898467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2629.900833] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2629.901824] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2629.902744] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2629.903623] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2629.904536] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2629.905424] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2629.928303] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2629.930619] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:46:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:46:38 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/37) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) dup2(r2, 0xffffffffffffffff) r4 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001a00210c00000000000000000a00000005000000000000000000000100200000000000000000000000000000ddd000b0daff9e482e727837b965fbd789c2831b52714a96c8046a30b2df41f3d283e1a80533fb2089a08b834c1867711746bb7daaadbdd2366c", @ANYRES16=r1, @ANYRES64], 0x30}}, 0x4004000) io_setup(0x9, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1c5, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x1}, &(0x7f00000001c0)) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7f, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe7, 0x2, 0x3, 0x45, 0x0, 0x3e0, 0x400, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0xa61696f71a8af468, @perf_config_ext={0x3, 0x41d9}, 0x40844, 0x1, 0x100, 0x3, 0x1f, 0x6, 0x7, 0x0, 0x80000000, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) 18:46:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 18:46:38 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x80) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x38}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001e00)={0x0, "f123c9690cb38423481519cea0c62e27"}) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)={{0x107, 0x39, 0x3, 0x3cf, 0x29e, 0x9, 0x109, 0x2}, "daec8304be2b43a91aad0d692d9a551285b2e136781a31a9a8635a97d3a21d5ae9d13fd7c1d0dc3a3ecc5164b5044057bedc7c6dc8fd88c315a46d93035763784c310c308d031cfa92134285186866e142889bc951f33258e70f24d93e9103"}, 0x7f) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x6, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) 18:46:38 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x808050, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="c65f91d96e2115e41007ac22da286c8ccee7034bef072fa24004c9eadbfef8e0eba357c25440693cc5a49a2a58cae44e5c526eb84ce76adceb7e053bc99eb091cddd3e2971bdfc11103f43dd7d50d00a53a95807d709308fd419f4edc1fb03eeed2c0dfa48070cb5d01a3c22fae7b26f016fbe2e58078858cf309a7467a2938dfe69f886c9e10310a8a244b51ea4569421e568", 0x93, 0x2}, {&(0x7f0000000200)="0a4477ff11fa3d85afc0187f60f4519abcc08a0dd46cb412c3dd0baa519db534d00111a33949755a", 0x28, 0x1}], 0x100081, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c73686f72746e616d653d8cae81031a3c4d8d81893777696e39352c646f6e745f686173682c736d61636b66737472616e736d7574653d69736f39363630002c7063723d30303030303030303030303030303030303031322c006361afee3fb3ec3c45be31fdb63256c7d8ba127cb85d5fc9cb50465824e63549bccaecebd81663c806fbabac64829f83509ad8617faa9d85cb"]) chroot(&(0x7f0000000280)='./file0\x00') 18:46:38 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2630.163327] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 18:46:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400010e, 0xc000) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0) close(r0) [ 2630.217570] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 18:46:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2630.265371] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2630.269193] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2630.706023] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:46:52 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x183fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"ca832b60e193cf2c97bd93202b8a40db", 0x0, 0x0, {0x3, 0x85c}, {0x100, 0x7}, 0x952a12f, [0x1, 0x4000000, 0xc2b, 0x6, 0x200, 0x2, 0x2, 0xfffffffffffffffe, 0x4, 0x81, 0x101, 0x1f, 0x2, 0x100000001, 0x9, 0x3c8136e0]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001e00)={{r0}, r2, 0x10, @inherit={0x50, &(0x7f0000000140)={0x0, 0x1, 0x3, 0xffffffffffffff01, {0x0, 0x7, 0x0, 0x3ff}, [0x100000000]}}, @subvolid=0xa78c}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0x0, 0x400040}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001040), 0x2000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r5 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001080)=[0xffffffffffffffff, r4, 0xffffffffffffffff], 0x3) openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x81) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="03000000000000003d96a118f2572e2f6367726f75702f6367726f75702e70726f63732f2e2e2f"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r6, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r6}, 0x68) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) 18:46:52 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x808050, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="c65f91d96e2115e41007ac22da286c8ccee7034bef072fa24004c9eadbfef8e0eba357c25440693cc5a49a2a58cae44e5c526eb84ce76adceb7e053bc99eb091cddd3e2971bdfc11103f43dd7d50d00a53a95807d709308fd419f4edc1fb03eeed2c0dfa48070cb5d01a3c22fae7b26f016fbe2e58078858cf309a7467a2938dfe69f886c9e10310a8a244b51ea4569421e568", 0x93, 0x2}, {&(0x7f0000000200)="0a4477ff11fa3d85afc0187f60f4519abcc08a0dd46cb412c3dd0baa519db534d00111a33949755a", 0x28, 0x1}], 0x100081, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c73686f72746e616d653d8cae81031a3c4d8d81893777696e39352c646f6e745f686173682c736d61636b66737472616e736d7574653d69736f39363630002c7063723d30303030303030303030303030303030303031322c006361afee3fb3ec3c45be31fdb63256c7d8ba127cb85d5fc9cb50465824e63549bccaecebd81663c806fbabac64829f83509ad8617faa9d85cb"]) chroot(&(0x7f0000000280)='./file0\x00') 18:46:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:46:52 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x0, 0xf9b, 0x5, 0x1, 0x0, 0x1000}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xf3cf, 0x2) pidfd_getfd(0xffffffffffffffff, r2, 0x0) close(r0) 18:46:52 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101800) pidfd_send_signal(r0, 0x14, &(0x7f0000000040)={0x2e, 0x9, 0x9}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000400000004009d00dbf57d"]) 18:46:52 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 16) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:46:52 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:46:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2644.218592] FAULT_INJECTION: forcing a failure. [ 2644.218592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2644.219516] FAT-fs (loop6): Directory bread(block 3) failed [ 2644.221243] CPU: 1 PID: 15751 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2644.223106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2644.223781] FAT-fs (loop6): Directory bread(block 4) failed [ 2644.224838] Call Trace: [ 2644.224863] dump_stack+0x107/0x167 [ 2644.224889] should_fail.cold+0x5/0xa [ 2644.227564] _copy_from_user+0x2e/0x1b0 [ 2644.228396] FAT-fs (loop6): Directory bread(block 5) failed [ 2644.228415] __copy_msghdr_from_user+0x91/0x4b0 [ 2644.228438] ? __ia32_sys_shutdown+0x80/0x80 [ 2644.231022] ? udp_v6_push_pending_frames+0x360/0x360 [ 2644.231046] ? inet6_sendmsg+0xbd/0x140 [ 2644.231066] ? inet6_compat_ioctl+0x320/0x320 [ 2644.231082] ? __sock_sendmsg+0x55/0x190 [ 2644.231108] sendmsg_copy_msghdr+0xa1/0x160 [ 2644.231127] ? do_recvmmsg+0x6d0/0x6d0 [ 2644.231151] ? __lock_acquire+0x1657/0x5b00 [ 2644.231182] ___sys_sendmsg+0xc6/0x170 [ 2644.231204] ? sendmsg_copy_msghdr+0x160/0x160 [ 2644.231220] ? vmacache_find+0x55/0x2a0 [ 2644.231242] ? __lockdep_reset_lock+0x180/0x180 [ 2644.231269] ? lock_acquire+0x197/0x470 [ 2644.231286] ? find_held_lock+0x2c/0x110 [ 2644.231310] ? __might_fault+0xd3/0x180 [ 2644.231329] ? lock_downgrade+0x6d0/0x6d0 [ 2644.231347] ? asm_exc_page_fault+0x1e/0x30 [ 2644.231384] __sys_sendmmsg+0x195/0x470 18:46:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:46:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) [ 2644.231408] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2644.231427] ? lock_downgrade+0x6d0/0x6d0 [ 2644.231464] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2644.231488] ? wait_for_completion_io+0x270/0x270 [ 2644.231510] ? rcu_read_lock_any_held+0x75/0xa0 [ 2644.231528] ? vfs_write+0x354/0xa70 [ 2644.231550] ? fput_many+0x2f/0x1a0 [ 2644.231570] ? ksys_write+0x1a9/0x260 [ 2644.231589] ? __ia32_sys_read+0xb0/0xb0 [ 2644.231616] __x64_sys_sendmmsg+0x99/0x100 [ 2644.231638] do_syscall_64+0x33/0x40 [ 2644.231660] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2644.231673] RIP: 0033:0x7f9d069ffb19 [ 2644.231693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2644.231703] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 18:46:53 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6143, 0x20) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x18000, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pata_amd', 0x40000, 0x10) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100005c412e00a83caad9000000000912", @ANYRES16=r2, @ANYBLOB="210300000000000000000b00000004000180"], 0x18}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x400010e, 0xc000) sendfile(r3, r4, 0x0, 0x7ff) unshare(0x48020200) [ 2644.231724] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2644.231736] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2644.231747] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2644.231758] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 18:46:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x3, 0x4, 0x1, 0x0, 0x9, 0x2808, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x2}, 0x42083, 0x3, 0x5505, 0x9, 0x6, 0x2, 0x9, 0x0, 0x8, 0x0, 0x1}, r2, 0xa, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000440)=ANY=[]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x7f, 0x7f}, {0xec, 0x6}], r6}, 0x18, 0x2) socketpair(0x37, 0x80004, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f00000000c0)=0x19aa, 0x2) [ 2644.231770] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2644.232848] FAT-fs (loop6): Directory bread(block 6) failed [ 2644.232863] FAT-fs (loop6): Directory bread(block 7) failed [ 2644.233144] FAT-fs (loop6): Directory bread(block 8) failed [ 2644.233301] FAT-fs (loop6): Directory bread(block 9) failed [ 2644.272863] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2644.275313] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:46:53 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:46:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)='\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 18:46:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="0200000001", 0x1, 0x1000}], 0x2000000, &(0x7f0000013a00)) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4003, 0x0) [ 2644.530501] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2644.578648] FAT-fs (loop6): Directory bread(block 3) failed [ 2644.582491] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2644.583376] FAT-fs (loop6): Directory bread(block 4) failed [ 2644.595245] FAT-fs (loop6): Directory bread(block 5) failed [ 2644.603070] FAT-fs (loop6): Directory bread(block 6) failed [ 2644.603659] FAT-fs (loop6): Directory bread(block 7) failed [ 2644.604424] FAT-fs (loop6): Directory bread(block 8) failed [ 2644.607036] FAT-fs (loop6): Directory bread(block 9) failed [ 2644.616504] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2644.619788] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:46:53 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3b) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)=' ', 0x1}], 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') readv(r1, &(0x7f0000000280), 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) 18:46:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:46:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0xfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 18:46:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)=ANY=[@ANYBLOB="093820230000000012dbe6b4d124ef9d0ed8947ff4cc2517873fedb0a7c719ecc8517d48c2b42c"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x43, 0x4, 0x2, "d3c34a28a58c856912b1012298efc30004a19b59a55f2b5b83dcfba23969101bda387ee8c37778a85096dd6851b1ab4c8bb6f6e5b8832145d374dfa9cfae7ba031f4cd"}) 18:46:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7, 0x3, 0x81, 0x1, 0x0, 0xc0000, 0x408, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x53b, 0x2, @perf_config_ext={0x7, 0x80000000}, 0x40, 0x8, 0x6, 0x7, 0x1, 0xe4d, 0x200, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xf, r0, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1, &(0x7f00000002c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x1, 0x2001, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000340)={0x99, 0x1f, 0x6, "0c100b40a5d4040a3d841ef5098623f1affb82fbea0db622fb9e2e3c9051d1fdcf932bca753b943835f602bb7b0b4b6be156ae1573bfe14f7d7b3db5a3289762a479b860af1d9d124cee45f5ccc915cba148c36b69462550e3258619290473ab4386c3e9730c96fb887fc0e06ec03aa1207812daf635650f40528c01aa8ab18ea936e232318da29e7efb94b909e16656bc467e9e233d5c7453"}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x3f, 0x1) [ 2644.804339] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2644.956532] FAT-fs (loop6): Directory bread(block 3) failed [ 2644.957316] FAT-fs (loop6): Directory bread(block 4) failed [ 2644.957955] FAT-fs (loop6): Directory bread(block 5) failed [ 2644.958543] FAT-fs (loop6): Directory bread(block 6) failed [ 2644.967550] FAT-fs (loop6): Directory bread(block 7) failed [ 2644.977393] FAT-fs (loop6): Directory bread(block 8) failed [ 2644.978620] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2644.982098] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2644.987532] FAT-fs (loop6): Directory bread(block 9) failed 18:46:53 executing program 1: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x400, 0x0, 0x0, 0x3901014, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x2) chown(&(0x7f0000000080)='./file0\x00', 0xee01, 0xffffffffffffffff) 18:47:06 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x9fd, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:47:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:47:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000400000004000000dbf57d2b916faf24736eb816c1cdc6f42fe07edb5d5b32d8375979343ae83ad9e9cb06b0cc81ab845bc65baac1ed72aa767d9ceb07e503b15e7e4bad10310987358c111428117f86c24bc3e8835f16a64f4edc783a1cc7ba0dbb712cb447399ec00490ea9dd99bcabb5c4a4863026fc78342f12f77455c5964c97793e1bb436375dae5da2a3c97e681672d7784b5858fe82d9b5c0ffade2f680427250f6e15f61eb163b1cffb510034be4fa1b18e8683"]) 18:47:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) open_by_handle_at(r0, &(0x7f0000000480)=@reiserfs_6={0x18, 0x6, {0x1, 0x7, 0x8001, 0x401, 0x5, 0x7}}, 0x200100) syz_io_uring_complete(0x0) syz_io_uring_setup(0x3618, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x77359400}}, 0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r4, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r4}, 0x68) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt_acct\x00') finit_module(r4, &(0x7f0000000380)='\x00', 0x2) r6 = pidfd_getfd(r5, r4, 0x0) fallocate(r6, 0x10, 0xffff, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000440)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000200)=""/184, 0xb8}], 0x2, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x22021) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000340)={'wlan0\x00'}) 18:47:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="eb861d2910a2415b8156ecd210a4d63361eaf5c7e207f9828fee28a45352bc0e2c6f85810d7a824703f31b9be3dd188334d4accedfafdbbf77458790f56df58ec275599344dfba91de6abae1cc775236a5820693c12d9e3b3487126388d8b35467a03f716387f30f3c4c293fb85fc262c67fb3aa30dbebaafc0b01a4a404a26e88d0d73b950d78ac2c245bc600cc865076b92c781debbc0b68a550749a9c7f1c8e60bac992fb8041fcef82e3a30634c87324add223817900c98cb5992aad278cc72aa3beab2a47b5012e4c7049490308f622eb", 0xd3, r0}, 0x68) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:47:07 executing program 1: r0 = syz_io_uring_setup(0x68df, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000100)={0x0, 0x6, 0x3}) r5 = syz_io_uring_setup(0x1a56, &(0x7f0000000200)={0x0, 0x637f, 0x1, 0x0, 0x15b, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r5, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x105142, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x100000001) r7 = open$dir(&(0x7f00000011c0)='./file0\x00', 0x0, 0x1e4) getdents(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$VT_RESIZE(r7, 0x5609, 0x0) flock(r3, 0x2) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000001c0)={0x1ff, 0x9}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000140)={0x3ff, 0x8, '\x00', 0x0, &(0x7f0000000040)=[0x0]}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 18:47:07 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 17) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:47:07 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, &(0x7f0000000280)='\\)(+\x00', 0x0) add_key(&(0x7f0000000740)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x1a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) [ 2658.413220] FAT-fs (loop6): Directory bread(block 3) failed [ 2658.417052] FAT-fs (loop6): Directory bread(block 4) failed [ 2658.425364] FAT-fs (loop6): Directory bread(block 5) failed [ 2658.439727] FAT-fs (loop6): Directory bread(block 6) failed [ 2658.439754] FAT-fs (loop6): Directory bread(block 7) failed [ 2658.449377] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2658.449393] FAT-fs (loop6): Directory bread(block 8) failed [ 2658.449435] FAT-fs (loop6): Directory bread(block 9) failed [ 2658.449777] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2658.452483] FAULT_INJECTION: forcing a failure. [ 2658.452483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2658.452510] CPU: 1 PID: 15864 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2658.452522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2658.452528] Call Trace: [ 2658.452554] dump_stack+0x107/0x167 [ 2658.452581] should_fail.cold+0x5/0xa [ 2658.452609] _copy_from_user+0x2e/0x1b0 [ 2658.452637] __copy_msghdr_from_user+0x91/0x4b0 [ 2658.452659] ? __ia32_sys_shutdown+0x80/0x80 [ 2658.452680] ? udp_v6_push_pending_frames+0x360/0x360 [ 2658.452706] ? inet6_sendmsg+0xbd/0x140 [ 2658.452727] ? inet6_compat_ioctl+0x320/0x320 [ 2658.452745] ? __sock_sendmsg+0x55/0x190 [ 2658.452773] sendmsg_copy_msghdr+0xa1/0x160 [ 2658.452793] ? do_recvmmsg+0x6d0/0x6d0 18:47:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x10, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2658.452819] ? __lock_acquire+0x1657/0x5b00 18:47:07 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0xf20fb9a8de52b47d, 0x40000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x40, 0x9, 0x0, 0x7f, 0x0, 0x81, 0x80002, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xa92, 0x9849}, 0x820, 0x4000000000000000, 0x1f, 0x2, 0x9, 0x7, 0x4, 0x0, 0x3f, 0x0, 0xf304}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xa) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r4, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000001280)={'sit0\x00', 0x0, 0x29, 0x7f, 0x1f, 0x5, 0x7a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x10, 0x16, 0x6}}) sendmsg$inet6(r4, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x3f, 0xaf, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40}, 0x1c, &(0x7f0000001200)=[{&(0x7f00000001c0)="5d3542e48764d2abc0e4190e61b58a1e9019af89be7263f939ea11d601f66c9652f88b681af6b535305743a946e157539bf63904c21ec58203aa0b84fbac3a193e9d9406c6e3d750746619391acc82652075f4b28c3fe252a51b2b7e79daa1abc17a4f3ec6fbc17676ec456aa2", 0x6d}, {&(0x7f0000000240)="3aad1f3707eaf70cef60b7a0f228029afbdd934d55676afb67b7148c3fae9459b677315d5bf9f87917181f3ce29a87f897164c03422984259c74881e08bcf7d367dea435b66264459e7d605cb8e8fcf085d497dde95a069a90e6a365855d199181ecb10c6aaf18794e1733a8391dccd5625d69d75b4958b8c722225055753c418fb4a2d351d35be987829036b0559eeef8d68a8c0a615f7c5407ffe799183e0884c31fd0f0cb1ad58c1fe02afd8874330cf1d8cecb275b7c05863650073bb18bfe251b4dcc52a7f5be3d4c7ba811d3cfa263da7c17e972aa3ccf59", 0xdb}, {&(0x7f0000000340)="8393d90821684c43281854996017adc8f82cac7c6e5dd22273289c46f9c87c0140abe6f5ee767a12adf50241d900a72ce3733a199944ae30c92c869a1db564f0864e947274c9ed19002b975c67942a70682dae8c787bc2080efb427e93ec48262b3757893107510288048ca0c7ccb80967b172d400eb807bb6b3d1615eb707a0", 0x80}, {&(0x7f0000000f00)="5534988d762b547ce3f8eb7865ac9ac77b14c88dc4e8d2a7b3b7f5a8e20a9adb3ca195555a30c0a007073ee66c98ec3c1dbf025986bed8648234ec21aa2165b396cecbe8b8a9c8fcb68eb8e6ce10113c19d8e688127caa7c6751b97654c1c3f6e264b8192b908a8e624f370ef34df1ba72170906a9ddd8f5569d954067970ec5bf377386877a8d057ace3dc71ceee1c81beca8cc1eefe9fc6da7c1cd38e788465b052ccf351bad12ae1cfabfe89793a4725d086d2f48de4d45eb20e1fe807f69741e5b63", 0xc4}, {&(0x7f0000001000)="d7911e19619f09c5eb28783bacc4697592b0968160add588a3a23f05baa55bb4166efc0dc7ead2ecb1a6c7f8021278fff1d20a6a9903e4a15f920b07d67788a513890250e0093ade5857a28a00f771930b916f389a0dbe6312f8d96fc2863dffebc6ef9a9030daa1b02740e3bed980cd3429260ffbde40ffcae1527664bdcc5d56c5dfedd51d9ba6394b74b826ef5239af9f1b1315005f92fdee254296a18bcbc2b00f8ad7432a242160bac00172e457acb1b3a4ad4b34dda65c4568dd6192645a868d4deade558fe4504c42d5", 0xcd}, {&(0x7f0000001100)="9504616856062472a5e7ecdd73e7f47c08dc98a549426cf47a1f2ad1532bb2203449fe2335707496b8bfbf2a5b1525061b99c19331b5ce23e344f13645d51eef9c30c6da9ae532e3cd0d90c57fd4ddbe0ef2c8444a58d9810412ff11272ecdf8fa1036790e0895b8e29f1d420baf087b41cbd2b1967d771fbbf9d6b9379fa40e3f313e66416758ce50cc2090a3012209ef73259aa9023b6cf08b739c78d181807d7fb338c0bc67312be22f91e547de0c6dfbf5de19628fb2d4caccd2f21a719ebfb57de68eb79860fb6ee4012e5243", 0xcf}], 0x6, &(0x7f0000001340)=[@hopopts={{0x20, 0x29, 0x36, {0x11, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x2, 0x1, 0x0, [@remote, @empty]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x6c, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x0, [0x401]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffffff}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x73, 0x4, '\x00', [@calipso={0x7, 0x8, {0x9bf693efbdccab8c, 0x0, 0x7, 0x9}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x81}]}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x29, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x40, {0x3, 0xe, 0x9, 0x1, [0x9, 0x8, 0xffffffffffffff7f, 0xee5, 0x1, 0x3, 0x7ff]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r5}}}], 0x188}, 0x4042810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r4}, 0x68) lseek(r4, 0x4, 0x3) [ 2658.452854] ___sys_sendmsg+0xc6/0x170 [ 2658.452878] ? sendmsg_copy_msghdr+0x160/0x160 [ 2658.452895] ? vmacache_find+0x55/0x2a0 [ 2658.452920] ? __lockdep_reset_lock+0x180/0x180 [ 2658.452949] ? lock_acquire+0x197/0x470 [ 2658.452967] ? find_held_lock+0x2c/0x110 [ 2658.452993] ? __might_fault+0xd3/0x180 [ 2658.453014] ? lock_downgrade+0x6d0/0x6d0 [ 2658.453033] ? asm_exc_page_fault+0x1e/0x30 [ 2658.453073] __sys_sendmmsg+0x195/0x470 [ 2658.453100] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2658.453120] ? lock_downgrade+0x6d0/0x6d0 18:47:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xc0, 0x1, 0x81, 0x9a0}, {0x6, 0x8, 0x5, 0x200}, {0xffff, 0xd4, 0x0, 0x9}]}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000180)={{r0}, "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"}) close(r0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000001180)={0x3, 0x100, 0x1000}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x70, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000001380)=ANY=[@ANYBLOB="0138202300a700ddd481e66bf300000012dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c82931d1a5eb083f8dccf9369db25ea1d8740032de08663b2492a86e1561bff5f4b7cc20187d6d8371b4bef2325c212ca543c9623aeebdc823a5434691be4ba6263eb84b853"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xaf89}}, './file0\x00'}) [ 2658.453160] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2658.453185] ? wait_for_completion_io+0x270/0x270 [ 2658.453209] ? rcu_read_lock_any_held+0x75/0xa0 [ 2658.453228] ? vfs_write+0x354/0xa70 [ 2658.453253] ? fput_many+0x2f/0x1a0 [ 2658.453274] ? ksys_write+0x1a9/0x260 [ 2658.453295] ? __ia32_sys_read+0xb0/0xb0 [ 2658.453324] __x64_sys_sendmmsg+0x99/0x100 [ 2658.453348] do_syscall_64+0x33/0x40 [ 2658.453371] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2658.453385] RIP: 0033:0x7f9d069ffb19 [ 2658.453406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2658.453418] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2658.453441] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2658.453453] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2658.453466] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2658.453478] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2658.453491] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2658.761612] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2658.761790] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2658.823223] FAT-fs (loop6): Directory bread(block 3) failed [ 2658.823299] FAT-fs (loop6): Directory bread(block 4) failed [ 2658.823322] FAT-fs (loop6): Directory bread(block 5) failed [ 2658.823345] FAT-fs (loop6): Directory bread(block 6) failed [ 2658.823367] FAT-fs (loop6): Directory bread(block 7) failed [ 2658.823607] FAT-fs (loop6): Directory bread(block 8) failed [ 2658.823633] FAT-fs (loop6): Directory bread(block 9) failed 18:47:22 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 18) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:47:22 executing program 7: syz_emit_ethernet(0x266, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x230, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x8c, '\x00', {0x9, 0x6, "06f02b", 0x400, 0x3b, 0xff, @local, @empty, [@hopopts={0x4, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @fragment={0x89, 0x0, 0xf, 0x1, 0x0, 0x6, 0x66}, @routing={0x5c, 0xa, 0x0, 0x3, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x66}, @fragment={0x33, 0x0, 0x5, 0x1, 0x0, 0x7, 0x68}, @fragment={0x84, 0x0, 0x5, 0x1, 0x0, 0x6, 0x66}, @fragment={0xa3, 0x0, 0x5, 0x1, 0x0, 0x4, 0x64}, @hopopts={0x33, 0x11, '\x00', [@ra={0x5, 0x2, 0x61fd}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x20, [0x100000001, 0x8, 0x80f9]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x0, 0x6565, [0x0, 0x9, 0x2, 0x81, 0x200, 0xffffffff, 0x401, 0x971]}}, @jumbo={0xc2, 0x4, 0xffffffff}, @jumbo={0xc2, 0x4, 0x10000}, @enc_lim={0x4, 0x1, 0x9}, @pad1]}, @hopopts={0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x81}]}], "e5f91feeef5f3555097831e9d2f664eab6d2aef4ebcfa1abf0e706915e6a19df5aacfa87fd5e4f7e204c7fd367f092588977e5c687f6f05d02337543f285342a118a71e54dae50375e2f3347b81771b2eead1bbcc41e28e753d6a87cfdd76a7d95e4ff013c9cc58c37bcd43fa17f6bed258de7e4ee46fc3eeb062068a4d198f45601e26d92425a543345b1ed14358f4d49b56030706add217ae1d39b91d1964990887bfa8cbb0794dec35b6e3ffd016b"}}}}}}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) write$tun(r0, &(0x7f0000000100)={@void, @val={0x2, 0x4, 0xf90, 0x2, 0x4, 0x5}, @llc={@snap={0x0, 0x2, "cd", "cd782d", 0x18, "9c861eb7b81fb1b3054c95d50a5848754dff4cc1e20c1b1591acd7be76b5a84774abaf65cca10f09a7068bfd02c191044e7a33788c295ac2ac656048339108be5de1ec5739c5492832fb4e11275d72238c560f76cc35565953ec200e97728faabdf2"}}}, 0x74) 18:47:22 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)=0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000900), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x60400, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000340)={0x1, 0x1000000000000000, 0x10000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0xfc9, 0x14f8, 0x2, &(0x7f0000000300), 0x8) syz_io_uring_submit(r5, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_io_uring_setup(0x7f9e, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x4001b2, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, @in_args={0x6}}, './file0\x00'}) sendfile(r7, 0xffffffffffffffff, 0x0, 0x7e5d) 18:47:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:47:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x88, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="f5f5"]) ioctl$CDROMREADCOOKED(r1, 0x5315, &(0x7f0000000f00)) 18:47:22 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:47:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x30) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x97, 0x6, 0x1f, 0x40, 0x0, 0x10000, 0x40000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x5, 0xfffffffffffff869}, 0x1710, 0x20, 0xfffffffa, 0x6, 0x8, 0x16f, 0x0, 0x0, 0x6, 0x0, 0x81}, r1, 0x10, r2, 0xdbb970f8111e527f) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r3) 18:47:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='pagemap\x00') write$bt_hci(r2, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) flistxattr(r2, &(0x7f0000000000)=""/245, 0xf5) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x7, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001e00)=""/4096}, &(0x7f0000000100)="04380c2b135014", &(0x7f00000001c0)=""/98, 0x7, 0x22, 0x2, &(0x7f0000000140)}) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) [ 2673.903336] FAULT_INJECTION: forcing a failure. [ 2673.903336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2673.904845] CPU: 1 PID: 15911 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2673.905706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2673.906741] Call Trace: [ 2673.907077] dump_stack+0x107/0x167 [ 2673.907535] should_fail.cold+0x5/0xa [ 2673.908022] _copy_from_user+0x2e/0x1b0 [ 2673.908525] __copy_msghdr_from_user+0x91/0x4b0 [ 2673.909104] ? __ia32_sys_shutdown+0x80/0x80 [ 2673.909651] ? udp_v6_push_pending_frames+0x360/0x360 [ 2673.910312] ? inet6_sendmsg+0xbd/0x140 [ 2673.910811] ? inet6_compat_ioctl+0x320/0x320 [ 2673.911370] ? __sock_sendmsg+0x55/0x190 [ 2673.911878] sendmsg_copy_msghdr+0xa1/0x160 [ 2673.912422] ? do_recvmmsg+0x6d0/0x6d0 [ 2673.912914] ? __lock_acquire+0x1657/0x5b00 [ 2673.913468] ___sys_sendmsg+0xc6/0x170 [ 2673.913958] ? sendmsg_copy_msghdr+0x160/0x160 [ 2673.914550] ? vmacache_find+0x55/0x2a0 [ 2673.915055] ? __lockdep_reset_lock+0x180/0x180 [ 2673.915644] ? lock_acquire+0x197/0x470 [ 2673.916148] ? find_held_lock+0x2c/0x110 [ 2673.916661] ? __might_fault+0xd3/0x180 [ 2673.917161] ? lock_downgrade+0x6d0/0x6d0 [ 2673.917695] ? asm_exc_page_fault+0x1e/0x30 [ 2673.918258] __sys_sendmmsg+0x195/0x470 [ 2673.918778] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2673.919320] ? lock_downgrade+0x6d0/0x6d0 [ 2673.919867] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2673.920497] ? wait_for_completion_io+0x270/0x270 [ 2673.921112] ? rcu_read_lock_any_held+0x75/0xa0 [ 2673.921705] ? vfs_write+0x354/0xa70 [ 2673.922203] ? fput_many+0x2f/0x1a0 [ 2673.922669] ? ksys_write+0x1a9/0x260 [ 2673.923151] ? __ia32_sys_read+0xb0/0xb0 [ 2673.923662] __x64_sys_sendmmsg+0x99/0x100 [ 2673.924200] do_syscall_64+0x33/0x40 [ 2673.924666] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2673.925312] RIP: 0033:0x7f9d069ffb19 [ 2673.925782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.928114] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2673.929073] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2673.929969] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2673.930910] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.930918] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2673.930925] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2673.942404] FAT-fs (loop6): Directory bread(block 3) failed [ 2673.942420] FAT-fs (loop6): Directory bread(block 4) failed [ 2673.942433] FAT-fs (loop6): Directory bread(block 5) failed [ 2673.942447] FAT-fs (loop6): Directory bread(block 6) failed 18:47:22 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3cf3, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2673.942461] FAT-fs (loop6): Directory bread(block 7) failed [ 2673.942607] FAT-fs (loop6): Directory bread(block 8) failed [ 2673.942623] FAT-fs (loop6): Directory bread(block 9) failed [ 2673.956892] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 18:47:22 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) fchmod(r1, 0x41) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x430}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000180)={0x0, 0x9, 0x5}) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\x00', 0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_buf(r0, 0x29, 0x48, &(0x7f0000001e00)=""/4096, &(0x7f0000000240)=0x1022) timer_create(0x0, 0x0, &(0x7f0000000040)) ftruncate(r0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x1013, r0, 0x0) syz_io_uring_setup(0x5cf8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)) [ 2673.957750] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:47:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x16, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:47:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)={0xb4, 0x4, 0x4, "db0bf2ec896b3ccf15446a1a4d1ac14b8de3135aae7910485d7e6caa051d4c9871c3962bc0b7df694dc17f588114710307a78ef2ebf03ab6a16d79317b6903558bd31060c19b6c9c1847708b9c21f6b6f32f6b13e76f586f45b189a0a51f69925f46d9eea770864c58df628cb944d85a7a3f5030131ec593ecdbff7a48a788c8d27d55eb364fb8e5e8ba4b4699483ef7ab4a60721da370819d404270973e06af44f6f5541e52dfe707f2bdfca15817a7086efc51"}) 18:47:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, 0xffffffffffffffff}}, './file0\x00'}) 18:47:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x0, 0x56) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x22}}, './file0\x00'}) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0xd, 0x0, 0x0, 0x8, 0x1}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:47:22 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010700)="53595a4b414c4c45522020080000e980325132510000e980325100000000000041660069006c00650030000f", 0x2c, 0x4400}], 0x0, &(0x7f0000011100)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000140)={[{@subsystem='perf_event'}, {}], [{@dont_hash}, {@uid_lt={'uid<', r1}}, {@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@euid_lt={'euid<', r2}}, {@uid_lt={'uid<', r3}}, {@uid_eq={'uid', 0x3d, r4}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) mkdirat(r0, &(0x7f0000001600)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1c23be32}}, './file0\x00'}) r5 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2104420, &(0x7f0000000900)=ANY=[]) unlinkat(r5, &(0x7f00000004c0)='./file0\x00', 0x200) [ 2674.223630] FAT-fs (loop6): Directory bread(block 3) failed [ 2674.224813] FAT-fs (loop6): Directory bread(block 4) failed [ 2674.226115] FAT-fs (loop6): Directory bread(block 5) failed [ 2674.228290] FAT-fs (loop6): Directory bread(block 6) failed [ 2674.234377] FAT-fs (loop6): Directory bread(block 7) failed [ 2674.244545] FAT-fs (loop6): Directory bread(block 8) failed [ 2674.254882] FAT-fs (loop6): Directory bread(block 9) failed 18:47:22 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2674.284099] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2674.285328] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:47:37 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:47:37 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000440)='net/vlan/config\x00') write$bt_hci(r4, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r4}, 0x68) r5 = dup2(0xffffffffffffffff, r4) close(r1) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000004c0), &(0x7f0000000500)=0x4) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="a3b49b8db71db70e5337972a6eeb126d8aaad9295b2ad193ce2f01aa1b6c453938194c2114a6d0174d3b91cce5", 0x2d}, {&(0x7f0000000080)="63e85f8d158608b46d349efbd9c6800a3755ba56330e8efc3cfc0affec84b2219479a60a696171721a246ea246a5bc078d384536101d8a2e6f6422afc2731a91c95db3ed77991464095761a5c3e6bf0d13c1b2d102", 0x55}, {&(0x7f0000000100)="8546e2a197eaebfe680258351ce9e175684486dfe8fae3ceadcae9c7fe179970b49fc069a3eb565fe01b705313864cf41c74c4b5bfb82c0bb116728621e521682cbeac9982b444b54e47db4065436a7d7964169466", 0x55}, {&(0x7f0000000180)="9972c855af2da12595c6d410aa8c9b37426fb769f35acb30a67efd553ee3388f976f0eccee2e480208b71fc818afcc36358357149fb62d34301254be7fe38c1365bcc3e69b87d2c4671f1a1512a0859465f7168fd3eeb94544c4c81cca9d2832124314eebbc7bc2b3a1f04ffc6138732a3a81260276d621a84f95d869ccc89c96df123f457b87de4da464198f4b2a2b3f34ded268141cd45295c96d8cfbe5fc1033c7c246bfd53457591039a85ad4810fe1d8b5c7168a072c741784a0527df24fcc773f3aa0f3e81ecf73b", 0xcb}, {&(0x7f0000000280)="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", 0xfc}], 0x5) 18:47:37 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0x9, 0x26, 0x40}]}) sysfs$1(0x1, 0x0) 18:47:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:47:37 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x13d) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x93) ioctl$BLKTRACETEARDOWN(r0, 0x1263, 0x0) 18:47:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2e, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:47:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x1}], 0x1000, 0x0, &(0x7f0000001e00)="61648302d2adcd3cc8dccfeb0579b33a716e3fa1ce5a5762ea48c05c8d0871a52280c58ed9107f806d785dfbf36d76f921fe298f801161e3527c0c6a1a84e1b3ed457a3fdfa6b0f523e2068d616268b2fa3965fa87bdc4a6c3a18c9c1bb9a3c35529406aed3628ded8d9e6bfcaca617e785c810ecba8513af61880ee4a33382ce9dd154ed392de894c34cbeb5c85bf482ecaa923a7a3e526b9a47f78763bc8eff4b951722c80eb4b209c8b720a366d8220f9ab848f91c080a251b550a8d62a067015a566968976760cb466cdb85846c1b056079b0ae09c29f259deef2e2ddb2af1ff89d69670b7d9eb80fea607c5fe431f23999932aacedb8aac003a2c68704a4204bd419d7db5bc92c8445fa31fe5a277e840e9970838529806dd856a517ab0ed40bdd6fd34675e35f2120f1a6b37e6b2c71bbdbea7799f6a9e43276f2db48128e3041e26549cc67ec8139a321a18a1a172557cf9f4440a3ebf620b8ab1eb07d6b223dbd29cb15a6ea2962fb4c49f8a8bd01ff7f165078c3de08e278844b00a053062dee4d108c0c821dc518d6cfd67f7673d7fd03a3b35ec574b2512949de4a0bdf9478fe7e0052155de33b999f30db5271fa443896475695a107c42829872835af991df85aa9890d29bf793c608b8d18e2e702b8fd20d898f416c8af71b1f8406726d183f9bb932f0da5e5ccfc158082a43ce39e6651401d8706250195bc8892503e9f87f7556f5fc5ffa5b2dfa7962d77ff87cbe50ca6efadbead5e4cfcf5621e62f761eb8df1de64e630c97008dc384b5c7228656fe3fc5c870531fa381c5bfa7e7a27da9dcf85d6c04c1f63aad60a1841eba7670759af62a6b06f168790624742729c7300ce60daa67843eeb5c761553f13629fe9ca32eff2437256ac20a505ff90871e574059bdb8194fe3ed1082fbfe3f045b45a3cd58cf6d56e1feaac71a61d26812f5e17f2e5ad887a47971d05b78004538ea3a6adf2f9ed5d5d4936f5910cda6b673d4e4f19da46a40011ce0569c43a30bfa0b011c0e62bcbf2f295e7dc010309191e42547a9ef14a3f4ae92d2a1a11fd66545eb268519a24bfb6125a9d704e243186b18d4a7a98bd9c7cc134a9927ab8ff17a7aa4d07d186336a8f073d1581f2345c7fd5c793421ba580255dbcf1101247ab39fbd57d91e7c2f18c4d5a4b38d95f417f3e6ccf355263c3a45f58da9170593488f998996d31417db11de3219b7032023dde56cd8bec94e061470d0b306219c912c49315b8ffefd89d34ec50269d88348fb63e198f6f0c1c8a260d1ea08210501249c24baf498066b50d4de6378c0c3323506fbf11ee10c05c02eda0116a8b6d1d79fe705e73821d4941e18a1cb6aefd453ddca6be8de7e81a56ed8372e2f7a51ddc76a21ff6ae064231e34d9642f088c28c624d522833e95ad366ac3c3e3f05768d7a8c338f2edf07e375b902f10287aa3ce622eb8e3174dd31fee0f9b3999ae0c10a8dfc31301fd7bbc6881825518fe943a2e1cdd93e05f8bd7869a55400bdecc141518b5e3b2a8698cbd431abcc799b135a314d523fca1cd01b94329ded611aefa1bce9911aece8a748515907c64f31e7f3f3c667aba35431165fe0eb3ba1fd18c82bb25abbea014876832ae84137b061289facb98cb35d53fb0ed67c9cc8fa5727923932f0d2db320eaf9c4a5e09ae7f4e8341e9f6e008392b085ca701a62a4dbc75b07a6817e5d12a17684276727bc7e083ae4acff8339c3317b41b52522c456114cc284ff2397a50f5f55856fd40f85e0ba05dc8b7350114d3934a9d2d5d4f8337bc7213df5a00f08d2d6b9c56f85b3b03077a274ce5bf64790d9094a9349d36d38048d868696f3ed94b61f1e8eaf99c5032fd42ff25417f01b9d8c601a0aa29cdacc0ccd4ecd4bf7b72be734212665f339bcaa82457b1b2dcd297ff2a2c0364f5560c085224b9406ab863239eee6569397a850edc21913ac30a591e6efa7eefc57afad13aab924798521448ba76c4ab0b4757dae147be3a869571937a3285deb9866eaa1800b89e33e735be1b0666275de49cf69531340c9f20f67ee7024619bbb58366a8feeb5bc7788faa3e85801b4762445bca5ef2dd5a79820c88370edc99829d236d2d1fed59b53c50e2086b5ff083d845d9194798f07806a8694602440e5421c47dc583e84c609f7ec07dcd0e9426cd336fe248a102f7b9d9bacff6cb99768997708dc6498130bb8edae61143f5616731f2bf57f2b0bc43060ec5609bbb47e1038430088f1643aa60898d02f87cf6dfaa26a75381fbb9b2c4e9d08df392c2caaab007cc6bb4ced51ea967132650848780e683239a3a1e52fe0460f9f2666baaa5e697e81a53e85be908b19d60bd9fb8ffcaf723fbeced52d2347bb81637698281617913936b3161eb2e8e8db62c0cc638c7e81c4cd0d1d596d80aa72310eefe89de3d798566a6e745afcef63adf226027bbd9154b3bb2b331a7574eaccda21d2f5c12d5760742bbb9bce95fae89520e5180c0292dc3d651044b3930fd982374aa210b27f7343bd71056e9948685f74b01ccb6f08c45f46146a80e3942bf0f8ee518410c5f09456e2c5582b07a7ae44682ca0dc0defd9d830dba204726101db05a6b6c0f4de80812414707246c3c191098398645dc2261e1d8bed8113ab5ee09bf052798e0af675608bc450b90fa0de916906f6c467845637e53479de7a6985cf0ea55c1fde69b0f3ae8fdfc4a2564aea9ca2717e9d42cae5c89b3db6b0d7d6b8ceb9fb69e6eab6195e59adbebb20212a7d9132bf06503318c1732f3830c3815185d8129870434f573853d74e19d96fddaab70783c8fbfc5553f2ebebcb4d9f49bd24e20ad9d50fb6ea86c0359f4257cff761b4d5b0c78d635ec42c81935f7fd2751385f5c15f9946c0bb2618de2351a09dc5517c7172bb9be129d024f3b095ef400b712b804d49ea0cb292a81a5046a58430b1e66d98c52f663645f49fc1807b3afeafb1a933aee6516267f38a9e9638973b205ffc5eeb17c874a4b32c15edd8d5ebc6f913dc2dfa2568be7a661832179a14dc89ad8684111d8b311a50683a45aa457b9ed7634d33e64658b92480eca4faf414872b92aa21eff4999b892066733dad3b72d2d7e8d37ea8cac5761ec2792343f20b25820704a65738e6ead7dacc2afa67ee0be3b22dbf32b59430794b8fb9c801b63a55732f9d37f30db4c473ce372938acb24eaa8ce07dd8e7b5b6dd8bf92f54a0d9bf0232fea60833ac277a7de788aaeb98d6e6304c47af8f526fb30c5106e852f2eea906c77b2d5717ce0bff84655db7e6efe70698d09d7e2729c301ace15034d6ab80646f819d5f723c333c76b188125a994450fe0c312e89c0b698773d817bef0e53e399e4623185c1e9484959ba9393b9dfe07661bd0d1290c5faa444e48b4869f0888b090cea7b5ef683abaaeadd2e046959693882d8b894d066f686435b68afa428e5eac8b9bb0f86935bcbe8e307bcc6be92623b5d6d1a29fa0ba20b0d98e0f574b10fbc761466aac2cb9cc20cf19af292c907003887b97933d311becf72522b975229112ffdc6484a3515e7e01feb5911bf7d0c9553ffbf1060b897d5ff7d3473281e2489bf8c7f9c45e4994b8b9fc8508cac54b363cd41e81f1a47a14bcbefa7b37b8fd052d3b148d4639f58a64245e16aaec93720879bb6a69bf916b3d3454b0984cc58cbb66370268eec3a19d6627aeb3fb73ca1da0c2aae2b9748e9d7fca3251a9dd47e09a33bac0d2352db8855249ebffd4054d762770daad62c164f55c11a5696b0cda8801606256074d89243fd4b1da1173ab2047ac45d815865e323df9fbf3d22aa39000b559637fc9f0785f59b4dde535841382dde8c1be541e2c49f23371557634af30fd5d29b1ed9c6eb1add7f8a128e568e44e7a8267f8385ac001e0a1150a0c1ff23794ea08632bf9601edaad235b0ea6b434e499d1372ba1d3916591885b5ca72eccdac2b6abdd840b31bf2e3aa98820592e047ffbecd92947eb7b5934f9b3e996cd276f84394fdf99eea690fb059ae637b10e619c9be1971d3295dac7e0ba445d2dfef48ab656e6025b8d26c721f99425caf8b3fc5e91c096110e36353541c57e3a34917201fc01848eac4a9e0443105f43284502641748f2c9fcc17150e60c6f6ec5b62bd0bfd55eea1b7c4bdda80ba3cf7565a472068f6b38ee87d23536dee7b3c5c7fdbe1aa4411ebc0ddb6f350c18748e702270ae2fb2fea0d8f542531998177892fbf9f11d34b00e04437f83945a744ca5dd378ca4f6623ea69f57184da29efc2754473fcef1548a0d2d9e57128f5a9ccaa1935e6e87bfcb6648d45477dc70f273c94c04968af9b41b675afdfc47e8ec8a9b44ba34d01b2c878f8114354c13fa244f159c0256d75b7fe1af904626c8e81467aa5b0954bc7fb990d86a1f8988108c639b5072b315025e3006dbac4b68b67b5382899d18843ed5c2bfe8f35984138c6bb65b17c960d6596c720a5f466fdfafa62fc0f77cbb47aa50cc40589ea57d1ed06788765f9cb690347acaa276d82d572168041486f636e1080744df0d0cbe390641d82d3d1e336151f0d5f989ca6c39559b3de4d693c89a55bb0969c7d847c49ddaf600799dfe74de43b97b8972c4da5360ee4d2fd91979101e0884f4bccb53f3675ccc79a83d50194a7760fae77611adb37a7cc7ec475d37d02f58c8e8be1c93920bbdc73c9cb19bcde7d654c431b0c7e8794d89be6b0a929c0a2dfaa5119e7838b26ce2a813ceb074e9f884c795621d886f5d043679718aeecf827ebbb3f17892a4bb272f69a2149e7e1e536e22e1c48e3c230318a78bb98dad0978262a6d27300794ced8b2797f4be041215d030f7945e0a20245b90a531f5ba12d6edf64e8f50e5ae5234c42b0eab2770aac071ab9b1fea5a8f4777d70efbf27d074cdb80d774e0770141dfd02019b69a905bfba9898026e3e4b54699693b55333be5bdf3b529cc27383dd679e99cc69acf01e4a28b523e8ca755f70c5c44f29e94e28f0ab13354d374a566457b829ab546a226fc5f9f6c704672f108550295f13bfaf74d0c857bc9b84fa23cc6ddd47cc5759e08c42c1bdbc671492f3eee67feecd562caab806adfd98c3ae8a163064a2474befd604dda9cf204eb226c8c28b9781eee9a95c5660b18e44a60fe1005edd1a855584d6002b7af395b27768165a8f45e1ec2dc825c71cb8330ee5b789f5f264b1c6b2e265d7b0fb5f42fa94812d551c8152251548367a5ec49bbae366816a1682460f43ff631664dcdc1a1a0a3c001a386ab50924b1bbab52a7844c9b0b8f87f0203b9715678caee9e0bdeaf5f4eebd922b71f3b0cccf14a5c1dba1f3fcc2136d010ffb4a197eba2d2d33def26a0f290eeeb1b02b8285800593ea8f67c60217a64a58b027bb436e2b5e6c9b9836b712a428b19e2633e537c881005b4ab3297ff905100ead2e4f631e4fdfd6d6a420141bf7bb82433b5bbadbf2d6ad6970f2b3a8a98c990635871612d3cc929a25216e9b3e5632d056510c7068fd9d28bc730d929c9d24d91d4df9ec7c773e3ac9479b3619e79094c86717a431805f3f6a1fc0f6a8d5a616af8588c3c6abefe5839b040329fe654e4880c3ca0fb7e48c05f4ea7e9fda95724c6df3cf4e898966e43d1e07fbd8b3ff27938007f17b99395dab23fbfdf9f22c28ca62360c3432551431baf41751422be43f3e28692c9d2c1652f1cd0b705195b311891ff8e03642206aa17755f71d552f3ccafddd18e656fc161644c8a0b056d477fcfe7582aab6373bcfd0"}) 18:47:37 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 19) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) [ 2688.787726] audit: type=1326 audit(1700506057.469:114): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15983 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06c3ae6b19 code=0x0 [ 2688.800676] FAULT_INJECTION: forcing a failure. [ 2688.800676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2688.802972] CPU: 1 PID: 15996 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2688.804080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2688.805319] Call Trace: [ 2688.805726] dump_stack+0x107/0x167 [ 2688.806286] should_fail.cold+0x5/0xa [ 2688.806893] _copy_from_user+0x2e/0x1b0 [ 2688.807544] __copy_msghdr_from_user+0x91/0x4b0 [ 2688.808290] ? __ia32_sys_shutdown+0x80/0x80 [ 2688.809002] ? udp_v6_push_pending_frames+0x360/0x360 [ 2688.809840] ? inet6_sendmsg+0xbd/0x140 [ 2688.810490] ? inet6_compat_ioctl+0x320/0x320 [ 2688.811211] ? __sock_sendmsg+0x55/0x190 [ 2688.811872] sendmsg_copy_msghdr+0xa1/0x160 [ 2688.812570] ? do_recvmmsg+0x6d0/0x6d0 [ 2688.813198] ? __lock_acquire+0x1657/0x5b00 [ 2688.813897] ___sys_sendmsg+0xc6/0x170 [ 2688.814526] ? sendmsg_copy_msghdr+0x160/0x160 [ 2688.815265] ? vmacache_find+0x55/0x2a0 [ 2688.815907] ? __lockdep_reset_lock+0x180/0x180 [ 2688.816639] ? lock_acquire+0x197/0x470 [ 2688.817278] ? find_held_lock+0x2c/0x110 [ 2688.817898] ? __might_fault+0xd3/0x180 [ 2688.818540] ? lock_downgrade+0x6d0/0x6d0 [ 2688.819197] ? asm_exc_page_fault+0x1e/0x30 [ 2688.819912] __sys_sendmmsg+0x195/0x470 [ 2688.820558] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2688.821251] ? lock_downgrade+0x6d0/0x6d0 [ 2688.821917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2688.822692] ? wait_for_completion_io+0x270/0x270 [ 2688.823456] ? rcu_read_lock_any_held+0x75/0xa0 [ 2688.824202] ? vfs_write+0x354/0xa70 [ 2688.824808] ? fput_many+0x2f/0x1a0 [ 2688.825352] ? ksys_write+0x1a9/0x260 [ 2688.825960] ? __ia32_sys_read+0xb0/0xb0 [ 2688.826620] __x64_sys_sendmmsg+0x99/0x100 [ 2688.827305] do_syscall_64+0x33/0x40 [ 2688.827904] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2688.828679] RIP: 0033:0x7f9d069ffb19 [ 2688.829244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2688.832048] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2688.833207] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2688.834324] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2688.835426] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2688.836518] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2688.837607] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2688.878089] FAT-fs (loop6): Directory bread(block 3) failed [ 2688.879203] FAT-fs (loop6): Directory bread(block 4) failed [ 2688.886505] FAT-fs (loop6): Directory bread(block 5) failed [ 2688.893014] FAT-fs (loop6): Directory bread(block 6) failed [ 2688.893858] FAT-fs (loop6): Directory bread(block 7) failed [ 2688.919661] FAT-fs (loop6): Directory bread(block 8) failed [ 2688.931375] FAT-fs (loop6): Directory bread(block 9) failed 18:47:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x10, 0x7, 0x1, 0x40, 0x0, 0x6d2, 0xc40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffda, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x11000, 0x7089, 0x40, 0x9, 0x3, 0x8, 0x800, 0x0, 0x400, 0x0, 0x4}, 0x0, 0xa, r0, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x29, @multicast1, 0x4e24, 0x2, 'fo\x00', 0x0, 0x40, 0x7d}, {@empty, 0x4e23, 0x4, 0x8, 0x8, 0x1}}, 0x44) 18:47:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r0, 0x3, 0x900500, 0x30000000000) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x900500, 0x30000000000) openat(r1, &(0x7f0000000040)='./file0\x00', 0x183000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='rxrpc\x00', &(0x7f0000001400)=@keyring) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000340), &(0x7f0000000380)) fchown(0xffffffffffffffff, 0xffffffffffffffff, r2) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') 18:47:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = fcntl$getown(r1, 0x9) syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x484103) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = inotify_init1(0x80000) kcmp(r2, r4, 0x6, r5, r7) r8 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x20}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r11, 0x4c06, 0xffffffffffffffff) ioctl$CDROMREADMODE2(r10, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) r12 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x48, r12) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000f00)=ANY=[@ANYRESOCT=r0, @ANYBLOB="4b72ffb75a9f811a39093e395756ada174bc0b4f0259e982520ab61f413fe4cfd04f25e887b2c46bb5f860d908774be7660a069dc751d65cd9f62e48e914bc1bb174317f7cd0ea4675787ce5e296ebb0ba1daeae1611476bc2dc87f7ee53ec333fba3c7ccbac82a2f5a1bba6103c46b1e19cb4416a063046abc72fe33dd5890e1291a044b1fac51d9b246ff480956473e5da2f7ff15947e7adf1a6c43c7ba9825fd6289acb40750472", @ANYRESHEX=r12, @ANYRESHEX]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:47:37 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf33c, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:47:37 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xff0f, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:47:37 executing program 5: fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x6, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x589840, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x800, 0x80000) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) preadv(r1, &(0x7f0000001100)=[{&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000f00)=""/227, 0xe3}, {&(0x7f0000001000)=""/252, 0xfc}], 0x6, 0x6, 0x6) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x4) r6 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000140)=r6) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r7, &(0x7f0000001640)=ANY=[@ANYBLOB="319fe55347013820230600000000000000d124ef9d0ed8947ff4cc2517873fed301a5c8fecc85172ad02ff22f7f6f8189834c16d9ac1ac383ffcb496cb230f70d628257591a0785f4ad2c9018f3003196a9b159d907a9bec3d271e87834d9e9e63ffd76abb48f493de0454bfd05d3b70d448bc446de124476d62abfaacd3cf30db3a7a830014ed348df200f15cfd1e2c99e653a2ec9057abf772a92c63ea4991dc5114630ca7b5585d926be1b1d7be96932b97cdb1acb911464f776c85fd4d28e1e4c2c890faca8a3a10bbc920928bb2684d34a45c02976f136bd14ccfea8eb8f8a85c712fd81313d8ba4bbb05f0cd14914a69ec2c"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r7}, 0x68) recvmsg$unix(r7, &(0x7f0000001600)={&(0x7f0000000400), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001180)=""/72, 0x48}, {&(0x7f0000001200)=""/9, 0x9}, {&(0x7f0000001240)=""/51, 0x33}, {&(0x7f0000001280)=""/105, 0x69}, {&(0x7f0000001300)=""/114, 0x72}, {&(0x7f0000001380)=""/115, 0x73}, {&(0x7f0000001400)=""/118, 0x76}], 0x7, &(0x7f0000001500)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x50) 18:47:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x11, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 18:47:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:47:38 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="048159e4d8859e8705ef42f1bc51f49854ea9d3b7ed42745f231563623d0d415ef312269d4a76a64079baaf47b52d09ef9c6691e857906788813a445fff70323a2d68771b90f1ad4ce70e876f39f863b9fd530d3440a1968f3796df8ec0ebc8e4fb09093e34c6f3b1f"]) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x4, 0xf086, 0x31}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x125140, 0x90}, 0x18) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r5 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x7, 0x3, &(0x7f0000000300)=[{&(0x7f0000000240), 0x0, 0x5}, {&(0x7f0000000280)="6bffd10d68d6bf04482484030816fd724c7dd10b6b19eb", 0x17, 0x7f}, {&(0x7f00000002c0)="a182ad3b87e99c42d863f72adce562c054898c", 0x13, 0x5}], 0x9, &(0x7f0000000380)={[{@dmode={'dmode', 0x3d, 0x8}}, {@uid={'uid', 0x3d, 0xee01}}, {@sbsector={'sbsector', 0x3d, 0xb187}}], [{@uid_lt}]}) openat$incfs(r5, &(0x7f0000000440)='.pending_reads\x00', 0xc000, 0x10) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$CDROMREADMODE2(r7, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, 0x0) 18:47:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x9, 0x6, 0x9, 0x3, 0x0, 0x40, 0x89818, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x8000, 0x9, 0x8, 0x8, 0x10001, 0x84, 0xc52e, 0x0, 0x1, 0x0, 0xffffffffffffffee}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) [ 2689.458634] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2689.460595] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2689.616226] audit: type=1326 audit(1700506058.296:115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15983 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06c3ae6b19 code=0x0 [ 2689.646411] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2689.648289] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2689.656389] FAT-fs (loop6): bogus number of reserved sectors [ 2689.657116] FAT-fs (loop6): Can't find a valid FAT filesystem 18:47:38 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0x10001}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 18:47:38 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0xfffffffffffffe1b, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8d) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x0, 0x0, &(0x7f0000000080)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x88442, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000380)={0x120, 0x0, 0x9, 0x201, 0x70bd2b, 0x25dfdbfb, {0x3}, [@generic="016bf6613b08974e8f6585925946f4b69f5f2441504a49eaf47a", @typed={0xc, 0x1, 0x0, 0x0, @u64=0x8a7}, @generic="b35b31ce6929f0094078e76549cb67c58a8e9bfe245d2e3eb36f3c60fc2d01c48e4bbb430d4cf5025d6312d691d9dcad86e87cdff5ea7df304317cd76dfd", @generic="da83ae7a9f465fefaad1e7cc7fe17657188f77d41942d696172f7262104a13b2725fe0a009386a090ca62af1372ac2b0e6c00cca03bc67a3", @generic="3b75759416c35f984ad917a075cf1bfc0265d7ed2bffc032b42d045b20c60af9f61835c99e653ae2037fa60508176e407d2d6db9a0b3dedb0daa42235a69299f28efec158378a884a521e349310cb68c33a0f04c95674d178cf50275d8ed4b0d726a42e6", @nested={0x4, 0x57}, @generic="9a36", @generic="9b", @typed={0x4, 0x5c}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x895) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@hci, &(0x7f0000000340)=0x80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x17) 18:47:38 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfd09, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:47:38 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 20) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) [ 2689.857675] audit: type=1326 audit(1700506058.539:116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c3ae6b19 code=0x7ffc0000 [ 2689.862316] audit: type=1326 audit(1700506058.539:117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c3ae6b19 code=0x7ffc0000 [ 2689.896886] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 2689.896886] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2689.896886] [ 2689.941723] EXT4-fs (loop7): mounted filesystem without journal. Opts: noacl,,errors=continue [ 2689.949378] FAULT_INJECTION: forcing a failure. [ 2689.949378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2689.950804] CPU: 1 PID: 16094 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2689.951549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2689.952444] Call Trace: [ 2689.952730] dump_stack+0x107/0x167 [ 2689.953125] should_fail.cold+0x5/0xa [ 2689.953536] _copy_from_user+0x2e/0x1b0 [ 2689.953963] __copy_msghdr_from_user+0x91/0x4b0 [ 2689.954465] ? __ia32_sys_shutdown+0x80/0x80 [ 2689.954938] ? udp_v6_push_pending_frames+0x360/0x360 [ 2689.955484] ? inet6_sendmsg+0xbd/0x140 [ 2689.955911] ? inet6_compat_ioctl+0x320/0x320 [ 2689.956381] ? __sock_sendmsg+0x55/0x190 [ 2689.956813] sendmsg_copy_msghdr+0xa1/0x160 [ 2689.957269] ? do_recvmmsg+0x6d0/0x6d0 [ 2689.957688] ? __lock_acquire+0x1657/0x5b00 [ 2689.958152] ___sys_sendmsg+0xc6/0x170 [ 2689.958573] ? sendmsg_copy_msghdr+0x160/0x160 [ 2689.959053] ? vmacache_find+0x55/0x2a0 [ 2689.959480] ? __lockdep_reset_lock+0x180/0x180 [ 2689.959990] ? lock_acquire+0x197/0x470 [ 2689.960427] ? find_held_lock+0x2c/0x110 [ 2689.960872] ? __might_fault+0xd3/0x180 [ 2689.961314] ? lock_downgrade+0x6d0/0x6d0 [ 2689.961759] ? asm_exc_page_fault+0x1e/0x30 [ 2689.962247] __sys_sendmmsg+0x195/0x470 [ 2689.962683] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2689.963155] ? lock_downgrade+0x6d0/0x6d0 [ 2689.963617] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2689.964153] ? wait_for_completion_io+0x270/0x270 [ 2689.964688] ? rcu_read_lock_any_held+0x75/0xa0 [ 2689.965206] ? vfs_write+0x354/0xa70 [ 2689.965616] ? fput_many+0x2f/0x1a0 [ 2689.966018] ? ksys_write+0x1a9/0x260 [ 2689.966448] ? __ia32_sys_read+0xb0/0xb0 [ 2689.966906] __x64_sys_sendmmsg+0x99/0x100 [ 2689.967375] do_syscall_64+0x33/0x40 [ 2689.967786] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2689.968352] RIP: 0033:0x7f9d069ffb19 [ 2689.968757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2689.970774] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2689.971604] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2689.972374] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2689.973155] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2689.973936] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2689.974734] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2689.979421] audit: type=1326 audit(1700506058.660:118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f06c3ae6b19 code=0x7ffc0000 [ 2689.981851] audit: type=1326 audit(1700506058.661:119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c3ae6b19 code=0x7ffc0000 [ 2689.986519] audit: type=1326 audit(1700506058.661:120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c3ae6b19 code=0x7ffc0000 [ 2689.989274] audit: type=1326 audit(1700506058.666:122): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f06c3ae6b19 code=0x7ffc0000 [ 2689.991864] audit: type=1326 audit(1700506058.667:123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c3ae6b19 code=0x7ffc0000 [ 2689.997450] audit: type=1326 audit(1700506058.667:124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c3ae6b19 code=0x7ffc0000 18:47:52 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 21) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:47:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2dc00, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:47:52 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:47:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:47:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000f00)={0x0, 0x0, 0x1, [0x9, 0x5, 0x2, 0xf493d96, 0x5], [0x4, 0x5, 0x5, 0x401, 0xfff, 0xf7, 0x788, 0x3, 0x1, 0x81, 0x81, 0x0, 0x4, 0x81, 0x9, 0x100, 0x7, 0x80000000, 0xa3ab, 0x1, 0x29, 0xfff, 0x7fff, 0x3, 0x200, 0x8, 0x100, 0x4, 0xfff, 0x9, 0x3ff, 0x4, 0x400, 0x5, 0x5, 0x800, 0x2, 0xf7, 0x5, 0x100, 0x73f, 0xfffffffffffffffd, 0x6d3f, 0x1, 0x5, 0x800, 0x3, 0x9f83, 0xcf3, 0x7, 0x3, 0x3ff, 0x0, 0x5, 0x7, 0xb4, 0x3, 0x6, 0x0, 0x9, 0x5, 0x6, 0x4, 0x80000, 0x9, 0x8001, 0xcaa9, 0x81, 0xfffffffffffffff8, 0x2, 0x4, 0xff, 0x0, 0x401, 0x6, 0x7, 0x8, 0x7fff, 0x0, 0x2, 0xca9, 0x3, 0x3f, 0x742, 0x3, 0x40000, 0x0, 0x9, 0x80000000, 0x5, 0x4000000000000000, 0x4, 0xfffffffffffffeff, 0x5, 0x1, 0x2, 0x7, 0x8, 0x8, 0x40, 0x5, 0x1, 0x2a, 0x4, 0xa000000000, 0x80000001, 0x81, 0x56, 0x0, 0x100, 0x100, 0x2d5, 0x8000, 0x7, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x6, 0x0, 0x449, 0x7, 0x10000]}) 18:47:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 18:47:52 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x71}, 0x0, 0x8000, 0x3, 0x1, 0x0, 0x0, 0x2, 0x0, 0xa2b80000, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x9) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) fcntl$dupfd(r2, 0x0, r1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x75) lseek(r1, 0x800, 0x0) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f00000012c0)=""/239, 0xef) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r4, 0x8f26d5309b039a71, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x7c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x8040010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x100000001) 18:47:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e21, 0x30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="8df0a68a1ea40471865b273cbf340c4e064dca0f52c3e988aa8d5a08feddb7d3d3a7d1ab15f164eabc3802f6087a758b21f0958304c2a6e6a081b071ceec8fa19411cafd2e2171bc86906fe091de92adbaadf159924bbb23039a890ac191082eed3d4ea02a49ba17ccec37aeddf9ecd671cdf3d10dc985cb5cdc8a10b88b96336abdb935cd0c3cd32de7c10e36c05fbf6b307fbe3015c1d1f593de7fdb3a15a8a8d086a568e231ab0459346a16d0711bccbbf1f681a0a52d8046a30ff275e9be3c3618b2f7590c3b373e8993ab0abf392685631fa37fd827f210b53dd7afa6a14f24a25372cf1bf8", 0xe8}, {&(0x7f0000000380)="acbdd165d3db6a01fe5c8603fc660a71b2f4140243ade0baffe9a8137c67b07fdf60127c3db925e5fc8c001297b3e1af5b8170222083959a14c5b2f35af388afd5e9d17949a46af0623491ebf0a5c3cce0b963e9b488225ce8e03e5a94472c19a58e17ddda0244ab7393eaa4872649d30c31fd42b33cab12147c6e0afc9f69ba5e8f7efaf24df397290994a83461c8ef917ebf1c305b974495e0d807febc59f2851635b06873bf69ac61133d", 0xac}], 0x2}, 0x2004c021) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_io_uring_setup(0x7999, &(0x7f0000000280)={0x0, 0xaa84, 0x4, 0x0, 0x19e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fed000/0x12000)=nil, &(0x7f0000000300), &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x7ffff000, 0x811) sendmsg$inet6(r1, 0x0, 0x4004002) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) [ 2703.865960] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2703.876563] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2703.928088] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2703.930431] FAULT_INJECTION: forcing a failure. [ 2703.930431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:47:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) fgetxattr(r1, &(0x7f0000000000)=@random={'btrfs.', '@*){\x00'}, &(0x7f0000000080)=""/11, 0xb) [ 2703.933457] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2703.937119] CPU: 0 PID: 16120 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2703.938702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2703.940365] Call Trace: [ 2703.940906] dump_stack+0x107/0x167 [ 2703.941657] should_fail.cold+0x5/0xa [ 2703.942441] __alloc_pages_nodemask+0x182/0x600 [ 2703.943411] ? lock_chain_count+0x20/0x20 [ 2703.944268] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2703.945510] ? perf_trace_lock+0xac/0x490 [ 2703.946370] alloc_pages_vma+0xbb/0x410 [ 2703.947194] wp_page_copy+0xee7/0x1f00 [ 2703.948005] ? print_bad_pte+0x5a0/0x5a0 [ 2703.948838] ? lock_downgrade+0x6d0/0x6d0 [ 2703.949699] ? vm_normal_page+0x162/0x2e0 [ 2703.950573] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2703.951685] do_wp_page+0x27b/0x1390 [ 2703.952478] handle_mm_fault+0x1cc7/0x3500 [ 2703.953372] ? __lock_acquire+0x1657/0x5b00 [ 2703.954290] ? __pmd_alloc+0x5e0/0x5e0 [ 2703.955147] ? vmacache_find+0x55/0x2a0 [ 2703.956006] do_user_addr_fault+0x56e/0xc60 [ 2703.956930] exc_page_fault+0xa2/0x1a0 [ 2703.957757] asm_exc_page_fault+0x1e/0x30 [ 2703.958656] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2703.959723] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 91 2c 1e 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 72 2c 1e 02 66 90 48 bb f9 ef ff ff ff 7f [ 2703.963665] RSP: 0018:ffff88804ee57cf0 EFLAGS: 00050293 [ 2703.964808] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020005038 [ 2703.966348] RDX: 0000000000040000 RSI: ffffffff830fa6f2 RDI: ffff888018338938 [ 2703.967906] RBP: 000000000004c000 R08: 0000000000000000 R09: 0000000000000000 [ 2703.969409] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000c [ 2703.970960] R13: 0000000020005000 R14: 0000000000000400 R15: 00000000000003ff [ 2703.972563] ? __sys_sendmmsg+0x1c2/0x470 [ 2703.973467] __sys_sendmmsg+0x1cf/0x470 [ 2703.974330] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2703.975304] ? lock_downgrade+0x6d0/0x6d0 [ 2703.976244] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2703.977327] ? wait_for_completion_io+0x270/0x270 [ 2703.978408] ? rcu_read_lock_any_held+0x75/0xa0 [ 2703.979454] ? vfs_write+0x354/0xa70 [ 2703.980292] ? fput_many+0x2f/0x1a0 [ 2703.981104] ? ksys_write+0x1a9/0x260 [ 2703.981944] ? __ia32_sys_read+0xb0/0xb0 [ 2703.982880] __x64_sys_sendmmsg+0x99/0x100 [ 2703.983826] do_syscall_64+0x33/0x40 [ 2703.984663] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2703.985795] RIP: 0033:0x7f9d069ffb19 [ 2703.986629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2703.990671] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2703.992376] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2703.993931] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2703.995584] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2703.997205] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2703.998714] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 18:47:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:47:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x212000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) r4 = openat$incfs(r3, &(0x7f0000000080)='.log\x00', 0x201, 0x89) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) fdatasync(r0) ioctl$CDROMREADTOCENTRY(r2, 0x5306, &(0x7f0000000000)={0x6, 0x5, 0x0, 0x0, @lba=0x881, 0x3}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 18:47:52 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x608, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xff}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x1ff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffffffb9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)) 18:47:52 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:47:52 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x11, r2, 0x8000000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000000)="3e60739ea3a1cf69ec9d251298470fdfa8c83f4b99d46c6c979b3c8ac3c8f53c57", 0x8, 0x0, 0x1, {0x3}}, 0xa9) close(r1) [ 2704.431371] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2704.435431] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2704.501508] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2704.520601] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 18:47:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 18:47:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'geneve1\x00'}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:48:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) fallocate(r1, 0x2, 0x7f, 0x7f) close(r0) 18:48:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00']}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x2) syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x410200) r1 = fork() perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x40080, 0x0, 0x0, 0x0, 0x10}, r1, 0x0, 0xffffffffffffffff, 0x0) 18:48:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x18083) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000001c0)={{0x8a, 0x40}, 'port0\x00', 0x8, 0x110000, 0x401, 0x3, 0x3ff, 0x0, 0xb3, 0x0, 0x2}) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:48:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0xff, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000ff7f0000000000453ee3b0b0d1d685bf91fcb8a33496180b22c65a72a64fc7d47feb8ccc0db0180f74278c"]) 18:48:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x84, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffd831}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x90}, 0x4000) accept4$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @multicast2}, &(0x7f0000000580)=0x10, 0x800) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/164, 0xa4}], 0x1}}, {{&(0x7f0000000200)=@nfc_llcp, 0xc4, &(0x7f0000000380)=[{&(0x7f0000000280)=""/17, 0xfffffffffffffd8e}, {&(0x7f00000002c0)=""/158, 0x9e}], 0x2}}], 0x2, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) 18:48:08 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x80000, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:48:08 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:48:08 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 22) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) [ 2719.614420] FAULT_INJECTION: forcing a failure. [ 2719.614420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2719.617434] CPU: 0 PID: 16214 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2719.617808] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2719.618871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2719.618879] Call Trace: [ 2719.618905] dump_stack+0x107/0x167 [ 2719.618930] should_fail.cold+0x5/0xa [ 2719.618967] _copy_from_user+0x2e/0x1b0 [ 2719.625275] __copy_msghdr_from_user+0x91/0x4b0 [ 2719.626229] ? __ia32_sys_shutdown+0x80/0x80 [ 2719.627155] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2719.628243] ? perf_trace_lock+0xac/0x490 [ 2719.629107] sendmsg_copy_msghdr+0xa1/0x160 [ 2719.629997] ? do_recvmmsg+0x6d0/0x6d0 [ 2719.630826] ? handle_mm_fault+0x9e9/0x3500 [ 2719.631731] ? __lock_acquire+0x1657/0x5b00 [ 2719.632380] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2719.632626] ? find_held_lock+0x2c/0x110 [ 2719.632657] ___sys_sendmsg+0xc6/0x170 [ 2719.632684] ? sendmsg_copy_msghdr+0x160/0x160 [ 2719.636978] ? vmacache_find+0x55/0x2a0 [ 2719.637828] ? do_user_addr_fault+0x5b0/0xc60 [ 2719.638771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2719.639860] ? exc_page_fault+0xca/0x1a0 [ 2719.640706] ? trace_hardirqs_on+0x5b/0x180 [ 2719.641592] ? exc_page_fault+0xca/0x1a0 [ 2719.642445] ? asm_exc_page_fault+0x1e/0x30 [ 2719.643380] __sys_sendmmsg+0x195/0x470 [ 2719.644201] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2719.645104] ? lock_downgrade+0x6d0/0x6d0 [ 2719.645976] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2719.646990] ? wait_for_completion_io+0x270/0x270 [ 2719.647995] ? rcu_read_lock_any_held+0x75/0xa0 [ 2719.648955] ? vfs_write+0x354/0xa70 [ 2719.649721] ? fput_many+0x2f/0x1a0 [ 2719.650476] ? ksys_write+0x1a9/0x260 [ 2719.651292] ? __ia32_sys_read+0xb0/0xb0 [ 2719.652139] __x64_sys_sendmmsg+0x99/0x100 [ 2719.653033] do_syscall_64+0x33/0x40 [ 2719.653809] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2719.654889] RIP: 0033:0x7f9d069ffb19 [ 2719.655668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2719.659552] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2719.661146] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2719.662621] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2719.664183] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2719.665653] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2719.667190] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 18:48:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x3, 0x0, 0x0, 0x8000, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x5000c, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 18:48:08 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r0}}, '.\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x1, 0xf194, 0x8, 0xffff, 0x2}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) 18:48:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x9, 0xfffffff9, 0x0, 0xffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:48:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x11, 0x1, 0x0, 0x4, 0x0, 0x0, 0x4880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x3a) vmsplice(r0, &(0x7f0000001180)=[{&(0x7f0000000080)="ac994287d2ad2071d8c6a804a5ff6789611b5619e59353892a328bddf64fc28f890d96b555ffd8d116730047e0eb7a7e697a9d0e7b342505e35ac042626d5da3729242ba1e8df6a44670373c30efc0f63cebc26a36e389e1feda2d5942ddd3144e47accd9b88746c7ffd84c1f47710cb820ec1ad638dd87ced8a097a1d93b4aa0d5638071fc1e0f5d1dc8f9300989e7343900f540a2b11e2234c7272c1817b5d187d796c08866895de69d2086c2f14dfd8195d586231b047fb4f41d62cae15e074e8eb4fe33faf664401d6b13de66cc417ad8bc2b9693527b9bc41fb191584e6886f1c23eb8485c2d59ccc5b74c74230111552fee42748778200f0a2a755838ea862443d4c887145dbbdc7f5dee849e6bdc58963d321f5574bab7be33f5c9d8565fb1621f8aa66674f0086dca47bbb691aa7394986016855c1cddffb4bd9b8e1cb73744199399a8ad1e29d146d657462344dc5d3e9e92f44e47961f224f0db866670b6b50867b0cd82c65f7205da7689a7c7b6dd555e8d24de405a2125b0cbe78f9549539689f5746a5cf92256dbe5ff1c948d221055aac27f417475587d392d1d9b0bfe9ac5b52448c4c72a8948ca9b7682523e12d1fc61805f8bfd6fd0b19b79c5b244043773999b4642428060600a82a443f2900112245eaa602477bbb96a0f54b78dd2a04c30c3634387ee0db5d916cea89ba3065d946c37e322e4e8b7af10dd1d6fbfaa287b03f72c88ce8e3c44a1dbf0e664b886202780258f4b19d000f61edec9d20e2e5ef58bec9b2e15d90fbffe2fc50b4e383ac21d1fceb17650e972e2e42e0956d994354420298654cd96b3e0d2346bdc971051612511e8223021fc76d59781095a070b8c7d07f28b7a3ca1bd8a9b495cf0daff0ea456c1c769ff963e7d0bdd2d30a497de873b0ca02e34612ca3c487bb8fd9cf2b9f5c8fb37f58925f4fabaf06f9f032b77ea56419747619df0641e224a6b3fe751e09085d5d19e3234feec6873e7b5f05207f747f9c33a93b7315d1dcb46124a4c05fd5340b6e61baab63b471f6e301ed3d60bd162ffcfb1ea8c2b8e4826f7c35d60408696bcd56903ab1210c9c3bfd3f405052f8c78fc86e367fa070f223cb45cd5937e36fb02d8c2bd426131fcb21fd316376b7dde7ad81e097330735e81a378605b1b3fc617fdc221a4990110ed78f789396f4a661fec5e0c95651cd5b9526e6c77e09e276f9f71e1ebddc2173ce185603fa3109ede785d9a8b97761a6b3866fbc638f10df38b7de8246b0c340da85ea49d27c3184a7d087030c4683f27177dad215c582faa7d66e3cfe224661bb6d3f0cc20416b3a557333995de4bdd6994aaa295409fdae7cf950ea892f1297a5ee723e37ee605e09901a44d54ab1dbcba27463040672bc8f38e099fc7511ebd1ec7163bbb342703eedcbcb85e337625756396def7434c97061d43876d08cb344360604dd305e14fa9ce4d831d6e1d9b893caf20039441557ab23bb613098d6a0d884eb997eef255707fbbd538387d758121a91e2f22ed3c650fb3377f37f94c5ebe7513668c12302877c621a6257e46bab25c7c4ea3b73f1b349f737fcdd152c2afb556ba4e8452eade82d744fd48f4f3a7a11dca31000cc54facb6e8d557319f229ed23d9fd0de677de9d17fea865dfa549cbf2265a4668cff9059e5dab83691a06027e35c35da790ad918963298c2e07f272ff22612297befb442efe5566ae79b9c2d0f7c4098716bdf6a996cf1371eb4a9eb4d7e7d435da5ded27df843fc43f533e65f75c8586cb816c52ea121495c7a57caba13c68752998bc3b14f662da31bc7b0526d5c2c9e47ff682e200741524d68bdabece8059f9795d4c299cd22bc09b12fbd373e7cc89084186b742e322a6c5e83c5064fac00d4332ccc1c396bb3e2debf4d2b1d0ce527c797baefb42f2262c6de7f34e2a26bd998d2bde223be870a045543dd6c25759bd40f66a39817201be698c66b7b117dbe0495f60f1e4526561e59fab2df81ec5d83b3ecd0f08eb8a5d351ce9e1eac0182c67ae38ec216d58dea9066846469465556e1274170de1d591f6a095a552df898c8b63a0901b119e4795938e00d980323a82ca49599ddd9a4ff2c3defb4f876f3b18f2dd94776226786261cd1254ecb61b225556f69bbd6160bf969591d9ec7a8b6380c8f5c8e89693c5ce06db91dba8b2f6a0e8fb9fad845b1074f2d542cc1acf0925a579b65297531e7a4b0cc820644e4e97fdf5587490239f296e800310ad22f4c6989324cfa41a819b8ed093d89bc8c91604342afce4ac0d6039ac3232929af349f8623f78f82b099e360848b71b85db541db7eacfb372b08e98533e7d8b052e819f40da59f6fd57e86b8c0ec9038943dcd7485a067cf754d7be8ef44909f9403ebe51c4f4c2db93adde0cf4623c7a36d9f61d47cc8310a38341dc37f9de5c9d5aef893328dd2afd9b88eac3f0b7a6f0cb483fef559bb01448b39ecd2e7afd99002fcc739ff78763ccb0ece1c7560c43079b43642cabe27a88cc037b24d5bba97ff0ea6fb5b373dee559e3396a9a0c14d6ba5523d0eb0992f82f397340d6ece1e5064f9a0967473c18490c5c597a0178aff4b8eb91ad2617f6621f42a27e51661e2c3dc987d7de998675f416ce921985eed8ad38fc7510c622d7e745bd7157f3ee1c670e5ca96fa134360c6626b2991de55a6c77645f83f5b85cc652322068c1f4e0efd3ab6ac66e83f2702fb775cc8bd5d47263712fdf39a84d664c0c0c465605906df3982468fc37999f4d46c58374ff29f143fb1130b386fc0833a20bc9a6150c31f5c87cd864d16a042391b72f52f78470fb44d746b7545339f29fe1010651cd2c8244b7714fcf66abbd82f6b63c661f28a7fded3c944dbeabacf9e3cdaa7be3bca0bd0b54f8d2cf02a7e07a43de1d86fedc3547ba14748abcb2c2f7257fc576c566c21870ad20f8f8b9a57b69b73b4e941d24495a1b1b139893cb9492f456347c2b121a1f87d518c6fbf8bd90a6cd14c7eb3af887652f284fd0815a059a4ee49195cf903adedd0e79c2ee7067f8ecd9ac1492b7c9e4a41988c870e5cbcec35f00cf0eb77e0e30c524e6c6707f00cffa396473def9efcd13f580ccda6a832468f942079bb16ab878d13ee7d4c56c5a39cb5ae83431c925d3dbc1efd1c8dd6d51697a4c162acef99f34cf5f37d71db3ccf701a93b3d570d349871be96d5a0e2386edae2422f2f22e051f3061924eddd9a17330f3c1c490e4e5af4c78c46e4eab7e41d7ac980ea725aa30de9742aa7a0993b8933ddaee83abf070c863d079ebd96ca27a9604545ad5f5ead7a79e7f0b7f5561af2723cc950bfb62734a31469d6f7b22414abad26cbf7f56fe9c7d7aa9f99a898c6f484a843e883ebd1b4671097a7747daeaec77ccf1261ba7a9d7edc44a4086270d92332fe0681ba99db625cff2c63a57bd9e3d22db075e232826e6bb37c4aa26c24cf64605017d75517e68d2d0db3c14c42688065b13ac422e650595bd191f5c72851d4329fbe9eb03fd8a378c148180457e5760f2249f28488ffae37d9d8cdd9d01bd32bbff176ffc7f9dc0ea3a0926c7fa9b1597d545ff77b22ab7564abe00ab17bd77c892c6e0f4c7f2a8e4b9dbf67783843e29d9ba1ca4af1461eec0bdf3eab8d17d68a8e5519a31a4fa3d29f04060c4280523ee298b3a5800f233e921efef027a998d751ee9e8b7049bde4879ad273c1fc200c6d491deadf7a890fafb011414fead567a4ef53a762539e5c3a65942bed677746806466158274a79673b9c558c34bf77bd524a1a01d34431a0ada8af176542bf6c02735f3829d9b934997fed5e50ee5c6443176d576b4a03fa76ccc7bbca47d275c0084f5bea3a1f4e8eeb9c3b797b8a591bc1e2870af3dfd77619601f72ee2ac62ad1f1838b58d14d5dadfce3c998f97fabae84047c30d38a8d78547de5c985096b7f76ec8c9c648181461666f66d54f0e213a61fe57047eb6b37bbc2c24405dc81432c4b8d964499685e3a9415e27be6f7b8383186ea7886657f5597a76a70b49ed8cf0c0de1c9ad4383f33634fb4eab0913f89467247821974612e2f4a89fada6807b3694de3d52786d6febcd04a8af124d564dfca326d1d1a79a23bb23588758e537e4f02ecc9d56e43430428167e5306a16db4401b71be2d2a0aae609b46295f9e9990d529a9350d5cb7bac703e21df4ca5a6d59955db75e43abfcb0f6db262df95e70164e58c86e514114009d01133db4ec06564b2662979d813076ba1a601c598d04c543466ff83ab934f5256466fc78717537d1e0ca51b4c3906a59f58a2d4d46bc0b4f57eb150c54bc4ebca027fbdfddfbf5c78a195466d9f6c528000321078abb5a38a6647ddbcd906ec40eec78541b78219aac61aaddd91f508061b0e3f47331404870563028013ca636a88249a586ccdf81bd3d30b7d8f4bcbd094ab80c5224bbd6f3621435dcf59bd3b658d9b476ede79981848f0f0f42af7dd62ccb6fd6aaeeb64e3c5bc606ba024cc3ed9f317dcdf2e57bcdeb7a85c35666f90706bc317cd77ebd80bd1d41a44747fd34b7db1ee34eb9a13417711eb3eac3613b3befa9d4e659350dd8af9396d2289bca89d56ba20e6288be6c9a4eb88b572d7579433760bdecced027f050cd37e29f3f11bc66b147df5e10eae9a11d50fbf59bacfffb0f10cb2b88b927a9c286309e3700f2c3fb6c3ae6b4a780c909396608b0ace18e819deab068d3181e71af7ac9cc21497839e947a007fa7fd2fc830b26abfb908cc0f536708731791a729ee87b2c99344c463e88e157db88065dd4f6cd6079b87e50932799d19e97274fca0bcb2a751a0ab9393a8da6ddd0520145e99bca9bae6d40423130077828406d6a5ddd51a04e884542671ca621a5408d611d96a17a80024bda9dc9b40d2eddc57841178a368ff2a3b4698821f1db3c9c2e3222653c6b446cd713d1281b063dff0e75c4960090bf641743765f877adb55cc6aae2a2df8247e8ec847f6f1bfae66cf09aa3426e707778c2faaec0a329ec1688e0beeddab4d4bdaf1046b6d92a468114309fa56076d54946e8289dc55146ab95166cc205f72da49b5035515f8a4c9964a89367598f7d4dcb45d48065458853bb9dae615ae4e3d8d2fa79832b3a4d811e77223246d05c4a2e5f0c23c051984cc9462a869dff047859673f6643034451a852ec93057a474281d30ee38788dfc77da0eec320fc554e1ef9efb82ab60b0d544d6142ea7168eeafe92dae5413790fddc0ec146238fd88dc2bd5cce32e1e6b419afd057015ce1dd97dafa6be6139a82818bcf8698a4be7aa7cbac57cec0d86fe49b0c19b3593bf658a860371a48dd6ce4929005d74bae1a558fc2159e34ed9290583d6b9bc627540a962361777304cdb810a0e05853eef639b058094bd6d61965b2c3c9fc9e9bf57c252bec7c569f3b827e45da0fdc53bdc97c6b296febe683552be0a19c01713cd2637fef54b13020c3bff289bd09a5c19b94854867219077cae8ec928c6f961ceb309281e3c105c417832f231f7c169fce6eb9e9e5c79fb55acb73ab2ddb5c826c4b2b872d397dbb1335dbaacee9426ed886140656fa2d6741963035ba39beac81f7996b6597f3cc0bf0d1a4ab780bc55b75d4440fb3d6896908a8059269be517f1a98d4d490b6ed817a1998c561e009676979919335ed964dbbf0e99151ede9085ea97cb9d006c20baf26ba87039b6d266010987777b33b3a3642ee8e1c8e1526fbb177561b960b2941c2bd7de790c52dbea3424f4cfb45e542572", 0x1000}, {&(0x7f0000001080)="8488e6ba22335d805183bcaff2f0e5965bfd6a430222a7b550500288ed69963e397341903d604b5b851318f49e8c60a904974c9652f8dcb7049caf7e6d9913485c56c779eb7d7288a1e83b9c697efc84a8721469e35365be248de01e9269074108512583b1efe4080f11c26fbc31e08250185b151243bf6dfb83459bb6492a3b606bc209c786edc25e74227bbde73f7c6de542a3a5d103db9db3e3f154eaa702ae1b61db1d95d84806afc11627805d9ff54d5758ed91919ab3c0c4aba714d398a0", 0xc1}, {&(0x7f0000001e00)="1e22f8fadb7a539edf0aef633cd8803d154ed6aa55b981fcdddc105ee99f0015551d018659f4a0b8c766e66aa50c283c9f4694ccfbfaaf998d41a5fb52890182a9965d9df8cd1b4d8efd5a176b0142ab370f41e47e9a347d4b2783a4fce5846eb5a7af7d839a7902e6612477e4927063e921af24858a96eead5aefd6e9adfa83adca28299385a6be83f3d702abf75b480ea9ebd41efd14773b3368bcdc6bc4d331a8bc58774c713dbe8f2e431e9f17d71ab0ae4d3e61cfcc887d48f34f77505a0b5d57c17a37826e3686e486551ab4168f399ff53f0c03eca384e1a04b21ee6bc1e2e1601c15e6d6234cac10fe9506007a790fd49eb366fcc9053525c5b9ff10cbc1286c4ce71e7e5795a8f9862935e5bf8dc5ce6ff5dd56f983a6d92c5b5217f36ecd126b14c79b47955dccb4a0fc4455515a691de97e2111ee02cc8297b6b589e85102a4129c4926e35fa592c9209b9bdcf43602d38d29e6a41c38a8f1ecd976d410ad04398d9f26bb61397762e68df62d23e33127ffa7ebc82a05ca534e88d84adb0fd719a7c2c58cd4fb28c4982fa7a29add88e7aa19ccb3b45b8a91b27e7b6c2a3d57dbad076821c9c3ba47afc7f5d95e0da979d55fa754ce68b7602f5538650b346056556d59e8264c8b9c0da352e7155b5e29b5f00749cf40dd1d939f9402c241dd7aa96d6aa0088a125f8bd2be26a006eefc33783f2a8db4622319b7f05e821ee56022222da987863e21cf11548a2e24f09183d4c881d109654932fc6bad50234391709b3e380013bf6ffff8e8f74a6bc64e051c86ef970ce8167c19da2e996118df00a6a16e8df719d9efa3471b8205c369be435df97cff7a37243ebe93d7d0b055726d34d5085811292e01274d7f666785366b7c361a4ad977783caaf7b47cd7d2dfc60dd132cf12f290edce6d17d60987b334036b8726842a4642c5044092aba335391726cb1f5dcc3de98ebc50a9d88c59f82eecc5c6a93eb5656ea456e2a7237bbbc0cccbb2fb27c31876e88a91bef74502c849be0ffa861fbb6d7b11a8e105e739e3de4c7a383965a24980d6e13ff1f2e5a0d35de4f6d733bd7b7b7f1853603af2086d6eab5379fb33679fabc07fb52daaa0769dd7fe8e7bda6fab4ca95b72ffb95bac0826231960c1360ba28f30467d141f1fd94b35aedac0daca586781ac25286832ff96a2ef16f693ea0338147fdbcaabd79453b019eaba647087cfede1e815d905f30229af1ce3cc846246c58eab6cf0daaf34b464402270f55fea7a2e217e01d903ceebd5bcce8e0561d26555f3f0b5109db467c8a81ad6206fbce8a5d0d918631019f0a4c6e21eba3b426638cd1cdd335f731149a6b4bd9e6955e2652b7fb390263d2890ccab9291888709a7cb6783ebd1960649af9c6352f761ab65b90b8e9c44e7d493b5c65e085999908b1fb4ec973ad70ceab7e00e73be2dbcedf85a066996172ba59e2896d988289128bfe246d6d5250b83cf349973d30c17d4238793c6c329730b32cdc28407aad2116307032aede543b7b9f4c3f94d7f09dab3e8b427aaecabc08099e77bd14663b5256453f5e661babba606551608e89836a10974335dd3747f2a3e459394786070b6b097ab0f594b5bac88911ca8a5d83529e9a5f1ee6fa4b35c291aba602639804aa76e98e6ece468ef97fd28667ab165fc945f4207b78e566cef3559253325a6e92dd394638b5014e38475f68beb97d9a502f1e58c719c3f4acd013d04d1db19d1a7b6cedaffb4a1cc76a2460e6059e96dd938b6bae48896377e097a2801e85f9abd7616c3c8111bd57bcb9e9a043dc5c536dab7b798a44ad4469d5e1c96b915e52747cb303f55e00b0dcdecbc304c0de380ae1288d04cce9c461c240592035cd7ebd051d6bdaf92c7a049d32de9b0ba4a46e650a5251fa859027599da8c71fbbf53bb110ca0c3de7dfb14669324a69ea72dd1c1a03adbb6ef0ea500d6879ec6e1427f110a5b62ef5a9aea923cefea6029125da0d13272ab1ce29333abd8eb554948097e3c231d7e7436f37222e2d25ea8b3d96d2f88dbfa5e828100607bf98c30a76bf496b7d07811d15fbd2813150dbcc333c7968c3a6df8af08d73c507a434596dda11a41d5dd62bbc361287ffffc98d281b99cc6d5716f5b7b041873b64dd922e9d66b21ad31b10d9e793611a6b938b2218730b36dd7fdf43606e0013d0ae1a36a3a2bc8e14aff92e407b4fefce59599b86d0958d0218b9d9f5574c5d71774676b80a88f1afc6bff981486b0f8bd6766871439ab51655925a8a26dbd74cf6e36de2027b210d689677533c797796a56c5bd52293746620613d59d8f254c6581ed04a7e7acbdabea8982790dee5cc14d7408423a7e6794bd1c1ef13d0f004e672d3d4a8615e92ca0e0dbe1b3b5b39f3efe70b46ae8e49e175bb2c5b88697f7c2fca8c0cfe9448201b49989e9f9b29b95a4dac9c70a37fbb75665f3358883ccbe546e4220e2e7e7f689ccb17c1485a32deb88cb10bff532067c75238761ff4aa3066b67a5812ec4086c83e27ecad9b2e13965f08df9781920e666c4ad5cb890e60c46841281c8505c73eac1f278dae30dd388f6abc8082c1801cfe9d88f18cd8c4b67936cbdfa9c982ee4adb5ceae45f0ad1d26643125517b7479c1156e0f927ade7d4add4ac626e125c343a7aa833a0549ee95b8cbfce41d27c691c981ad5f929d91ed927e185170d30091cddb3230e52f008d78347b59f107ad880b104b34ac1dc6df00ea112f3407f04bdaedca4b944d7de270a5be422e167ab66d25b172f2f9107c552ec6619a2cc246e95e243e2594be49faaa9f3391a7b5701187bf93dd15b5e52529fa9195a1e9a1e320e9adde1bf44074938e04ca8abc788a686acfec3769c4ef2e3d6968faee98055ac0a8fd7d749af0817c8d47896de45d785609594d2dfba75d7289ea80a48fd8c269755319d3dd104defc0ff654a27116cbb207aea75a33780a56ae7db62f769d88bb1a00e050459412f6af81433fc216b1b8868d98388481163d75f1aeeb0d2bc2748459b65adfd4a22c41b172ba444e4b565dd6f831a5d9a16fb77012f7a90c56742f94a0b9a4662a0a4ef0f297557a5f3a79751afa81c9230e6588a1c333803cdb39a3432ff8b514f6b54dca95e094fbc3882726ea594807c48a9a449424de78f0838b04b39b49b91cd756fc9526b36c4a52c293ca5f6b7558abc1320c25e6e490d08e657f0638cbeb8aeb49326b1e46e50da1b657a555ebf2fe5a56b702d3d07a8cd5cebd4add3cc55c51bbfa71e9d5283a4a63d438434037d41e01356dd0f13ecad3416f506df582ae04f74d9175b8f27c9c15cf3c0f734e549cc16c73c970fe80b02b686622cb2ace75dffea5968232fb70c75ab85870637d67bf6b2c6fa1efdc1cdc91082c02a83bdc6df9b0c8a4c0e548c20772fc69a7e3705d81e1c1fc7c23966662ee266c62efd46eb070aa993f48d61dd775840fe39d3d3bcde4306eae354b57714da42e4ac5bd24b31a248964891187e0f4a52783090181f51088c89c182700826719165996f703513c4fb4721a5c99dddb7cced01a07601972e9e67aad52cb6b5d9711147926a9b2cd2a9a2f52acec658db75bbf2bf9fff6e137b30039d58fed62014a0ee45605cd895deb0faa2ddd94003733566828861a90542dc771863f037ee23689424f65025dd9da3f101631a3b1f0071edcbc9f158fa01086d43be01d1874ffcfe6f0644a030a667fb1f75c7a5b4a0961ba7d6f50544191121ad2ca6662c01154ec14360542a1d04784aefc8716df54a15036155b75e75ffa028286a30c51e869ae4822cea8bd74041adae099daf88d1ad09603e55e0965a3402936536b987aaf64d06d0de4a5f8e52bdd73ebf253d1943c649831dedca91dbe4f6c57c5a6c169348bcbc6435bef26731058a66c1878ddd9b9eebc6d92b3e406cb164e43f5870dc11caeb593c2145fffb85d5d2470a576ad2ae9dd42fa05d3d2a5dcd51aa2ae010cf69fd09bdcfb4b2760cfe92579c5c4a928fa2aac025e7e8aaed168ddc9541aad64bdacddfcae809a05408e6ef44ae25a845b8af9426aaabd758547ec8ddb91fa25ef0a33c6951e389a939572f467ee1a4da7771dd374f35580b4a747980f65b37667d13a2979cb6c7ea702a9b2f7f562ed59a3d643d09b1ac60e5cf50c61f2b65783b6d12ed9dc961841c2a28f904d066fa4968829bc04c4363346cca6234b80b094a97bd03c51240773eebbec0bf817244b897d8695c502087e8c08050c1d709a5e48fa83ad8e667046ef542f5eb4e9921dad984fc812bcd97346dcc87b58a2386a6f56f6d1fcca14928bd253e9243afcea92e5f27059ab47299b0152cb6b33c1de0401dc5e8ee55a86d18a3235b7029efba0696479136227e336f24bd35ccbbc8a367a507478cb248cbce5ac996e220d7e2086b4674be355709e257008c419044718b58371cd57a9eb12ff383d078bfa1cc031e6c6cef3c877f596bd035c44101b30c508e32f112314b4ee8aee678e3981083567e0eb419b8225e4e04c4a34c7ffb77db072f0a15c69b04cfc2b4ebf557d0366e1b5be1876355a37924f874d6aa9b790fe997dfc10a09e80d617ddb8e000e8fb0cf25723fe7de6aecd40e80c5d299e2b4dce1a640e9f956b6cb65c5395e5d4205a7da010ed1353314c890cfd0c60b66b0c43e2edad735e3f59d35bfea61dc878bcaa2215f0780e244d035df4a80acf38eed79c271f232bfee2e6f7dfcbf3bcd0aaea1cde51b24c784b9b6a32de653efc488aec33cade5f4f6b19ad06ba68f7d92e347b33e162d0a27caa6a7ac0c301e29b1466f440b2a51ecaf6a5eef2e18a12bb674463248ef5b5ad4949fe2bdab8ad2d21ee3fb3a1ad6f5c81bc754e4ab74323776dddf29bf27e32958bcc3bd65f04d3e88af09219e11a3fd2a6ce9052e8f9e85b307636a4563e189e25649e5fa0d9fbfffe48ac0ba85e9f8069d4f4d1c79b15f1eefea0c7e826904bcb5420c13b0264d85ed5daf12799a6b2a3d565f10fd20be8e8d0725b84a1cd5f7cb3d74cc6f2fa3703c852afc5d2d1899f6ca1a2e8e01711081920f4300452a5640c835f89a8b51dde2999df23fa20451a7240217845dea3e9a4a5ab3b30faf057923e04fe308e39409d1541067bd700850c407bfd8ec45b47b5a701bb17bac3bbd57119bffeab2afe9fc66d45249b90e5675553a90452e4bfae2debc3f7da362a77cd06e356713a4caeea060937eb644be8e9dc341d2640941622ea93e932a94d690f74b517b79c42825aaf819f1790b7994a6c6d136c2fdbd061303f6122f3ebab05a9087c7ba5a2da5149a38e7b202a1f816e9197a0caf3b6c091926551ebc479e025a6c07e3513121365a67304f7ca04d528f692f35019ea57f0d617e5e0f77bc51d7eb054fc9a454a32a880cd0c0ed230dab3a8a8a84f89fdbcd7681268c70a165943e789850d28c9bf75161c306e540d6c4a969b0c31cca7807de13b184177abde5cc613e917f8343b0697f74753ed88023548be3e5a2da068724304d3fd816d06d709c2a748e539053104fb16b261f339927c98cd40ff17d4919227e9959d62149c87ebff1bded159daa6ded205f67b79e79e408e18ae61367e54c355a71a4e28d88c9812745ef4722a0f02efaff7d1f74de34c32c023f53b520e49721b885c5c5ef827d3141c93064f0a67c8e2ee8c9fcbb3d3b018d769470f50c7c51e45ea3a0bbeb99f0aa7687e00eee71e6102b49768ca47dc0305be05d3d90890c405eb342dda8b7e40bc04491b15ea8cbf87deb", 0x1000}], 0x3, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) 18:48:08 executing program 7: syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2720.053283] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2720.071465] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2720.105103] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2720.130804] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:48:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb09906d6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:48:22 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 23) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:48:22 executing program 7: socket$netlink(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x81014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) 18:48:22 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8000000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:48:22 executing program 1: ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000040)='./file0\x00') 18:48:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000000180)={0x1, @set_cpb_data={{0xc76, 0xff}, {0x35, 0x40, 0x4, "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"}}}, 0x103) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x80, 0x5, 0x9c, 0x0, 0xfffffffffffffff8, 0xa0000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x401}, 0x20, 0x8, 0x5, 0x3, 0x2, 0x2, 0x2, 0x0, 0x1, 0x0, 0x3f}, 0xffffffffffffffff, 0x3, r1, 0x7) r2 = getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x6, 0x7, 0x1f, 0x0, 0x923, 0x16408, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x18, 0x1}, 0x14001, 0x1, 0x0, 0x5, 0x35, 0x7, 0x2802, 0x0, 0xff, 0x0, 0x4}, r2, 0x3, 0xffffffffffffffff, 0x1) 18:48:22 executing program 5: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@reiserfs_2={0x8, 0x2, {0x2, 0x1}}, 0x444101) r0 = getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 18:48:22 executing program 0: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40010) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff73c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x3}, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) dup2(r1, 0xffffffffffffffff) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) [ 2734.253577] FAULT_INJECTION: forcing a failure. [ 2734.253577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2734.255387] CPU: 1 PID: 16272 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2734.256258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2734.257280] Call Trace: [ 2734.257619] dump_stack+0x107/0x167 [ 2734.258078] should_fail.cold+0x5/0xa [ 2734.258568] _copy_from_user+0x2e/0x1b0 [ 2734.259088] __copy_msghdr_from_user+0x91/0x4b0 [ 2734.259682] ? __ia32_sys_shutdown+0x80/0x80 [ 2734.260233] ? udp_v6_push_pending_frames+0x360/0x360 [ 2734.260885] ? inet6_sendmsg+0xbd/0x140 [ 2734.261381] ? inet6_compat_ioctl+0x320/0x320 [ 2734.261946] ? __sock_sendmsg+0x55/0x190 [ 2734.262446] sendmsg_copy_msghdr+0xa1/0x160 [ 2734.262994] ? do_recvmmsg+0x6d0/0x6d0 [ 2734.263490] ? __lock_acquire+0x1657/0x5b00 [ 2734.264036] ___sys_sendmsg+0xc6/0x170 [ 2734.264531] ? sendmsg_copy_msghdr+0x160/0x160 [ 2734.265103] ? vmacache_find+0x55/0x2a0 [ 2734.265591] ? __lockdep_reset_lock+0x180/0x180 [ 2734.266168] ? lock_acquire+0x197/0x470 [ 2734.266666] ? find_held_lock+0x2c/0x110 [ 2734.267200] ? __might_fault+0xd3/0x180 [ 2734.267695] ? lock_downgrade+0x6d0/0x6d0 [ 2734.268230] ? asm_exc_page_fault+0x1e/0x30 [ 2734.268789] __sys_sendmmsg+0x195/0x470 [ 2734.269286] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2734.269830] ? lock_downgrade+0x6d0/0x6d0 [ 2734.270362] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2734.270969] ? wait_for_completion_io+0x270/0x270 [ 2734.271541] ? rcu_read_lock_any_held+0x75/0xa0 [ 2734.272095] ? vfs_write+0x354/0xa70 [ 2734.272541] ? fput_many+0x2f/0x1a0 [ 2734.272974] ? ksys_write+0x1a9/0x260 [ 2734.273426] ? __ia32_sys_read+0xb0/0xb0 [ 2734.273918] __x64_sys_sendmmsg+0x99/0x100 [ 2734.274429] do_syscall_64+0x33/0x40 [ 2734.274881] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2734.275501] RIP: 0033:0x7f9d069ffb19 [ 2734.275945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2734.278113] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2734.279034] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2734.279877] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2734.280735] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2734.281578] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2734.282437] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2734.312365] Process accounting resumed 18:48:22 executing program 7: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2734.336708] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2734.342638] FAT-fs (loop6): Directory bread(block 3) failed [ 2734.344360] Process accounting resumed [ 2734.345604] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2734.361144] FAT-fs (loop6): Directory bread(block 4) failed 18:48:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) r1 = fork() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x4, 0x4, 0xaa, 0x0, 0x7, 0x200, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x4402, 0x20002000000000, 0xffff, 0x0, 0x9, 0x0, 0x200, 0x0, 0xfffffff7, 0x0, 0x89}, r1, 0xb, r2, 0x1a) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x4, 0x3, 0x6, 0x1e, 0x0, 0xc99, 0x42186, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x9}, 0x141, 0x4, 0x80000000, 0x2, 0x8, 0x9, 0x81, 0x0, 0x5, 0x0, 0x100}, 0xffffffffffffffff, 0xe, r0, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe0800, 0x0) close(r3) [ 2734.379288] FAT-fs (loop6): Directory bread(block 5) failed 18:48:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e, 0x80000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x24f68faa, 0x69}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8c}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1f}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7d}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4a0a4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) lseek(r3, 0x9, 0x4) lstat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r4, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r4}, 0x68) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40805) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000000040)=0xb, 0x80000001) [ 2734.392691] FAT-fs (loop6): Directory bread(block 6) failed [ 2734.402420] FAT-fs (loop6): Directory bread(block 7) failed [ 2734.414132] FAT-fs (loop6): Directory bread(block 8) failed [ 2734.414874] FAT-fs (loop6): Directory bread(block 9) failed [ 2734.438267] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2734.440478] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:48:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c90226b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:48:23 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:48:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) sendfile(r0, r2, 0x0, 0x9) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 18:48:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)=ANY=[@ANYBLOB="013820230000000012dbe6b4d124ef9d0ed8947fcc2517873fed301a4f8fecc8517d48c2b42c"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x2, 0x4, "dbf57d"}) 18:48:23 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) io_setup(0x3e7, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) [ 2734.705651] FAT-fs (loop6): Directory bread(block 3) failed [ 2734.706632] FAT-fs (loop6): Directory bread(block 4) failed [ 2734.708025] FAT-fs (loop6): Directory bread(block 5) failed [ 2734.708769] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2734.714414] FAT-fs (loop6): Directory bread(block 6) failed [ 2734.726653] FAT-fs (loop6): Directory bread(block 7) failed [ 2734.734687] FAT-fs (loop6): Directory bread(block 8) failed [ 2734.738889] FAT-fs (loop6): Directory bread(block 9) failed [ 2734.763471] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2734.773294] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:48:39 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 24) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:48:39 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001e00)={0x11ac, 0x17, 0x200, 0x70bd2d, 0x25dfdbff, {0x5}, [@generic="a6b90cb01ed47b7505cd217bf47e9a3f2cff3892e29d0c30bcc3f6b11d77cd52a494bc65170d37c1f12b15f315950e843199314b774c17c5621d3860497219fa012d92fec85ffcefbf061ad9a79c1c3181e466fd8110b0255be5a2e0cd0f4ca31b414758dc3d7d77912d471d834348bf8de84fe807ee5b6ce949bcd97b8ff30d8edde96ac06f45c3cb09d05ecd73ad63df7d637afb0929c7e6a19e5ab939bd1f15f5d955d116fb13a4a531b8fb1a9e1d508ef5eb690dc0f34ef518c2a8ccbc4850325a48c2ed54e47b848d626d9fe64d88714635f007277a394ddab5c85f0f92a3ecf527ec6da4cb7c47", @nested={0x10ab, 0x7b, 0x0, 0x1, [@typed={0xb, 0x0, 0x0, 0x0, @str='-^\xb8\\*,\x00'}, @generic="29443171989b51a15838dd45e744c58776d058816ac31325b61a315f1258626bedd87f9de2e72f8ad4dde56060698c678b8bcccd83b9a4d05cd10a296ab71acfcb279cf2a446c0b17210010176df8a466ea88238c62f3392c0981fe963e6c94c96cfb079129a823b305d997171f160b913bfdde46d39e3b8f255328e540ce8e2033f6f71cc914a1f47de0638291303f14dd70d905e1b9599a8f0bae75f443ea9ed2b112f71ebbb0fcaeaca35b0202576d8183d33d6bb42bd92719a31c38c035b61c9c1d5e862af3ddb0144e9f1155090f2adfd10e75e094bad4ec7210498ddef067dc36f526f28d517f57f2f2209374feffd0811791c7c549e7475301cdfc475bd7c1beeabb85893d6f068fa839c3733b13e384706a620823a89845491fe0a27a5ae31a1f384be15524918f9be0f48227207b12639ff18b16f3bdb6771118ee84d2d6b99dccf5dbf11a429e766e72fabfd13451f35ed064e99c2f808f0d14c74902a81fec7b93dc26faa02e059a8aa9556672d7dedc0fd62b994d7947a9bb8475ab119961d2b59f8aeccab03a5501f8d8734f86b8b6baf9aad3cc97045e90752e6659ab55c1b64e6cb03397cd4b329ba2d7b8d7ecf573943801120bb3dd89b5ec3b2ce0692e64de5a98899869f685780a2d2075b61a38cb358518734c193f063697207f195b6280407184a241a9a1560ae2877be50df15510fc7be702d074f7cb948b972aada8f71c0ba75f670d8acce1805f636c0d0fb9c44d2f1a3ff0322b98f3c4e520ca3b7878f6818c15520f5af72fcafb3df23e2a7e46397a6bb093124af8f033464619f5593bdbaadfb2a0b14511e61569fcb1191c2f41b8e5da96d58f02e84ddbb868f5e877707df4db659c245e8acecc2dadff3dca1091538bc13986ed50410641d4ad13f9ef538fe060344d2267e9d50c2fbb6cab8f515bbc01febb523269db14c1d22aaaf3e3f50d02f75fa699d61e590ad257eebec9c639e00c089def4a019529369a1198292ad9d91ae1da0973c3f759e3f3bdc17ee92884a5bbf1243d4edabc2d3915e8ab048c5843d3b7602660d2b4fd1f5c1ffaa685943028cbf58e9a90beedf3cdafd6f90527d2795f77c902dec9722e25aec398274330d97dadbdf986f0dd69e89bce2b94f9415668c4d35b116ef64d657891c5a320ffc2c366c022207f8f99d6493b9aff2592122b8a07d50e1b63eca09eed78dbf9fc9916d0c0c0ff75fe8812bee9e2b95dc1f9729768b83db08cae80bcb99de57defe71768a9f7081f0323df49bc82480de869f20fc3e107dceb90c1b0567498def50713dc05a6cad810d5af49f5cfcea6c1dfefa435c8ab79bb7e4a3b82e119c45c0a07b68641b22521dcf80cb45450d335627b75be26016b44dfd78aefd2d65e4eb5f3737b567996e4c0be6e0bc3eb215d18fb77dcf409c45700f5acfd09950176ba2d52b5f8172111ad42e3ed35d9213717d1a3e2741e24f6ef15c963a472bb041da63fd0e767ad141aa7ce18ba1daf5d5e09f363c832423662825be7e76a9b3fd886e7ee3ecd91af67c207ba4b76f93be24a4f4bde2385908c15bd4c0c1ff6e126adb2a4b57e05276f83fff5faf398eb7cf88a4ccdd0a94a4ba72ceeda24d4e6b5ce57b832f3b62983200cd21b9d40751fb212a6ac35328d496d59a56d156a58e15a354609fafd26277c7c8019155a2416ed29460257e3e44017583fd056a425c4c83d7fee21a16222eec8205e56a5f8aa94c672a3ffa162ebed996040159a6a22c2cc7c0ffabe8f4ebf3b1ad0430aab712ddd48777634f380401fc9b7d5e9dcaf5b6542f1c5ebff01f4d9a1fa0c9c511d4403611ef2f978f05c0cba1715e529c4f72ba5779d54cf08874ee43d7d9dacee2719f3d8414ba0c1dc26b7313eb36b4e7247423e845f8b5c4b3d50643fae6ee738ad58b0e3baa0fb87ccae4fdfb72207d7c8d9ec8d11795e3becb64123e26030ae66b5837ee0235d1e47982d4e2472592aa673c3ceae1322d7655883d3763b5f8a91a2c991e9f39efbc1d2754c9d0338767244d72bb4cc639298e4a492a77c846b520a44155ed9c6b659f55c1301e33ae7bdfa3588567c06fef14ae92e189d986c20f5bd9ebe5fe2efa85615dc369d00033ecd8ab2f2d54225aa1ba85e0df46c2286ad73dce64f50ff15afa3af3811bf4d3384134f970a92da45df886e97b9bc43812dfe7b815a393d77cabbce589668d3da45134414c6710d10610afa5b57a53ab541b6e2e224a6937711ca9bcc53906192607d6f360c6f3fe7ea92628bdc56c65f4b4c02eb5081094836f575a6589c49fea56fd1f567e3ef64f2876106cef3abca3cf80184009f279f81390c380006708f5e2d3092fadb1b26f1a5dc9b827c5c8e7ea6160500958ebf4cb31f134eb23768c0605b4151c596a60d596e887f5d87c240685cbc40e210de95049b73de2a37101778594cce5dc6bc54e8f4fe8eebb5248bcaeec2922323eddb7fce14de6bf01463e963c8418fffb1c3f35641465f12a9eaf2bd404c329bdb072102a6ef4e916890a871031dcbcd8f2eb50dc34efed89335ec0733d721fb0a16363c846c71f9c37f5fafedb449016dd62161c7032b2f468e44c4a700b40a6d508695547e1a71b6b54c756220e3d1ae4754c5373d717dba19d6a262c65c8ef9afc08c3f3b37cc19410127f1ed556aab324381c6c3ac9fbb1d98595af5c3f0a98c187c9adbc62f5141da4cd09c97de1bdcfec6a926271064579f68d164d701c268306937e9f4b39ebcf305a1515bc2ef238c518e0a876f8019b42b0c4cd98244e5ed008080571661aedd79c61a7cced72fc8e70bb47c80fc9386588c99dca55ee9931d6757b98238f85a78f1f569987c61bee5f96458fd92ee05c367573d41d23710805989ccc1678106b789a3dedb808f99d88f3b5aa09bbcb6074ad9d415b2eb31c6f10e36bcd2d8ce32733ad61345e3445eda2cc8a2ef810e1dffc093e15773b257fec70669fcc1313799f9265e1615ae8489b0a0a12f3a9222c4b32ff97151f69cd6e68ab4f1dd696dbcf590a26e820e5845fb8eb8fa17bc92822b2acd356700ac282f9786e4de51bd2fcc02d461a47673c430167b611824bc6177200eefd668cb1a4987c970e1c6c5754eb053feeacfee66226a93f9d49932ba2a548604fffbb982f03c4e84cc56e3df843c115359a0617a65421c40002bf0f71224fbdf19d4195367b503a704b63eafe3a43800ef1e5f89978428d53f80d234ababb1ce033957152cede35f2ba5990fb7118f11cfddc2f86bc4bd70852b1db6a9727ab80405f2c5a8a0807aabe03055dcb36b389dc780c4a66eb3feb5a1592d361ced16d8f4c65f7fc055b55ada03ae5de9b044ef8e8183dc85016547185573d8520931c7ab95408070af28365fc9dbd5cf2dfaddd49d44def09ac894be92c4b7e5523859b79a46cb2c88a356c8c7af535eee05299308bdd3c67034e849daf1deb1cd20bd8d86ed4558ce56449b9ff89bb741d35784398bd1cf8e6ebcf0f9f77d6ac9950002b1dbbb8d05d64d665ff666ca0f93ad5946af46e0d5ca9d38e1bf95a38d633d9680fe02335de94ec6c5271e2299537e82a57e2a69876bd77dfe1894a742f503e4bfb0e55a634c61911edcbc0b3bdb722e4593febf32d94c3c362956cd732dff49a3ed752a9bdd397c26c2233a6f1e3e6c929ca24e0f7a0dc957880f6efc539316b9863e3edb25bdab9acd8623bfcb1c9c5c2d9cc1928cc5eb338d6b1f41415b97083562a81590ff2fa780de78edc5f7def67f14a6339a6a0d50c8128291f6b91057d81af2368e0ce388bf8d6ad4d33667b76adabc840c545ec79eb5bd4bbf36613cf1e431ec85d37cd39b927fd107b2e0424a0d4eda204ce172868340b91f3cc5312f2c742e106d0536f5863664e1519294ecf688b27cd6e99e8f9dedaeddf55a8902b22b428a4110fd21d60114a587ea07f81e1113245209d10ebee7a37b2a43f7f612e955fc26a3c39cc8e8962db4e24ad21b895447d5944b392132003bc72bb135d03d33ff30200bba557820dcde50c4092f816aabf93a6338f72f0988e257bffa41a5f514304c693b3c476fdb71e290410a57141aa68fd0467947f1c30463b1891b7020ce225eeaeaaefa31111f2e9f63fa10289abc1cd640f34920f1cbfaa49f1fa510ef7a9a532d8b7dcb3fce49d4fe36cee0fc2f6610bedc6a71add80cc7373b3061eee6594d157866023b3dc7f51986e59733ae38f0abed9bb198b34820c2caac77008006bd4855a14b96f3da0a002fb74cb2cf0fc9fedad86ebae9fcf3ce14d1439945ae88e1ee7be2d870fe086cd932503ac42c02dbd39321d2231ec75d40ec6767cfe2027cc5f0bb0aff53cfd9b5a14802ed20ab30f7928da63076be066f215f91be359ab1f330d5bd851ddb0826a5f7d13821ef916de2db5e635f4ed63c7d7ab962ce51816b8082781b97d5ea53c911dc822e550dd27f4c73c021a375ab7da375abb56c8c41b51363f14a07b0484e596cfa688841b81228205ab30c049e95ed5216d2ef097b62576f5e5e8746ed1f1f2eb8c212629c77d16e4677d0132d11e4ae97ca3396e28c359e4a242a53f8ddbd37ca19e6b834c9a76dc245fd57c19c76965345b9cf24db61b967a9c73568fe46d10dd0cedfdae7a804a74ba21502563549a647bf5759bfaba5265066b41c9d8b71b81d3d3eaf2a3b2939bdefec9eb5b833b7a7b7955bb4aae4b27558c4ac1b1cb449327885bd7f0ff7c03082fc5de3b1b518141621675c73df48c553b48f21ae367b4cc5289f921ecb080e108d23793048e23553b5a2828863487b576ce75fa1ccb343dd00691efbbcbc138de8c3b9c5387045bb2df678acf1561b03beff0fb57909e6ee9dce51e0ea9fa27fd7ed7c3d899d0612ddc9d8eef6811ebc3b960931e69c7a1bd63884fb39c71e58d8fcd2234f6b120d4eaa0c534340d6c8ea7a412c9b2e6800bcded44f3a020bbd35d4299bef96b50485a275eac68c61b9f777ea3732a33996bd0845cd3da40c48d6da89edb16b610e5a4da627664e8c49e8e3e35264bfc6f69bc1db5d73a1ed9791f47e7c61db0522b5a4b16578e12ec766d235e9666ca843a5311d4d5e3cd3481371132b9cbb068ace37090603c1ca40a2a39aa670b4e212f0f9d60b2cdb22255d33ab3ae3d5043ea3a4826a9fb9107ae9bf83a40464e5112758d454ab720fc8a8595ec771bec5b093012419fb008bed438a1bbca2691b86b2b0741edd68141162e05ea173be94a8e1ce940f65f86aba968de54d75ab7ca780b095375255dff4f8b910b2a4a4ee0b8756bb0d16d19cf8ac920eaeb57dc02fdfcde6701364f45c64581db6c8408af45261f238307409bbf5742d8696481ef6bca7caa635799866489d553c4e159233122f6fb52b9c2b5325f5e9a896838dc39ac21f046dee2e9f76fad881ea2ee35dd917f76997a7dc41906fb1b6468bb1cd677f5c1f37beee8688f358cc3cbc2667687092c6b507f408b111b7f4396d89d665b5df0dad4f73ef4308e8e44cb874497ca0957b217d31d631fabf2ce2f10232eddddfbba44da8fd09af77b75bac2c8a6cebf3b91720dad474b3660300a4274b7e12011bea3b93884b273bd0d4c67f3cee0f34536792bbc890948e852cc073cd3883ed5f177418f7de0fbe2e2fbaff324a1339087fddbd3cdc485add75e881fe64965267c92a5f85cc5667472efb28ee16586ae7d63e78b34b741d96c0bf3f28b2b442ecd7e2f3e19971b1b7139c6aecc09596c1275435c40c41cf4bd8c821687ba71f903cbd67216b93651215ba0b914cfb80476fdd5a12ab9968e5fe633a8b7f7652d37fbe4dc07ac140cad33aff796f9a6bd4240bdd355c29995cc3366b4d9403bf000b47fe192d1f14c3cab06720f7f823b7d79f3358acd3150fdf3f88ee23f3ffc1bb8a2951e5ea68fe5000000000000000047c462bd5cdbc85c6d97026c41a513e89c818fc4bcf626a20ff2771caee7d0827ef02b761b3b29314c", @typed={0x8, 0x75, 0x0, 0x0, @u32=0x5}]}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x4}, 0x8081) close(r0) syncfs(r0) 18:48:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@mcast1, 0x24}) r6 = dup3(r3, r4, 0x80000) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2000, @fd_index=0x9, 0x2, 0x0, 0x0, 0x2, 0x1, {0x3}}, 0x3) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r6, 0x10000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0xc0045878, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r6, &(0x7f00000000c0)={0x0, 0x20, 0x12}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r10}}, 0x8) 18:48:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}], 0x20}, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="01382023000000456678350012dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fec00517dcee879502a367f0b42385cf92cc6deebfa1e61345a420967d2f2da1ce2cfa1a0629eff64e718110eca5e6e4015c769498d9f0ac4c1580ebb"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r5}, 0x68) lseek(r5, 0x40, 0x2) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000002e00)={0x0, "b53dfa50a68c2abcfb02a73c244c5458"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r7 = fcntl$dupfd(r6, 0x0, r3) ioctl$CDROMREADMODE2(r7, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, 0x0) 18:48:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x400010e, 0xc000) dup2(r3, r4) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xff, 0xa1, 0x80, 0x1f, 0x0, 0x5, 0x8409, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x10, 0x3f, 0x9, 0x2, 0x8001, 0xa3, 0x6, 0x0, 0x9, 0x0, 0x90b}, 0xffffffffffffffff, 0x10, r6, 0x8) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100), 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:48:39 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1, 0x3, 0x7, 0xfc, 0x0, 0xffffffff00000000, 0x10000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xd2aa, 0xb9}, 0x100, 0x1, 0x7, 0x4, 0xfff, 0x1, 0x2, 0x0, 0xffff7fff, 0x0, 0x6f}, 0xffffffffffffffff, 0xf, r0, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c65312073797a5f74756e002073797a5f74756e002073797a5f74756e002073797a5f74756e0020207b205d2a2d2e29205b7b9f29742d5fd0837aba86b27953374b86027e9c3e2caa465a13482b8ca23eafa18323b0d2f63c5d732efd328fb0c0c67949057113dcee"], 0x78) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) 18:48:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c902c6b66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:48:39 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2750.623204] FAULT_INJECTION: forcing a failure. [ 2750.623204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2750.625966] CPU: 1 PID: 16352 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2750.627366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2750.629030] Call Trace: [ 2750.629566] dump_stack+0x107/0x167 [ 2750.630308] should_fail.cold+0x5/0xa [ 2750.631099] _copy_from_user+0x2e/0x1b0 [ 2750.631909] __copy_msghdr_from_user+0x91/0x4b0 [ 2750.632855] ? __ia32_sys_shutdown+0x80/0x80 [ 2750.633758] ? udp_v6_push_pending_frames+0x360/0x360 [ 2750.634803] ? lock_chain_count+0x20/0x20 [ 2750.635672] ? inet6_sendmsg+0xbd/0x140 [ 2750.636474] ? inet6_compat_ioctl+0x320/0x320 [ 2750.637373] ? __sock_sendmsg+0x55/0x190 [ 2750.638197] sendmsg_copy_msghdr+0xa1/0x160 [ 2750.639073] ? do_recvmmsg+0x6d0/0x6d0 [ 2750.639862] ? __lock_acquire+0x1657/0x5b00 [ 2750.640735] ? mark_held_locks+0x9e/0xe0 [ 2750.641577] ___sys_sendmsg+0xc6/0x170 [ 2750.642366] ? sendmsg_copy_msghdr+0x160/0x160 [ 2750.643308] ? __lockdep_reset_lock+0x180/0x180 [ 2750.644263] ? lock_acquire+0x1b9/0x470 [ 2750.645061] ? find_held_lock+0x2c/0x110 [ 2750.645885] ? __might_fault+0xd3/0x180 [ 2750.646685] ? lock_downgrade+0x6d0/0x6d0 [ 2750.647533] ? io_schedule_timeout+0x140/0x140 [ 2750.648466] __sys_sendmmsg+0x195/0x470 [ 2750.649275] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2750.650145] ? lock_downgrade+0x6d0/0x6d0 [ 2750.651000] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2750.652001] ? wait_for_completion_io+0x270/0x270 [ 2750.652976] ? rcu_read_lock_any_held+0x75/0xa0 [ 2750.653917] ? vfs_write+0x354/0xa70 [ 2750.654669] ? fput_many+0x2f/0x1a0 [ 2750.655426] ? ksys_write+0x1a9/0x260 [ 2750.656281] ? __ia32_sys_read+0xb0/0xb0 [ 2750.657256] __x64_sys_sendmmsg+0x99/0x100 [ 2750.658168] do_syscall_64+0x33/0x40 [ 2750.658920] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2750.659964] RIP: 0033:0x7f9d069ffb19 [ 2750.660712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2750.664402] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2750.665934] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2750.667384] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2750.668808] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2750.670232] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2750.671665] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2750.752485] FAT-fs (loop6): Directory bread(block 3) failed [ 2750.753792] FAT-fs (loop6): Directory bread(block 4) failed [ 2750.755044] FAT-fs (loop6): Directory bread(block 5) failed [ 2750.778429] FAT-fs (loop6): Directory bread(block 6) failed [ 2750.791176] FAT-fs (loop6): Directory bread(block 7) failed [ 2750.801582] FAT-fs (loop6): Directory bread(block 8) failed [ 2750.807096] FAT-fs (loop6): Directory bread(block 9) failed 18:48:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) [ 2750.849542] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2750.851739] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:48:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d0a66732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:48:39 executing program 1: fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000140)='system_u:object_r:chkpwd_exec_t:s0\x00', 0x23, 0x0) gettid() fstatfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002400)=[{0x0}, {0x0, 0x39}, {&(0x7f0000002080)="bc", 0x1}], 0x3}}], 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) close(r0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) get_robust_list(0x0, &(0x7f0000000100)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000180)=0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001d00210ccde40000000000000400020014001180c09801a7b0c7dba09475f251c743092f0800310043e6cf345f13be", @ANYRES32, @ANYBLOB="92001a800400060011fd4b89fa85a9"], 0xc4}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) [ 2751.000284] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2751.005001] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:48:39 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x40000000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2751.272385] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. 18:48:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000040000e6d5e799296e2c35"]) 18:48:39 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) [ 2751.325329] FAT-fs (loop6): Directory bread(block 3) failed [ 2751.348307] FAT-fs (loop6): Directory bread(block 4) failed [ 2751.362082] FAT-fs (loop6): Directory bread(block 5) failed [ 2751.369467] FAT-fs (loop6): Directory bread(block 6) failed [ 2751.372731] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2751.387370] FAT-fs (loop6): Directory bread(block 7) failed [ 2751.410327] FAT-fs (loop6): Directory bread(block 8) failed [ 2751.422561] FAT-fs (loop6): Directory bread(block 9) failed [ 2751.435371] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2751.447852] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:48:40 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000013c0)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000002740)=[{{&(0x7f0000000080)=@hci={0x1f, 0x8001, 0x1}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)="d5ce48bea10bc3f93b134c066d41dfbec5318dd0733fd087284745dbbca63b87664c8d7463065246dbe3ebaf9cc1be517b75d7deeed7d1de5c00f17e0297acfc358bd7f8a312ec3f9f8db06df93ff64ea9d4a4ed24d6635d1d8eeedbcb12490b4a715b9c49978f698049cf3701021e55b1be39e8eb6406a09d8a0df258647b3337d08e9f5cb977868304fb33956487c31ec33790b2198c2982cc6a247da657d0106d9522d406216757af819d43024ed35bb1912d6cd8ec64390f1940e60903e8722a7c8e96a16b8cd2d2398a11c315e97b375f4ce3b2e252c31e856f2ed10282b1b1ecc5828c492958fe479568b2b31f92c95244e94509ec002736ba5b7b114dcbaeecab04345680a5a24334faa09c1b8b6b60e20b6fc920fb3c4d301e627e29c8fb63203e3e414e2c431f16f6c2e42601dfe84bb4182d6326c44077773edf09e496e2dd126abf956bc996501619861a9de8b32b52130a70a4e3c091cdc9fe5c33691a0186e4196c22551774c4ba666133ef38a2684056ca4a0c2cd05e84fc342c589471d4078f7d523ef5d0487ae008da0eba3c60594bda55a9312df4fce7258be44a53cbb47dac4edf522b12db3ae950f1755ccc047e556c2a6722ac04848794596de0aaa3a0edb8de4f164ab99c233c6346b6df514d7c560734a2422a2a5eb3ecac6573e49c013ac3a626125f21f56fbbf735a810f7587cd812dd522fac7321b185895d958e027aaa85158d036af7106e692837ce743ae463ef2e2211ff76eb7d653c4b4bc3ea5eea5536de844bf1d2289ef07d70742c1239455d70fc640d1e3120199ec6b9a7595c08a39444c737ef89a5233bd13715d3865d3446fa1c5be9e5a75536160c4583f1e92ed3ac87c38ec13a8e40566c41b46831d41a0041cdadc1649ca8ba8631ad35bbc8911dd677a903368349a5e5eb7e44bcf767f4761693b2075e4e4c99eb6805172b6cea4b90f92fd26e292e119a3b3cbb1e3e5be7845aac8dbef35b6dff9f3b616824ca5a3645ce425944b0433e77c6d1a87bc5ecd4f3cb02a26f57d7d180523bc907caed4922ea7c5f7f000d1ecea4e724cc692f326305ddcb3cca774e07fd7555e0a1020824b3dff16149fac71194eb6b1e90ebdc228cfd00c9a35b460d1dee00f138fa7bad4bc949ef2d9e8708e3598407e007fca2beed207dc699cc2b59cfae0f241cf6d67076095ea8b2bacf9017631ea59192e5dc34a9589251dcb716ba58d4e216a7c749c7b3c500360882d121089152d64fbef1e279cc82a59885d37e2796fe2643ac950c19b4d51dadf5edac33077126ba0e8ce149ed083a50b51594d310ed0e14fe47dd5a7159bc3dce2997e4f56a467ffa14305853439b34f053b180d9a5bc1b74924ef6fe4925b70ccc0bc0ed21ff868eda3f1660d42e967c6c9619235bcec7e3ad0762fbba322c7bb27f2fc6efef792e6c3d4813fdad5bfe21cffa0006528023d861aacfbb1fe3796f20225a6528976192938a950136b2a560ab3624bbb3283f6843dd51171fb14e42c0312b1c96ad6759b13d2d8b2fd84aaf0a6be428d576b89af49530741f16a43d3722ddbc973ea85bfad39fedaa2d6454a5a567889da2014f056b78cccc353fa745dc6ad45801242c8613fe89eb95f2d707ff8ddc43a8775ce15fea41afb7d2ca30ef24fa0c4574ccafabdf6e7d770afd914177cea81643b3b01c1a241e0ed71249dacd2c49f8f9a59d14707e9f3f2fb8586b917c2dd54135a271aebf844f9c2127cb801b7369ddd82ff6b1857bd2edc7949dddc398a88ac55d89bb46bfacda3964fd0e9a716279ea0b56ae94a59a3292ddeb1a1280e9a800db67762497e898b9400e55e78bac2cb19655053dbabf1fdbd844edb49b6d65a4ebd83ad93fad78760826fb1190a6f4420ab33529e99f03890bc8fb1965b898e4b8313d3aa9fd7c32d3d6d4145b387b9565305fa8c227131a9317c3e0c4bbf1884d5b1c99b4bbc150c0c4355365bf2eff4fcf0ed313da532ea83615644f054dee7675409c10f3784b5c0ee094d9e567647d5f26830dda10a278401441f1e2b6ebd60e5492284d072261afe708618ef2775d09ae6c00d524916b1ebce3d41041c1586215a786211150c1e9bd67ccebc623af6ff3535809231b49bdcaa65e1fffeaf1e3ccce3270c099fb9c0e037ea6356b0e4b91f69774c16e0c75eb1dae6faa57447daf6bd274c4c977d35560917bfdd9582eaa1258873c493919b31203ff3f7aa7959e2bf5c68b2a9bc565ec3b2a48a5ba4cac686fbc1a0e902c81cad97354fba5066e6755655183b9d2b7ea929325d52ccc2eeb96a81f4c2dd4dd27947e11dd3f35eb7f8c3c96333dee7dec77264d8412e25d534c591c6c86e57fe87ba52772dca0e72d85621c145fd353ab12b75fff2ba30170745ba383b74037b60b91805bfaadd34599b21848c555fcab7f9a3db0be75fbfebf8da1acc7c83884aa63ddf8e3d6d67ba1407c696ed5f214e5f93dc8d456eb003c78f918504ec500104348a88299b0a20a2bd4540b6eb8d6ebd3ecae95d1514a463c6e52db726bb61ac15ae6872970af046e870b48daa23415a715476cb5fb4eab022c1c34094f8336d2b0a04a06ee2f62f5a96315ba34267be1d86e71581b1afee28e20c77989fe95c5f0a52e76926c1549f67f0c9ec6f32c535e6051549b130288f72f6ed3e438d33b93003da3f0c5d42f625f5a82bb68d4c12fa8324572a63eac176e782aa3185addca395d4dbb9d01c4d0259382f70f8f6fe7322511c9d0cd89ec27dc5aecb864aa9c183069deaa6ef08d77598c5492ee8627e58b5a56966cadcdac5f8935c16771228a0cdb0fafba80dd6270fc1c9e43d9622cc7f2a9ea55f56e24a0833a421a33e7b33e15f3fbf4b5c3552730e39fe677a8c507a81cbe7d1bce4c951fb0aab9a2bec3bde96379974d5ed002c27bcc440d39b8ef3695708528fff22905be774556686eaa825c8170bc52ed05f2701c6ffdf6600f3e5a47398510f321e06093467bcbc9523e274d8abe7c8abcd67d07a5ca30fef1c06c29e1d7b703f5f8bb7463d7aaa2dd01bf6e88c6516f02c43476b4d114ec2fe7b5494d10799c780e95bf68143cd73dd170686dcad6b234de16de43a282858509b62a591cd36051154cd083e36b8d3993791f351e0ca5fa94457f4c8980c8e45e5475538d3cba4b36b3e8110063671a77d9e3d202e00a9adc75ade7b5f6356d692e5b09d7ed6448f0e597436b4c3ecdae1f2e4c7109cef8f32e4cfa793213573f85675797387b965fe6ee3166d2a373dbeeb671956393a292cb2f44f7527d38b9e8220739f925993a46262f22051c8ec6b137b102926dc81c1aa470831f3cc4958298f96ad5a33ccbf38060b7a578f9c0e065720dda1b61dab74c66322a619aa4886d8af91157fc278c97c900b1b828616f709768e200dd982dd01b781e1758d8506a70b4e2867852486a4964725ff31e17183ff7748e56ad3511a04083ae3058eb6e4afcea9e2bbdddaba43348b0fb1876cb74509be0ff17087923e143bce1d5a77ba72d4e7b78decd19bbe089bd6cd52428a4b5ec973d079f87aa41a896ad8d1e188fe97159353df5cf8ab2ef538228062f20dafc81e6400074072b9d7150977fedb83899e628e5ac92f79692627d35e9f458e40f9107eaf2d575584c5efdca715a633e41c31cd85333a167825e584868a2a3e49c6a22b5d88900914fcc0e37b0062c202733f0025f34d858375d52b891774dbdc0fcd41f6ad9f7087cad21167e5d8141596f3b118470ee24f5e74afe1e20bbe9c9131978f4d1a402b8a0eebdd2f599965b0b069c0f722784e6c899b459c027c3a1e779e96eb7673fc4819d4d65509e4fea956fb6407b8c6b0ad5ec58a6762dc686a774a9c48376d5323970674257a32b5391d9ba8b6b51ce8421bea1432f41f99d5040ad5581ebcfccb9a5221e71391d5165a5d2c6079be619e5671df58ce2669ca5384b1c39710c37755d3953604bf43b4e963310835872b8d705c9b7b50bc4de937b6e65f81c775f76c1d1aa3d81959f5ac8bbd303d5d9c067d5d6ad445d4449dca092853be9979cefc886a372799149e45a074c1cf44cd01c7a2e66fc7836ee1f261f4e59ae0a6c8e9cd81fe90f8538565cba0e9b40caacf0880fccf0f3e5d4fc010641c96741a22ea033212559b50f624e5f9f24f3a91f4766a0f483f72c042428204180f646c1ab5e1c4c532afc66deb36c69ce6e0db8be427eb3d85d786b4c702603a6aeb6cca57975c6306f3e1d83ce01408e83278d5a9ae0d8d9c0852c312a068ba7e46fe6dcf90e0cb4e4248015a388179fe65d2fbfd7bc3a5e69adaca712dae367481e94493e528c3f88cc05c86315f7c06cbabd328dd305c7b0e7d53a669ead34649c2f9aacac445fe25a405772488820d8a534cb4be5fa4ff26e2cdd6268437d457d6f6df4f4ef3d2dcf9e7f19956210edd8ea1f18ceb6c44c761230255b7c534792be20b4fa1b1e35121d1705d3b245f0406de9c386cc78cd1e1740404e9083f48c28a9bafa6a302e34a8f1d45439e230e9a0fa7609d5c40af61f311726e99fb642762d7e17a721a41e5ff426875519d92da31363f0939a10ebf93afd1d4561d7ebbad9d4c1dc3419b7e7a75df596f2cba49e17a397958119385237fcc3d2e4903cc87c186cd571701c9132cd3979b22ccb38809053ce3377860bf9fe123f7fdeabdfcc0d3d0dd8ae53431b5e525670d352f481a1e5c9b9060f74797128986e959ff32e9acf2aa8f30379aef4f20afe03e9bded3cf0dc86587fab8004c8c973f0a45fdaee6a56336c43d3d2b02970df645e63d68bea80d1a4ca74d6ca36ced41c254e48586c2e02b887c4a86335ded5c60069c3ea6baf27e314a598866acbcebd4fb72ebb6ec34e0d6d79e0fb1352665db5f3fd80683ec775781148835a90237accd968811a7c4f5653db7a386443deeb865ff05ce5131f58933d861475e0032446bb3feb83d9a21f484156f50cb9862b83dc43e9a0b1cf1aeeb3e8ad9fbefe336dd33e4ac4bcef36289ba0969be7c68eaf832f1c0df0cc9e7440b9530fba6ff9ed76979cdda6f930de64bf6568e0ae8c9669214bc1156b51199fb34161f804269ff76df6681638f82493437bb2b61c9523f98d0e72a9eb2d2034a3b48099ef6ee9c5b7fb48a4c0aad9954e091c67afd11f64369628c8c0e119ebe5ad9490b8fef9a8a229172a099ea993d7ebc2f63b8eda57dc1b5d34deea8ec22a47116a4371f59a16702eca9281236b18e10e8aa374f21b0313b5beb5bc3a4bdb483e9198e4cc22e8f26fa66c9613f72adee66a7dfb65ecf13638dfc8c5688300d5b5b88a70aaa713eb7704493176aa4259c6bbd044922f7fc5b8fba7c1378881a48690ae13532d963e53d1df04c2df883de782eee8d46849482089c6e5565ab3c6803a9d0904dd0246c32e94eafd696640a829949c9d01da883077b6e5291962ddabc9b89a47703de227f62f2238c1fda9d854c4a8c5b79b058be930714a5b8f064d9646585ea011fae3e41a07be5302dd2d32c6baa76a560bca7c1c46b6d39360499b465ab0ec7274a4017613243449370304630bf27a4987f3d03019122304ff84308cda8108f1ac460528e2633cb71c52106e2c2fe3d6064cb523122ca470e1aa827a48d3cc096e6ae92af9900dfc04b81df6f648a3add272404a370beac260adba87a249ad445d653a98508a11e736b48a7e8ada6e917f9a9fe85dd70f31ad25947820fbc1ebed890609153a178495f7eced630751adfe7c1b4658150b63e2ce0afcbbc1", 0x1000}, {&(0x7f0000001100)="c470df1ac0d09317095e262368f539e85ae3872728847ddb21ac4eda58ddec5e62d396ff26800f6e9632f53c768b59de93f6101dd6216f9c67d688317c030260c27a20590ceaf22bed1425f6dc8dbd1eeab0828e4777a611989d2cb3313e0633b1c4acfa", 0x64}, {&(0x7f0000001180)="fb41f828dcc4d13733890f5290b3d876ab30082b03036070b19e2bc955ac559eb6b5a1c6afd40f1664553133481606f037b6417e58f1e7de", 0x38}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000011c0)="d8d7f91b5150ab47a7d6e79daff2813a6f81264cddc2570ceb45fabe8d32337390f0a860c7d93ffd8a60b292073f6aa01ec6250ba94132bc9848fe49417aecb386894109d57eac47cb61314e39b1164ae4e6d80f5395148bf6b641122cc18cf4c48fa71dd8f0ef00cffc88a344ed972dddcce9217b3bcb2895ba68f81e8825dce76d6b1064edaef83dd902c2a4298c1eb18aa4e41442fed75abc2961bbbb8e3e5574c3e26b5d07a43522a86b4787d479ce82dd8cbb3950ff07942075c1032c1043e947e553775d53ac04de0df7af48f651bc434a4f39062f8fb7ec66ac70b0c62ac141d3", 0xe6}], 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="300000000000000019010000040000009eed82a9ca201966df01ffe3eba0414be972c48d9f41e362a25f294100000000"], 0x30}}, {{&(0x7f0000002400)=@generic={0x1f, "78952c3028b694954c3d70d27fe69c6835816663576710e6244fb70aed82bd1189ddc63546828ea67baf9ed4b38b42b2c4b4eccaa84654f0267875681c4b95fe550862439b86275316f9ff5f750afa1d361f8c35f0defb7ceac4a769875097a712c797937e8e41166e996accba3b6950d1b4e330a554574f354264f34c24"}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002480)="94128213ae406f4aeae3c211f3001caa19c002ac418ab0ad7c32b679284f27d6a9d165abe0b4f6c4d769d9518d8bf359acd2040c45dd12de20e078697265ab015536d181d7e50063b2c9633f3e144171bb78d04bd02aefdf38f60c2fc08ebab9485ef7b08049fe58a5d5c0e86a6bd5c3766ba61bf479f9fe793e3d0dc36d0105a52d2db66568ea3ab338e777e092dd749c64a929062be4645bacb3206d6afaffe528e2114be51c45c95b6050a03eceeff4f2d1ad0e9915d78c00aca414099a5ccfa88f1e2ce942cac51364f36be5f3b755c5d6f5a97963d6c1b682f53f17f5acbf68636eec244a8c80a984daf759a4ced7fd", 0x12e}, {&(0x7f0000001380)="3c7943acff76d3b2", 0x8}, {&(0x7f0000002580)="5e1c58dae0913e17e2a093f039c22f24a3ab5c67f9874fc2e0fe6eb9c83413496ba5b5c73be8a7889e6c328676b0f26cc341ff4377c9d67200a3926e0bf58311e2d1afec79b1ee76cbcfd8b64274284f2be155820b7bc915a5b1a1bdfb6775fd2d4ab725bf947276b4b1c48f0d4d49f40a80108bd1f50b0184b618aa2f4fbf4c20ca17aaf90271a9476f8f81b32e9c99f838dd43bcf3252e840371eea77049c9db49d55af030ed2538b219de370470d805a10af7e267840a140a25806a071ed0eed5dd72ef5983879c1a9fed8876acfa8510c9a86560c14d88f066ac6c011223df0b596c41e6ea3655a753eb2ac07d580426784a93", 0xf5}, {&(0x7f0000002680)="7903669663d51fda15598bc428b8da4df737412998663ae59ea47149015906a7332e369246412572c029d2b07ef286ae38eaf98cf0e7c148394aa031b1008f1110ee03d9993d4885ea528315b11133a32d3c0ce3", 0x54}], 0x4}}], 0x2, 0x408c0) 18:48:40 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xe4ffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:48:54 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf33c0000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:48:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d2566732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:48:54 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x401, 0x3, 'client1\x00', 0x3, "75af8889345f9826", "09c8c05525c06381e738c32fb080a5b0da5407d432c514cce6079a5d3e90674e", 0x40, 0x3}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000540)={0x12}) 18:48:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x40, 0x1, 0x6, 0x0, 0x4c49, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8}, 0x1, 0x0, 0x4, 0x7, 0x0, 0x0, 0x1a76, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x3, r0, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x200}}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) 18:48:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = signalfd(r2, &(0x7f00000001c0)={[0x3]}, 0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x400010e, 0xc000) r5 = fcntl$dupfd(r4, 0x406, r2) r6 = openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) pread64(r6, &(0x7f00000014c0)=""/48, 0x30, 0x2) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xfffffb29}}, './file0\x00'}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000001580)=@add_del={0x2, &(0x7f0000001540)='bridge0\x00'}) sendmmsg$inet6(r7, &(0x7f0000001480)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x7, @remote, 0x2}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000280)="ee0f94b02e7e9eaf2314dc55c4056dbe3b3e08fce63c2be497cfd22fccd82443abc49e949c5d13a458c4dbd09ae76ac954e244677894f684e2cf6726d7b59079da39ca29f52215b5c0097123ad53b7350f1933843f098cb23f9a2f9c1c5c41d1d33ebb2745510ffbeba60e503717a6ac3c836ad1b2f29062b710985b1c38e8e722cc050ba95b3e4ab83ca8cd2ca80cb1a0ae4ef7c001044a666777cd9e3dd56ec252ea89920706d6ccc7609afce69f4016dfe03faa8d4998e4cdf733f8", 0xbd}, {&(0x7f0000000340)}, {&(0x7f0000000f00)="a8dc99a5b4b0e080ad34b1b54b360e368a417f77b4d81724f81de6069963d432cc705d1e5dad1817a45388071e8c29735c7d86aa833cbfef08ef402b9b829d1fd232774422d1ee84c3702e6a96b1ac3a76f422eaabc2837a2d9003c91d18df4866d968d5c45866b733b67020b24ed820bf3ce10a231ede587b54a993cf51aeba4f28c8c60ad4125512e2a552e48dccba440659bf7d6d4333245f5422b15b8f19ac5a46f75ba813dd998de070468fb665e6058152b2847d82f614c4853f12b3f26bd467ac9254952c08ca4202377956c0647c747e413a9ae2091ece6e83", 0xdd}, {&(0x7f0000001000)="b57b07b59fdd9bf8b24c5d3a03a489d557ef9f1e3867dc6646491c726b5a51caefb5a9ed44ded4d52a004b6cd753fb828f3b7f797dd6ddddee272c662843ccfa07002e8e1f3cb1267082ee0f26daf422fb0e2fc49b3908b7ab24cf84bace221bf14cfeb022ae7aa68b8885d9b6994e28c2a136051f48004e4271546582390f79658862453fc33cb5be92c7c1d3557a4f2308b5f956523cafd4ae1ee45efa063ad72764cce62d19fd88241be1acfe12dde01986753cc0aff95003f66341f3227ce9c2a509e3924999f72acc125ef0648bffe8862b8f2a7a43a972b2231b0b2e4a02431925ab765f4e1cdd7f8ed921571a", 0xf0}, {&(0x7f0000001100)="eb8e61bcbb04bd5bbcdd714480b68692293e4babbe905cd6047e9c52342fbe08baf4390d38140e8d2e0d425fb01aa9ff9b0ade752d9e5eefc8afeec5237ce1460ba5557730f163e9338fa459062ceb7ac932b97eaa099733de06d691c4bb090479f587b37fc4ae585cd279c57eb402140590639aa3b491c4109b9aaf61c57f959794efa5ae9f9be439eddc76f6045c46ebb600c9ad83f4269f9c906f99bbe400171d57e735d2a4986024a88747bf812712a66f69e1025cb53c70876d62b75ed1e708a51d22ecc94fb764", 0xca}, {&(0x7f0000001200)="10575ea8462b4472697e6e8c14ee2d98710cac51cb660c772afaf3ea2b3d38ca6568be4a83f5e2adf91a926571f42bed86e34d3c4389cedba3c6714edf88dca64334c6d5c0a1b7ce9daa103f4aa92b88870f460f97827fd01de47f88600eb5fe8f76b563620717a7c6f57ed4bec3a845b69bfbb21f88606c4263e32edb62e030f8e38ed9603a827ffb346620ace664be83a169bc04cd9c88c9d806b7feb6c6473fc2bea457917f65cb22e85b005b4e1d6e54214c6c6dcae0ecd0042f6bed649e176f6dda7669c5d0afea08bb8de95f063284d5c4c194ddb8d4b05a4ee3688a779ae9731f", 0xe4}, {&(0x7f0000000380)="58b7c0b4bf3b19ca8355ef45c24caf261406d2e1700b93a25fafb60ef496834ca8aa72a20651b272e086465d7df1467987e4bee4f0c523679321d451ec14081cca09f1bcc740a68c5cd31b61159cc0a4b65c18fef05f772e0314ebaf346a5d8757ffbfa81d4cf265bdc0c9a902956f9a08d2930d51336c26154b2d182a", 0x7d}, {&(0x7f0000001300)="76faeaf7dd78c49ab5e715a1448edd4ac11979189ae0ec0eaa89d0", 0x1b}, {&(0x7f0000001340)="7ed67d4ac1f1bd50327c4c30c3ce1d3b1cf6873d56f14392f0661a4516cba808af8b2ce4a0dc8454", 0x28}], 0x9, &(0x7f0000001440)=[@hoplimit={{0x14, 0x29, 0x34, 0x1f}}], 0x18}}], 0x1, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xe000}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000080)={0xce, 0x10001, 0x74b7, "06a26a0f8a0304e58ef6340566ff68af5a925bcf38ceaac1f6f16065a44d68cb73134fb0328157b48a171523fb1f0e4aa5dc7ea6cb38b8e85bc9992f5338ee4d608c94a84768017a482fa8aa871fd87bc2ef2bec8bd0d55e975262b7cc77c01cb31860445de4c5909ac90cf2b57f3853ebc4065dca78e04471b6f13dbac61d47b702703b52d03f781b6226633edf833c3880e1d6eba1f56158ecf3ffe25ae0f942e5ee5cea6e8dd696d2857d77402dcaa48489ad985ba23469e94e147dfa4091d1e0a2aa22d0cfb183c922a5f050"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:48:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) creat(&(0x7f00000000c0)='./file0\x00', 0x60) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x4, 0x6, 0x1, 0x7f, 0x7fff}) 18:48:54 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 25) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:48:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000004b00)={0x1, @write_local_name={{0xc13, 0x13c}, {"95f6a79a5967b21a224b7bcfab29473ff872fc28a28b1a4f3f52ed2322e3d902095e84ef7801fc05a221528cd1453875ae04317ed891dcd0543b8bc3a2f9a5aa7123bd475980ba46c62a01ab08a300f9590b722e2927890b89912480aff73607c128031785fa064efee55e87cf173a1b1fdf927c40b7f5a8b9b8346785bbab665051a56ad2dd9d76ea9f4212b0d74b9e6e7139aed6b9a7a3003e7399c0f9c0ed00e4a751ba852de272feef119de8b27d66ba3a8816d927f09fb2486dcfaa481311f41b3827bc5eec9fc93d9843e3bc175ac0f1aa58723ec9a8b554840d45822632030e277edf560e4c334a246b2d42b19c41233bf50200"}}}, 0xfc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000004d40)={0x8, 0x40000, 0x1, 'queue1\x00', 0xffffffff}) write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) sendmmsg(r1, &(0x7f0000004940)=[{{&(0x7f0000000100)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="2a7c950858f8a3f9ab657ef25c67c650a42db72515c30bab437b93a13d53889a09a22a80df77a8952c451d00a76049d4bcc14d7719d7cafebb2a4ef71addc3c4fa8df978a6e2ff1f3369a501b1943e0d0480c189692f9739a68555a54f94c151b2c7d58b14934da20bf0d89a12d261c4b8a671833f693c55215d8a892d81c85960452d8b8a9dd1339323505881ca407592042275a38bf753d3d7d4e503b2d9ea70589ac4f963b2056f7a26b270ff7e5f11c465c5fcf497b3235a96dfa43d7ba09728574e4cd38246", 0xc8}], 0x1, &(0x7f0000000f00)=[{0x98, 0x110, 0x7fff, "8b527ba01cd55c75c8f96e3c42d6623fff9125595b04e2058017ca924797a5626c005c0e751897f34702dbbe809995cbf83c6fbb61788c3723019990115b6c9f983b7cecf3303bc16f7e9290729e5ac1d7596b8c41b9fa0765967b47c65ad714928b6bfa175ea7751d15688c052a1a5005cce85b0af1043571db4f7516963eca8c3f"}, {0xe0, 0x6, 0x3, "585ad42ae6374680a8b42e015488f4595ca32fef1c26ff25af35cd88304f0632f46eb1eed9800072f023e5d2fd260bc48d4f67e5e7c7d5cbc0be9fec9725b1c92dd66e603aef5f0c414184f8057caccb36171f8c6d0143f951054456325a745c48b007d8472cc0a991e92d789d9f43c06bebe4192ff6574e6e8c15b14a9f4bbb9709c00b25788daa58d91df84e95ceaf04d9d460dd6709326cfc1bffc9e33a996605034e8b5b0695278f080c8337f2007bde12a13f343c779cfe7dbf02f5738e7bb8b745c24af4aa131073b4cd69da"}], 0x178}}, {{&(0x7f00000002c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="54d16774a62e8e584c3f0e95f94ca62d1f0752eea7b68f3e646bcc60ed7157ce0e393775f1bdb7265df3943a8cb724e41c66806d61cae7bdfb3dc90af6b37539d44bc41b6144ffcc0f7ea145f29d7e4bcb38afaa04cef78dcde7aacc8b1f836a6f4f8619506dd67d54fcacf017e73b335c6da707bf44055bd502d5abcc5138dfca64c2975ddade0b2466080fd8cbf79cb1ed5cfaa5b749d713b287d9e2cdce4a09bd17ac5346af", 0xa7}, {&(0x7f0000001080)="8a444ec2c05f220113defd4d73ae0ab30868a63093a9688bdacf578ebca36c7b7a108d4900965a9cb772e6f2e53a650ba8a4ab8f404d4e6158a388b4a049655e4bf98a169274493b42973deb11806f863bad3ca51c33531273212e5550360fdd995adb8c95184cb63e67d1b5a4a6ef3f871170b7cc40c3ea008f5d631707ca9b8ecefa7d82b33badd172f2deb1e7621e6212cc1d29c33fdd3ddad8ee0ca0b703a260853e79cf10e8de50875c5b5e74859cb6ae7fa3a8651c3d7c925fd9e9920358851c01351aa93adbc5de1b63", 0xcd}, {&(0x7f0000001180)="5cacefe63f95088653de4d3fedba8ad7565e9f25addb0fb981e897828a13d9ad9658160ac0654da0c7dcfb17a86dbce6b0aee4a65a1eb2eea4df811e066e702564b0f518ef97cd833b033e0a8fb43203b884147166aac8f5f8db1251dfc1e7c3add585e991b19d33e4e4328f84cf68dea848e76bfa2c3167914efad7232d5f17a8eb4545ad9b355461bb25e743eb9e68d4d17cebaaf507b4efda2b61c24d510ea67c9475f29a1c9b42996d67dc34aefcc2be037132ab52642a34cbd50015858a9d844188f93b6a80701c679df1c15a17ebcced290efc36cee638cf0a1ae4b9fa149cad06e5cda1775d84", 0xea}], 0x3}}, {{&(0x7f0000001280)=@in6={0xa, 0x4e21, 0x45b, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x3}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)="f65524e86314cb5cfb89f4b5a934fde8f754e14d11155f8227d4d5e32d964f9a917af289f594568c9efd4acbabf3a5755466b33bcd6811ca6d3907f54d579b5b6b1c157c98314c4b04758afa48436665b608ae85d64c51300f8a8d55b5f15d0327efd285a07d85439ef92d899b7c669781efb78b15b6b603e94913e495aaa75cfbe95cf7ad06a5d09c49335e0998964e9ea6d07b020f951381e1834768e7042ec8cc1f33c5950b4d37d40d288b53a1423f57a06e4d44be810cab07b2e96b1f65", 0xc0}], 0x1, &(0x7f0000001440)=[{0x30, 0x109, 0x1000, "614896c527710a5c620ea9ef158e1f412ac15254f028421f3284dfdf2e"}, {0xe0, 0x110, 0x5, "946fadb04767484a2a69d9e22c5dc479270af22553a2ab347da4de5967f1068dd70a393863cda3b5d5b5eb9ab4668c8ae46f6a05245d3f89f4c31f2e30a008983dbba8db79dd2a84dc3778adeccf3d0382ba0448ffe511b05b5c45c7c90563d8c654d25854d73a35fdf03c0d664eab842861ea907324d83f0436b0be48e99061e2d3e365d628a143e9237e319d9b3270d469f28d2894029c1817815f9a52109d9d7353d74c7168984dc851572be5ed68b95d0879bd969948a8ecf175a1a51d5747a9801bb840b70f220921e8a087da"}], 0x110}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001580)="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", 0xfa}], 0x1, &(0x7f00000016c0)=[{0xc8, 0x113, 0x12000000, "3d914c5939fc8290ab30689468d9146ad012190b7bca3771d62b9a02629a986a50a83081459a45ec027c7e355e589b947f7168140fdbee05a0375896c3401930dcbb018792db8ace7e5caed480789f0242e4ff2d3ea20f49335dfd3f6e81f2975f777798b8c836ff5219e85be104f060a48ca4dd66c6f6c2c62f9818b7dbc412028925099ebc1a08f62a329b12c23ab85d6a173afbef57c0b7f8f84eac195bb6baf13a6dfa4194b2b3e2ed098ff984e70248797154"}, {0xe8, 0x3a, 0x1000, "bba2955c4a0b5c05f77e31ec7600aa6f86fe3f8aa1e0942547fb3e4cfd9c400b49b1bbfa3db50dcab3bf3a11374e88855a9f83595cbaa8b38c2cfc8e24ad8ca304777e4c79d64697a64225d59675a52612fa3ee76290842dc448eaf4022b24076d856ce3c83ca00a24f4ec5a8d7f85d20a0638fb0331df34aa6870ab00fdb8ecc61ae930c81ba615c2407a7f63c8f3794dabea248cdd13da17da2bf03d420c4bb1169706a7e0a4959719c75cd7c205b45fdc8e963ce3ad4fbfab21c2b1ee557b81c772a4df148dd81e9a38c29a74c1927d70f9e183ce"}, {0xe8, 0x30b, 0x8, "6e76cb44ff138e6c746c704d719d09c65bf1595bce6139ddfd8fa85b4132338915390632a917471df70b25c828140ee05a43b7b75c9af3a0245be8969aaca8fd2ab66f3f0b8f82093bc245e8a804576daeb2938baad543cdfd74d08d22dda0d6622b72908548ac7dfaf18c50e4cc56430279e960549d386ad77d2325497c81d035ae81f00f6e4ab65df26f0828c5ec378fb2c46cd2eececa76b9d5807a4534a6421f5c86adbd96d51bd8c5bc663953f2190685c5a6e4e6a71d894443ab420405a7121f64bd92623e19b7cf309a7c61f541"}], 0x298}}, {{&(0x7f0000001980)=@l2tp6={0xa, 0x0, 0xffffff2f, @loopback, 0x80000000, 0x1}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)="5e79dbcb517d940402d56c514db3ff2a5b9eb27c730475403a44ab86def55aed40350b69ceed43dcb7dcc46bc68558a853a2fa26ff7dfe38342830a0c4bf4074f90ef89b18c32b3c48d36226ed3557643bd74898b7adcef1578a4b61db54e0e546c603b3e4a7a9ad06d016bbeea432f138fedb54b1fa0dfcfe2e60812724bc86e7bfe52738e71525e293b7d900e90b82d04357ee71ffe8a0de3e18fffdc51e63957a1e1140f832ac0aabffc327a62f423afc3bc0", 0xb4}, {&(0x7f0000001ac0)="f02c4b89732945027d0969e132e524d305f9376c1cb37e08e23bd0c8983f1880038e46772b4a4d8d2d9f443029af80a5d1a15b9fdf23dbc31cf50ae17a141db51ddb255abb5d90923e9f0b77163135e1cdc79f6939fa7705ab33c142cf449e297e298fb2", 0x64}], 0x2, &(0x7f0000001e00)=[{0xf8, 0x3a, 0x1f, "254f1c760f214917f8111d2dc9d173f4c071bb86317a6b04904fa2814570dc143cbd79e25a79369483b92e9533251dcba1b97744107d77b508680ecaa9708d9435e2be8a2595fe1835797f29a7bd3b7245832b3c16cffbff59ccae0cc96e36dc2cf0298265efb971d41f2d6b912c6d008ac2fec8111f90b19d9aa5295c82947f6374e7945fcb0b92a4d4808003c12f13e6c2090f4f3499a7aaed53a0b73933fa48fe43b668e01edfcc0da575aa1bb176325ea90362d4397fd24182a06c1d3cf91ef44f6f970aaf707adfaaa08f141b57b8914f2c0388092c99933f80f0a4eca69b14"}, {0xb0, 0x118, 0x121e, "bb42ffb7dd3ffe26db485509450d65d0ac3bc46f10d0302040f3df2be3ae6e86fbdc1e4c118b833f590bc0010debfa501ca69b8a7a3cf3c94aff1787181dbe6ff9f182aa97b8f21260d437c29a36fa8a1dee6d776e6b1b29317c6d830be4b4381a13d7197765cb09810366c3055f99ffde0c0884e46971f526594aac45fe96667df0b06af65ffeb10cece258a7d9ffd02678f8562c4df6d84a5448741a"}, {0x58, 0x118, 0x401, "897c2a2e0a9246ced5663b01873375fb5ce7609db668947b6f22003c4f9f030604f5ba9b8dae69503348b4863317906d44416a404b5c55f81cba6dd22c84cd82bbd7dd4c9ac0"}, {0xb0, 0x112, 0x8001, "a3711cef7519c459935c1542557832bb45bddbd7d1b96fc00799190fc7bf1b61d50dd354dcfcf689529db015604aef7484fc840a0e651fb8e269069564b96d28751ee910550b7a372ec81a476bdf7c34f854dfbd28a9f4688756cb7a35e2a5736041c3c5ac0a4953fba28903fce8f9a2899053c6d988368ae63bc17dc31a9f3030947953597199923afe506e0245c9db8f1c2112d323f6d20ae32df3816b3b82"}, {0x18, 0x101, 0x8000, "fe41"}], 0x2c8}}, {{&(0x7f0000001b80)=@phonet={0x23, 0xff, 0x5, 0xce}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="0bfd878c42a968b1cfd3939485a5f288eff6c07323336f86e7098d392c4ffc5ad316e4b52b126d9dedd5cbbfc9e0b11938debe29a2033bdb9f7bada6dd24f087b308e52f32404e58dca41637735d7ac2747af50e621ea866616f520930627223dbd398e20842bccef349cc73d14b66205c4c208f3ff48f049918dcc2", 0x7c}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000001c80)="394a5de3a831822bdf0f991a8793344cdd4629b41e8e0aa3aa546dcd3a7dffdfc4bf", 0x22}, {&(0x7f0000003100)="5822554cfe6133dba8a2d13db6e705db9a56424795b3344d4065604e06c3ab233ecd5fddfc87fbba7436142142801d0dde97f49c99159601f0c054d62a397180df47bcf825b166d9178bec2528c9d03f10b6e604f2f8edddf39fd4f91aa82ef40552b6d13290a02fd1f002a78a42d74757432f5e8fa5e688359f63d1abfa8353bd37e039eb767ef8fb3eebed794bd469a45f056333f6584c8759ec483087ca55feb9d783b993286331ca69522fae07c0f34785230c4c5cb68f0e4316dca44c48a64060e0e36b523306de531915cd27942f0031911ef8cedb1d214c92474ddd93a1ed044d10065ccf6fad61804addf2736cb6e1de424604b9", 0xf8}, {&(0x7f0000003200)="b3c49f2ef43d47a5849afaf47477fb5412c6df493c64144434967a8ba4a601d94f0e4328ded4972c54a7996b4d4245eeb36eca2913e6ba2c6a9720d694e2a52b78e8c653b57ec94192c3e773f34433ac261cce1beae27bce04ff7bb7be2da2ee896593cecc14ccacc73280062c89fbcd32a45ab62413792500e1cb71dbea96d86d8716f345387e2eb918d26b0c4c65e010e474e4a9b548247fdeb4c36ba72a0bc81426f3d499a2e272f2cbe3c9266df6540e6a933f1b2e18521bc8015aa3935ad05b5fc9f4ecac84d27ac4c2f1b75319f1f7", 0xd2}], 0x5, &(0x7f0000003300)=[{0xf0, 0x3a, 0x7b, "e22a6a8d87143a54e7cf2e614599a4bc4710d8cdf6f0302814a6a4e5345c3124de0c842ea9dceaf6082a0fcc309ed190c0eddfdef36aa9ea4404e1accd6eed43caa5c5b434fe054b06a9c9657e391152735b95119a3c03b2a869c92f8372a19ce4e2c0227396009022f0f223f76b1b5ac6740d38c7cc6533576061fedfa4706a6e68225614417a67ce4791ea4ad4f5507ef5f173562287dd85e511feb81beda424d1dc2c1bc7ceaed35ccca03b0a4a55f4c4f072414a30458ddbf7944f3391e466048b80a6d46be0a9d768fa6711fd3d5e9891d1ff4ae3bcf8d34aa6"}, {0x78, 0x102, 0x8001, "4cf7911a25c4ec7b466789efa584437b67673d610ae534594e3e5d36f625c58efa3463edded06ad032e1e3421141a863b7199a98b47548ac7d3b585df0033d8cdea3b4e8fb11017d6d854ce40e8c473d290f0963e5456cf924efee116f116277c5"}, {0xa8, 0x103, 0x3, "c9014504611a76562ae6c91603c6df1177f0dc82086ba80b9be24711d091212965a60e90f40499eb4636bd4a65972b88516c5e47f1d8fd623b4eeee7994843004eaabcdbe6b5118c809eb89f1f6464af1eddee435e71688b3d77a1e2415aa39b1ebedeaf41a1178f78c758d96640d63fbf7641c6e804bb7de51db4c65fb07ad13747d955710c33d3352d0c6cb3617211b7d2"}, {0x110, 0x0, 0x1ff, "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"}, {0x1010, 0xff, 0x5, "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"}], 0x1330}}, {{&(0x7f0000004640)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000004740)=[{&(0x7f00000046c0)="848887ba5fa431c5e9996493563ae99af81a20c03d283b66b3e36d7964d3ab9fcb68473045e283b71d701f476a5475539328058557449bb3e1b3b0da98608832aad21491637ca7533782ea86fa07ffa2e9ee2468d5097b691b96f0ac9f4f127c80e8f1a1473d580a524228fdc13e8ffbda288247313386af4d", 0x79}, {&(0x7f0000001d40)="fa15168a19af1c6ecea1c01ef55ed16b3934f3acbd7291fee7b72ec3eddde036521e61", 0x23}], 0x2, &(0x7f0000004780)=[{0x70, 0x111, 0x4, "7521504a1ca8d1ef5509c5a8d63901bdc7dd6ddea3bc64cd6efb16cab6246dcee7e23ef309ed5f25528e2aeca0de629284f5eff865128c272e499b4bf102cfaadd03e9a56563c7b76d094b67b29af53e2bdfbe218a96df4880eb9ad724"}, {0xd0, 0x110, 0x8, "a87ac640eb92f07a59726dd331460a93a47501236d59d3a002bac7c757f6a405439b2183c2b8dbc6dbd1d961ca48588d001df15cd34721954379c6ce659c678434d14474eb8ae4aac21c0729386b11084b3947504e105e2d0825b470227b71b3c326b9064d28111666d17396d9a5834cbc5da629be7e4e8e288257e7526b1d94b93477fad74764691f4e5cfb6f62a507b647b0560b559417a6963d374c75e3746e0d45fe6342d41b5fe6eec51a8f68a61718be24970db2bf918d7625c37c"}, {0x50, 0x101, 0xf74c, "7c809f00fb4ea3cc5da8df86088e1ca1621bc8bf28f592f52ad4c9873d9c55ad94c7538eb352b2e9b7a89baa615cca4249518615112fb7700d953f3f9ca16304"}], 0x190}}], 0x7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r4, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r4}, 0x68) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000004d00)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c40)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) [ 2766.265857] FAT-fs (loop6): Directory bread(block 3) failed [ 2766.266663] FAT-fs (loop6): Directory bread(block 4) failed [ 2766.267539] FAT-fs (loop6): Directory bread(block 5) failed [ 2766.268344] FAT-fs (loop6): Directory bread(block 6) failed [ 2766.270007] FAT-fs (loop6): Directory bread(block 7) failed [ 2766.271621] FAT-fs (loop6): Directory bread(block 8) failed [ 2766.273101] FAT-fs (loop6): Directory bread(block 9) failed [ 2766.290409] FAULT_INJECTION: forcing a failure. [ 2766.290409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2766.293360] CPU: 1 PID: 16459 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2766.294799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2766.296541] Call Trace: [ 2766.297095] dump_stack+0x107/0x167 [ 2766.297857] should_fail.cold+0x5/0xa [ 2766.298659] _copy_from_user+0x2e/0x1b0 [ 2766.299522] __copy_msghdr_from_user+0x91/0x4b0 [ 2766.300482] ? __ia32_sys_shutdown+0x80/0x80 [ 2766.301379] ? udp_v6_push_pending_frames+0x360/0x360 18:48:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b0a732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2766.302451] ? inet6_sendmsg+0xbd/0x140 [ 2766.303396] ? inet6_compat_ioctl+0x320/0x320 [ 2766.304315] ? __sock_sendmsg+0x55/0x190 [ 2766.305158] sendmsg_copy_msghdr+0xa1/0x160 [ 2766.306034] ? do_recvmmsg+0x6d0/0x6d0 [ 2766.306842] ? __lock_acquire+0x1657/0x5b00 [ 2766.307820] ___sys_sendmsg+0xc6/0x170 [ 2766.308843] ? sendmsg_copy_msghdr+0x160/0x160 [ 2766.310029] ? vmacache_find+0x55/0x2a0 [ 2766.311054] ? __lockdep_reset_lock+0x180/0x180 [ 2766.312146] ? lock_acquire+0x197/0x470 [ 2766.312968] ? find_held_lock+0x2c/0x110 [ 2766.313808] ? __might_fault+0xd3/0x180 [ 2766.314619] ? lock_downgrade+0x6d0/0x6d0 [ 2766.315499] ? asm_exc_page_fault+0x1e/0x30 [ 2766.316388] __sys_sendmmsg+0x195/0x470 [ 2766.317225] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2766.318111] ? lock_downgrade+0x6d0/0x6d0 [ 2766.318979] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2766.320034] ? wait_for_completion_io+0x270/0x270 [ 2766.321036] ? rcu_read_lock_any_held+0x75/0xa0 [ 2766.321979] ? vfs_write+0x354/0xa70 [ 2766.322753] ? fput_many+0x2f/0x1a0 [ 2766.323534] ? ksys_write+0x1a9/0x260 [ 2766.324302] ? __ia32_sys_read+0xb0/0xb0 [ 2766.325149] __x64_sys_sendmmsg+0x99/0x100 [ 2766.326022] do_syscall_64+0x33/0x40 [ 2766.326790] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2766.327862] RIP: 0033:0x7f9d069ffb19 [ 2766.328644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2766.332476] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2766.334150] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2766.335630] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2766.337083] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2766.338576] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2766.340078] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2766.360568] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2766.363220] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:48:55 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/16]) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="04000000000000003e2f66696c653000"]) r4 = getpid() r5 = pidfd_open(r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pidfd_getfd(r5, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x22}}, './file0\x00'}) fsmount(r1, 0x1, 0x71) r7 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052c00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000052e00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053000)={0x376, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r9}], 0x6, "5c83c9bf8af498"}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f00000004c0), 0x1, 0x432000) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xe6, 0x3, &(0x7f0000000200)=[{&(0x7f0000000380)="e59480b09db98c56fb8c10ba94c8fb323d0c208308ff8b512a55e0a2a40fbe315bb537d00f11099060d3f78257e1e02cc6520a67bf15ed8b123da5b367218cc9d0617e3473f732e057f8e05bdbf1a09dd0a1e734c4b2a4ba163ab985fdcc139bb8348b3dce11500e7682ac6162771c770eae5bd3244cc530f3d1fc8999a43d1877e6104ff9d1543af756c4d7e0d4ef26b6e6c8394788247f4de243e0f77f22dfab8ceb60", 0xa4, 0x5}, {&(0x7f0000000500)="6c565bdb91f722748a05f68322367e1f78f75f0fb8871351f85ee3248f854c83f8fce7ffc5c6fdc5058bdf1a2bb4ba95afd55abe0ef203b4e9aa58f6f3e0c52c81ed9064ccdf2d481a57d629fef491acbd21448da28b5dd7859103606214191eefb8a60af9213d99a729e74dc832500614212b2cd15218217a0fcd28432c784c17e4cda8246c4054dc4259136396070725b8ea2721513913333a7094e011c1", 0x9f, 0x100000000}, {&(0x7f00000005c0)="c8d4a4a832706808ce5eb48adee6568c39b7d963b5eeba67f592e10cd3746cecc166cd330c2358459d08cd0e4adecb1009c8280f40f5a7ca644d2e62562a06a44046f181c47ce6fe2f01cdb2254aa9ab386638c9ec392f4da1e79db4458817ab1037b1c8f7b5ef1b604558423ac1e9f23e44ba2040790e7606baa861f89b8d55fd8d0569049fab68c8dad554f2837f34c2571520faeadd996aa265", 0x9b, 0x7}], 0x2000000, &(0x7f0000000680)={[{'/dev/random\x00'}, {'/dev/random\x00'}, {'-#)/i^)+}'}, {',{\xec'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/input/mouse#\x00'}}, {@smackfstransmute}, {@euid_lt={'euid<', r10}}, {@subj_role={'subj_role', 0x3d, '\\\xc2'}}, {@fowner_gt}]}) 18:48:55 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfd090000, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:48:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = fsmount(r2, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f000000ad80)={{{@in, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f000000ae80)=0xe8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x7, 0xff, 0x9, 0x0, 0x8832, 0x41018, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp, 0x800, 0x7, 0x0, 0x3, 0xffff, 0x1, 0xfeff, 0x0, 0x707dd90d, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:48:55 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 26) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:48:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:48:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7, 0x2, 0x7, 0x1, 0x0, 0x100000001, 0x100, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0xe}, 0x2000, 0x4, 0x9, 0x0, 0x2, 0x5, 0x42, 0x0, 0x44b26d13, 0x0, 0x3ff}, r2, 0x2, r0, 0x2) close(r1) [ 2766.756587] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2766.761844] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2766.795741] FAULT_INJECTION: forcing a failure. [ 2766.795741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2766.796637] FAT-fs (loop6): Directory bread(block 3) failed [ 2766.798650] CPU: 1 PID: 16499 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2766.799418] FAT-fs (loop6): Directory bread(block 4) failed [ 2766.800797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2766.800810] Call Trace: [ 2766.800838] dump_stack+0x107/0x167 [ 2766.800864] should_fail.cold+0x5/0xa [ 2766.803420] FAT-fs (loop6): Directory bread(block 5) failed [ 2766.803765] _copy_from_user+0x2e/0x1b0 [ 2766.804320] FAT-fs (loop6): Directory bread(block 6) failed [ 2766.805035] __copy_msghdr_from_user+0x91/0x4b0 [ 2766.805057] ? __ia32_sys_shutdown+0x80/0x80 [ 2766.805078] ? udp_v6_push_pending_frames+0x360/0x360 [ 2766.805103] ? inet6_sendmsg+0xbd/0x140 [ 2766.805942] FAT-fs (loop6): Directory bread(block 7) failed [ 2766.807013] ? inet6_compat_ioctl+0x320/0x320 [ 2766.807037] ? __sock_sendmsg+0x55/0x190 [ 2766.808110] FAT-fs (loop6): Directory bread(block 8) failed [ 2766.808984] sendmsg_copy_msghdr+0xa1/0x160 [ 2766.809008] ? do_recvmmsg+0x6d0/0x6d0 [ 2766.810023] FAT-fs (loop6): Directory bread(block 9) failed [ 2766.810840] ? __lock_acquire+0x1657/0x5b00 [ 2766.820540] ___sys_sendmsg+0xc6/0x170 [ 2766.821558] ? sendmsg_copy_msghdr+0x160/0x160 [ 2766.822742] ? vmacache_find+0x55/0x2a0 [ 2766.823742] ? __lockdep_reset_lock+0x180/0x180 [ 2766.824720] ? lock_acquire+0x197/0x470 [ 2766.825555] ? find_held_lock+0x2c/0x110 [ 2766.826565] ? __might_fault+0xd3/0x180 [ 2766.827560] ? lock_downgrade+0x6d0/0x6d0 [ 2766.828425] ? asm_exc_page_fault+0x1e/0x30 [ 2766.829329] __sys_sendmmsg+0x195/0x470 [ 2766.830156] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2766.831032] ? lock_downgrade+0x6d0/0x6d0 [ 2766.831918] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2766.832923] ? wait_for_completion_io+0x270/0x270 [ 2766.834047] ? rcu_read_lock_any_held+0x75/0xa0 [ 2766.835012] ? vfs_write+0x354/0xa70 [ 2766.835803] ? fput_many+0x2f/0x1a0 [ 2766.836561] ? ksys_write+0x1a9/0x260 [ 2766.837331] ? __ia32_sys_read+0xb0/0xb0 [ 2766.838172] __x64_sys_sendmmsg+0x99/0x100 [ 2766.839045] do_syscall_64+0x33/0x40 [ 2766.839824] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2766.840876] RIP: 0033:0x7f9d069ffb19 [ 2766.841660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2766.845423] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2766.846981] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2766.848448] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2766.849906] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2766.851372] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2766.852837] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2766.871789] nfs4: Unknown parameter '/dev/random' 18:48:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b25732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:48:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x7, 0x80000001) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 2766.974739] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2766.978464] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:48:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) socket(0x10, 0x1, 0x8001) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) [ 2767.247352] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2767.250288] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2767.282351] FAT-fs (loop6): Directory bread(block 3) failed [ 2767.283847] FAT-fs (loop6): Directory bread(block 4) failed [ 2767.285340] FAT-fs (loop6): Directory bread(block 5) failed [ 2767.286669] FAT-fs (loop6): Directory bread(block 6) failed [ 2767.288005] FAT-fs (loop6): Directory bread(block 7) failed [ 2767.292160] FAT-fs (loop6): Directory bread(block 8) failed [ 2767.293633] FAT-fs (loop6): Directory bread(block 9) failed 18:49:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) socket(0x10, 0x1, 0x8001) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:49:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)=ANY=[@ANYBLOB="013820230000000012dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2aa2c"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x7, 0x7, 0x200, 0x3c1, 0x8, 0x3}) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:49:10 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffe4, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:49:10 executing program 3: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x40, 0x0, 0x0, 0x7fff, 0x8082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x6, 0x7, 0x13, 0x0, 0x9, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x862, 0x9}, 0x14000, 0xb00, 0x800, 0x2, 0xffffffff, 0x707e, 0xfffa, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) 18:49:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b2e732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:49:10 executing program 1: listen(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0xfffffffffffffd35}}]}, 0x134}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x0, @multicast2}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x20a, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c080}, 0x880) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:49:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x14020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x101080) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:49:10 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 27) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) [ 2782.202470] FAULT_INJECTION: forcing a failure. [ 2782.202470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2782.205336] CPU: 0 PID: 16562 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2782.206748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2782.208429] Call Trace: [ 2782.208969] dump_stack+0x107/0x167 [ 2782.209716] should_fail.cold+0x5/0xa [ 2782.210496] _copy_from_user+0x2e/0x1b0 [ 2782.211308] __copy_msghdr_from_user+0x91/0x4b0 [ 2782.212259] ? __ia32_sys_shutdown+0x80/0x80 [ 2782.213152] ? udp_v6_push_pending_frames+0x360/0x360 [ 2782.214198] ? inet6_sendmsg+0xbd/0x140 [ 2782.215004] ? inet6_compat_ioctl+0x320/0x320 [ 2782.215935] ? __sock_sendmsg+0x55/0x190 [ 2782.216764] sendmsg_copy_msghdr+0xa1/0x160 [ 2782.217636] ? do_recvmmsg+0x6d0/0x6d0 [ 2782.218432] ? __lock_acquire+0x1657/0x5b00 [ 2782.219321] ___sys_sendmsg+0xc6/0x170 [ 2782.220126] ? sendmsg_copy_msghdr+0x160/0x160 [ 2782.221047] ? vmacache_find+0x55/0x2a0 [ 2782.221855] ? __lockdep_reset_lock+0x180/0x180 [ 2782.222802] ? lock_acquire+0x197/0x470 [ 2782.223612] ? find_held_lock+0x2c/0x110 [ 2782.224439] ? __might_fault+0xd3/0x180 [ 2782.225244] ? lock_downgrade+0x6d0/0x6d0 [ 2782.226118] ? asm_exc_page_fault+0x1e/0x30 [ 2782.227039] __sys_sendmmsg+0x195/0x470 [ 2782.227857] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2782.228733] ? lock_downgrade+0x6d0/0x6d0 [ 2782.229589] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2782.230565] ? wait_for_completion_io+0x270/0x270 [ 2782.231548] ? rcu_read_lock_any_held+0x75/0xa0 [ 2782.232485] ? vfs_write+0x354/0xa70 [ 2782.233247] ? fput_many+0x2f/0x1a0 [ 2782.233982] ? ksys_write+0x1a9/0x260 [ 2782.234755] ? __ia32_sys_read+0xb0/0xb0 [ 2782.235599] __x64_sys_sendmmsg+0x99/0x100 [ 2782.236481] do_syscall_64+0x33/0x40 [ 2782.237234] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2782.238255] RIP: 0033:0x7f9d069ffb19 [ 2782.239019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2782.242698] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2782.244260] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2782.245711] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2782.247141] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2782.248576] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2782.250000] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2782.265668] FAT-fs (loop6): Directory bread(block 3) failed 18:49:10 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) write(r1, &(0x7f0000000080)="ce1d423678259aa6b7050a09162ca8dcf3fcfac15b0d337c347058c7f29f29a1e8ff58bdc202c4cee4e43808d70ed9ab6ed118f5e91ba2b2aa5baaee4e3369b2ddae808fd84990e9ff2feb", 0x4b) close(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xa5}}, './file0\x00'}) [ 2782.269680] FAT-fs (loop6): Directory bread(block 4) failed [ 2782.270964] FAT-fs (loop6): Directory bread(block 5) failed [ 2782.276252] FAT-fs (loop6): Directory bread(block 6) failed [ 2782.280892] FAT-fs (loop6): Directory bread(block 7) failed [ 2782.331091] FAT-fs (loop6): Directory bread(block 8) failed [ 2782.351523] FAT-fs (loop6): Directory bread(block 9) failed 18:49:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000000c0)={0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x13, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000001c0)={0x1, 0x4}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000002c0)=0x6) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, 0x0, 0x120) ioctl$FITRIM(r2, 0xc0185879, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x3, 0xfffffffffffffffc}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900210c0000000000000000"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900210c000000000000000002"], 0x30}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000180)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:49:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) [ 2782.599561] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2782.627202] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2782.629546] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2782.776894] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 18:49:24 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 28) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:49:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000000)="b07ded093102bafcf6293864746d20edd26cdb1ef74f8611be7d171e14d09ee00820ecdc5398708f3703ebb56fc421d1b5f1a1385f5d60ef51a436c50a3ba7a46fe7bc083f18ccad8b9be44da6bb9fb88f0d620b85b7c1d65036cb4dc50d96e8325cd399c5b15a240b36f82408838589337e1c5b4597b061f1c48a1f25590fc2b9db6ac2a53ef084b81cf7e531a7ead27592ca4f99d11f8149607dc398a4a76c9b10", 0xa2, 0x40000c0, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @mcast1, 0x8000000}, 0x1c) 18:49:24 executing program 1: stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000080)="655a284a232fab391ddf91cb810d088b3a717d22d1f9685daf6157a7a0f00add434fb6d0b46beeeff3162f132a72d473b8e6805c06bd70567dbcea3596eb91cbb0b970bddd8625326ac8536e646ade6092719b8f8a070e608e18b714c6aae97518670c48b7e7da479a905c0cdb1c9b7ff997cdcd6bdd8a77", 0x78, 0xaf6}, {&(0x7f0000000140)="0260191b4dd734ab6a0f84b85459b253f0faf14171955b6d0260ea3a947999521b5cf4604bbd32603cde8e3a3d21783d5c5f0be8e4adcbc23f613ac7edc2e0d7063976253e7cbbbcdf8c0a4a6150aa76c1f7168d3ecc46d18b3e527e1fabb2ab4f3f8108abe15004f9d646cc0790b3f02191fa6f6f70409df7e061aa85e92076", 0x80, 0x100000001}, {&(0x7f00000001c0)="206ad7ce4e23d728a0ecc94e58", 0xd, 0x3}, {&(0x7f0000000200)="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", 0xfb, 0xffff}], 0x8008, &(0x7f0000000540)=ANY=[@ANYBLOB='shortname=win95,uid=', @ANYRESHEX=r0, @ANYBLOB="2c0012dd986bb2019854180e534d79c48cb8e2149f26f47b90d77d71e2420ec66e02094f44f819e9a33ca616cb40fb3be1a307a234117867edb23133dee546e214499fdc61ab18b3f087d58d3a194b399bc08036881e44b3796ca99e208156cc44c6f074fd61bcf1a6deed822cc6ac3aa41a2879ce8720da2e36a057f633ee6a8fe832c1fe3c404ff606481cb060869ded756ed9724b3d41f81b8159461b97072ef54545e0433be47305f152c99e3d3e17f998adc5c39a4fa21484db8f5c1f8e6f1a52587b2169f3623f8757f0bc972f59a0e1b79f782385f1"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x6000, @fd=r1, 0x6, 0x80, 0x3, 0x11, 0x1, {0x2}}, 0x5) 18:49:24 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:49:24 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b2f732e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:49:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="ae19e9710b", 0x5, r2}, 0x68) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r3) 18:49:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000400060004000000dbf57d"]) 18:49:24 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x32e, 0x0, 0x1000}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x3f, 0x8001, 0xf}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000180)={0x6, 'ipvlan1\x00', {0x8}, 0x2fa4}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5}, 0x68) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x400010e, 0xc000) pidfd_getfd(0xffffffffffffffff, r2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0x4000cd08, 0x0, 0x0) [ 2796.223858] FAULT_INJECTION: forcing a failure. [ 2796.223858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2796.226627] CPU: 1 PID: 16600 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2796.228128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2796.229910] Call Trace: [ 2796.230488] dump_stack+0x107/0x167 [ 2796.231285] should_fail.cold+0x5/0xa [ 2796.232138] _copy_from_user+0x2e/0x1b0 [ 2796.233005] __copy_msghdr_from_user+0x91/0x4b0 [ 2796.234004] ? __ia32_sys_shutdown+0x80/0x80 [ 2796.234949] ? udp_v6_push_pending_frames+0x360/0x360 [ 2796.236077] ? inet6_sendmsg+0xbd/0x140 [ 2796.236936] ? inet6_compat_ioctl+0x320/0x320 [ 2796.237896] ? __sock_sendmsg+0x55/0x190 [ 2796.238782] sendmsg_copy_msghdr+0xa1/0x160 [ 2796.239736] ? do_recvmmsg+0x6d0/0x6d0 [ 2796.240583] ? __lock_acquire+0x1657/0x5b00 [ 2796.241527] ___sys_sendmsg+0xc6/0x170 [ 2796.242373] ? sendmsg_copy_msghdr+0x160/0x160 [ 2796.243348] ? vmacache_find+0x55/0x2a0 [ 2796.244215] ? __lockdep_reset_lock+0x180/0x180 [ 2796.245226] ? lock_acquire+0x197/0x470 [ 2796.246076] ? find_held_lock+0x2c/0x110 [ 2796.246953] ? __might_fault+0xd3/0x180 [ 2796.247824] ? lock_downgrade+0x6d0/0x6d0 [ 2796.248718] ? asm_exc_page_fault+0x1e/0x30 [ 2796.249666] __sys_sendmmsg+0x195/0x470 [ 2796.250533] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2796.251482] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2796.252434] ? clockevents_program_event+0x131/0x360 [ 2796.253530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2796.254653] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2796.255819] ? trace_hardirqs_on+0x5b/0x180 [ 2796.256744] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2796.257924] __x64_sys_sendmmsg+0x99/0x100 [ 2796.258846] do_syscall_64+0x33/0x40 [ 2796.259662] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2796.260765] RIP: 0033:0x7f9d069ffb19 [ 2796.261569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2796.265521] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2796.267152] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2796.268843] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2796.270611] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2796.272211] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2796.273738] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2796.283885] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2796.286199] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:49:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x620a, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, &(0x7f0000000840)}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xffff) openat(r5, &(0x7f0000000040)='./file0\x00', 0x101002, 0x110) perf_event_open(0x0, 0x0, 0x0, r5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffff) [ 2796.326750] FAT-fs (loop6): Directory bread(block 3) failed [ 2796.328334] FAT-fs (loop6): Directory bread(block 4) failed [ 2796.329773] FAT-fs (loop6): Directory bread(block 5) failed [ 2796.344020] FAT-fs (loop6): Directory bread(block 6) failed [ 2796.350362] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2796.354567] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2796.370760] FAT-fs (loop6): Directory bread(block 7) failed [ 2796.385813] FAT-fs (loop6): Directory bread(block 8) failed 18:49:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) r4 = accept$inet6(r0, &(0x7f0000001180)={0xa, 0x0, 0x0, @local}, &(0x7f00000011c0)=0x1c) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000001200)=0x10000) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) [ 2796.402137] FAT-fs (loop6): Directory bread(block 9) failed 18:49:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000040000000400004bbaf139"]) 18:49:25 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:49:25 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b660a2e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:49:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400010e, 0xc000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="013820230000000012dbe6b4d124ef9d0ed8947ff4cc2517853fed301a5c8fecc8517d48c2b42c46fbb4c59557aae285a9c823e2978027c28f1e07df3552a875faa39628"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) write$bt_hci(r2, &(0x7f0000000180)={0x1, @le_conn_param_req_neg_reply={{0x2021, 0x3}, {0xc8, 0x2}}}, 0x7) dup2(r1, r2) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000001c0)=0x1) 18:49:25 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) r1 = inotify_init() ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000006c0)={{r1}, "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"}) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000100)=""/170, 0xaa}, {&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f00000004c0)=""/236, 0xec}, {&(0x7f00000005c0)=""/83, 0x53}], 0x5, 0xd252, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2796.764340] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2796.806900] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2796.824263] FAT-fs (loop6): Directory bread(block 3) failed [ 2796.841165] FAT-fs (loop6): Directory bread(block 4) failed [ 2796.848005] FAT-fs (loop6): Directory bread(block 5) failed [ 2796.859412] FAT-fs (loop6): Directory bread(block 6) failed [ 2796.860746] FAT-fs (loop6): Directory bread(block 7) failed [ 2796.868911] FAT-fs (loop6): Directory bread(block 8) failed [ 2796.869311] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2796.870249] FAT-fs (loop6): Directory bread(block 9) failed [ 2796.874786] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:49:25 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'bridge0\x00'}) close(r1) copy_file_range(r0, &(0x7f0000000000)=0x5, r1, 0x0, 0x3, 0x0) 18:49:40 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:49:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66222e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:49:40 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0xffff}, 0xa0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffec}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) fallocate(r1, 0x34, 0xffff, 0x2) 18:49:40 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000003dc0), &(0x7f0000003e00)='./file0\x00', 0x0, 0x0, &(0x7f0000005040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0) r7 = syz_open_procfs(r4, &(0x7f0000000100)='net/dev_snmp6\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x400010e, 0xc000) r8 = inotify_init() r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000004d00), 0x400010e, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r11}}}], 0x20}, 0x0) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="7924abfab50ac2065e17cc9097c6ac1abf", 0x11}], 0x1, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r6}}}], 0x140, 0x10}, 0x4008840) openat(r1, &(0x7f0000000040)='./file0\x00', 0x200, 0xa92387c35acff3ea) 18:49:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$inet6(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="7f9c8882da4abb3e1b08cdb579be22bc8d2061f6b61ffaf2155c7d56ee9a8376b9ac6da0e2d57543a7ae0dfbfec385daca88bc0832610f2813db52579c10459e99d85196aee31265e1b90b3e2ceb3b6388e3c9259fa7eb33a58bdf35eabc01e2b1dddfd3cafd85ef238318de59c91fd671544e3b8acaea", 0x77}, {&(0x7f0000000080)="ade8d520779f12db05449887e4d4be18e9d258945dada4d590b6e761b5a34d3eb58eb7ca6a649de3cd09e3a8db175fe8003d034dfd176cd2282e654e674c61c5ae4c7c13ca452b36094f7f282831ce74bbafd7a8dd73765936f2321dc02fd80b27b3c6fcc32a5607ef0d97cd1dae8ceffb614b5b437c85b3367cde2f6e779afb313e07e7a2a45e73d3c6692368", 0x8d}], 0x2, &(0x7f00000001c0)=[@tclass={{0x14, 0x29, 0x43, 0x81}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}}}], 0x48}, 0x20000000) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:49:40 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 29) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:49:40 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) dup2(r0, r1) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) 18:49:40 executing program 7: syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x5000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20}, 0x0) kcmp(r5, 0xffffffffffffffff, 0x1, r0, r0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000004c0)={0x0, 0x3, 0x8000, 0x1}) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000140)=""/228, 0xe4}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000280)=""/99, 0x63}], 0x5, &(0x7f0000000300)=""/41, 0x29}, 0x2) shmdt(r1) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000940)=""/135) [ 2811.394288] FAULT_INJECTION: forcing a failure. [ 2811.394288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2811.395703] CPU: 1 PID: 16694 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2811.396510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.397459] Call Trace: [ 2811.397777] dump_stack+0x107/0x167 [ 2811.398208] should_fail.cold+0x5/0xa [ 2811.398665] _copy_from_user+0x2e/0x1b0 [ 2811.399126] __copy_msghdr_from_user+0x91/0x4b0 [ 2811.399661] ? __ia32_sys_shutdown+0x80/0x80 [ 2811.400175] ? udp_v6_push_pending_frames+0x360/0x360 [ 2811.400770] ? inet6_sendmsg+0xbd/0x140 [ 2811.401230] ? inet6_compat_ioctl+0x320/0x320 [ 2811.401753] ? __sock_sendmsg+0x55/0x190 [ 2811.402235] sendmsg_copy_msghdr+0xa1/0x160 [ 2811.402737] ? do_recvmmsg+0x6d0/0x6d0 [ 2811.403208] ? __lock_acquire+0x1657/0x5b00 [ 2811.403734] ___sys_sendmsg+0xc6/0x170 [ 2811.404223] ? sendmsg_copy_msghdr+0x160/0x160 [ 2811.404775] ? vmacache_find+0x55/0x2a0 [ 2811.405255] ? __lockdep_reset_lock+0x180/0x180 [ 2811.405821] ? lock_acquire+0x197/0x470 [ 2811.406302] ? find_held_lock+0x2c/0x110 [ 2811.406800] ? __might_fault+0xd3/0x180 [ 2811.407281] ? lock_downgrade+0x6d0/0x6d0 [ 2811.407792] __sys_sendmmsg+0x195/0x470 [ 2811.408281] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2811.408799] ? lock_downgrade+0x6d0/0x6d0 [ 2811.409309] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2811.409893] ? wait_for_completion_io+0x270/0x270 [ 2811.410478] ? rcu_read_lock_any_held+0x75/0xa0 [ 2811.411037] ? vfs_write+0x354/0xa70 [ 2811.411490] ? fput_many+0x2f/0x1a0 [ 2811.411946] ? ksys_write+0x1a9/0x260 [ 2811.412408] ? __ia32_sys_read+0xb0/0xb0 [ 2811.412905] __x64_sys_sendmmsg+0x99/0x100 [ 2811.413413] do_syscall_64+0x33/0x40 [ 2811.413863] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2811.414480] RIP: 0033:0x7f9d069ffb19 [ 2811.414936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.417148] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2811.418061] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2811.418868] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2811.419729] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.420553] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.421413] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2811.439398] FAT-fs (loop6): Directory bread(block 3) failed [ 2811.445465] FAT-fs (loop6): Directory bread(block 4) failed [ 2811.448141] FAT-fs (loop6): Directory bread(block 5) failed [ 2811.455040] FAT-fs (loop6): Directory bread(block 6) failed [ 2811.455732] FAT-fs (loop6): Directory bread(block 7) failed [ 2811.460714] FAT-fs (loop6): Directory bread(block 8) failed [ 2811.462782] FAT-fs (loop6): Directory bread(block 9) failed 18:49:40 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{r0}, "0d74b3c4c0f4685eb55572c7cca16b127f1bcbc613c1efc91bcc179484461688a37321516f132a006cefe5d1983dc8b4f25997d58fd3d970e16b34009223fa9a38e2d86c86c4d8b967aca559bbfb68f0ba21c3c00ee48512a107ae422dd49e83d27f298e99878903273c1df822eeb62372868c4982ec739c7be0da4e1e6f98665755f6ebfbeac9702e2d7cbfa149ced9a6af6679055f14aea53194947bf33dbcedef30f830b41ee707dff422f785c3e73e9a9ff0297681fc58f61c2472ee5e584fbf941523f4f94e2338ac37d57be91a23fa287e863e0d1e2ddcdb402ae54f14720639fed89786d31d6be56fe9a23ffd5273c27502e713ccb5b7b423fd26cf9fe8581c4e8dd3fbfd231d1b615bfa3c94f81f6ac2da0665d55c6ea9014e5e185dd5e07e0eb2e9d2bb16c128b710b7bbbcf0adbd354d98e01b09ed58aa08961dc5e1f3e838b18e241a5d0684f4a986a0d18776773cd1545908b6de142afb99b48a31018fe26b958fc66414150f36599ad5c21941b99f39e7adc50bf5a4862d54b1218e2a84593a8555a3485a017bb1c27d07017e5f107f4ce87994edfd583673da58c5f81beb95cf28a29aad3ef7c7cc4688938a5100c17f47cea0184614e4022d94d2fdb414465fd15b10d81fd0ce9a755ef96b8a1d3f6c3f879b2b5255729cd5db4b79a1324e5917d07e25a57830bd4f7e2a070ebea3f68b6d1d5ce9393f7867e3ccaa7a56758f14b015181b681f5d9e88e5bfe727a94dd1b643f4b0df745ea521eef3e97298fe258484cdba2cdd1157633e2a5587b8fc08d9b4e2e0cd69d69b10a1259839dd29d9e774ec7ea196a42c081ee47b8e3733f98f38ff6409db6bae463b3b37303ab20e5e28a5e0cb66ab34a5fdc7a3a35b5eab927ca89a554ce23e49e36bb0cdca3a549daadd8ee24ee2470ab864ba5832aa67c0d849ed24754cfb60df6d0523e938b4941eeda9f8c0272dfb1c86070071a7713050dddb12954b9fc5b12123d98ac5a784ec983a35ca0875b3211b7fa088e2dbb1365ef78f6934f1cb54e46774e6af9a6c035acc9c244c428542c47f0047fdff486412a098b5ecab3fae2238c2dd8bfe6b6140546ffc27b70282bcd3f0d772e70acc3a8b0ac777ac5d1dfbe2dc21f8710a637aca2bc88f82a04a6c79287fb72b025fc5f8a07cf1835d9c3c03ed0e8b1974bf24cb830d66290ed317287f4da9df909b97eaa470358d85256c714f8a345717aa995b5e456f63cdb0fe153e950f0e7d072af33ee3c48114230c7a8d7616756cbb33b9521109d2eb0618b848aee64441f554e624ff14c43af3f115487d4d086d45ccf373c547d472d71c3e597df1ef92a848e942ac4a582f8bfef29c8f370c8646601334ad6b0db9066bc15dc1378ab37a911e678a7c2a03dea574ba26dd86230c37d9a952e73cf349b4f5e6c0ce282e5a01b2020ffea4087d5daf15d06f9f9af6a30a6865fc743ec90023fa42245a9e83a85439712abc8aff37d01a50a9cef8e3ec0a59a53cd6a5c9a7182148607f0c36b5cf3cc89d6acd19eb9fc7829787aa27053d285ecc70ae65abfaa6e399f837d0a85d0bfb7549f5b94e6d9e0f615af4a9b70009010fbd73440d941b9d5cea9a0c5b78cfbdeb9152c09970ae3cbb94924ac256d04f3b27bf3e799332897ff0294e9b012228ac1a74109f52967187cdb82e73f67cc92c1de21e6e804c7b76dc406ca9d6cedf748d0fae0f4c780b8c501837891450eee1ef56f72ea24efa3aca882fe1b56016ebb5f124b7398c9815d5359108736d4ad187e26898fda7648e9e5e6cf95c4ff64d471c604fd8de1f7463471c03f972293cfac18e855d20bc42a0f077d1b5a0b404c22660edd9adbfeaa84637bdde1f41e7dddda57fd759fd2c5a0456da7b738e97072b8a301bffd1e3cd83660251f4880a23ac9199ece6c481e0ecbdc89df215090b1ed19d6ed732e2045a7725175932b377ccb28d3f4511f76c262e34c2c781ae6cda6f27e9b6130e664d14d687405e3f8bdcbf3ac1f06567bdf3574362d3c2d398c4fb4266a1bda3f3af4d1a1e0f8952bbed8b391f9f3f50186850181867b157b2424e90be0b81d28e87d9c7081c3e42413d0ec34de288190957432bc7f7156ff5136271bc186470a685bce833c769e9d6bc0addffe772dd56cb8a772d73810e0c7ad47de07af46cfbe42b5f6c2197cac01f389fa855d00f070c900646a6bd826b85c08121ed58c9c8e7508a06630cc2bec992224b9ae44a9e22d75625699b6beabc821939fe36834f663c3084ce5aca8a51df8017dccdf9112784190561f22d13a00940aebd56641bd790c73002ee8948d51ef498b1fc8c818802cb5e8984ef3d770383a790eedfef4f13398e68035853358287493116921a9c03e4124fdec90ca5c85e024388ed11e4f8956cc09f3281fe70f6e94a3ab6dbc457aa251a84d247743cf9d72f019a45c12050221a766fcbf64fe3ab5b676c6d9ae35197c507d09502d77e72899d1cac54199afb16333d2f348cf5a446975499f521be0b5c74845de75b5c74716e3f95853e80f3f69f9ef02ae954ca5cf1d1ad688e012e4b9524da6e2e8518b4e120283f95a4563487acd963b463cf1c272251f7c806ea1d4ec1b3e380cbaee3afba7f2f2b4ac36f3b224e525480c09e8cd5e2bc5f98807a1ca2e7eba0b85e365131412e2a7e8b2f9eeceea12667616bfff65593a94568e507b0b0a9c2f8a1589ba5d2b945e1eb9f7061cce3f7dbdca5bc49e4462a8ead1cff0a83de669d871a14e415819f55d89a5a01759d3fb444c6c568dacfac968881c9ab50529cdece1b2c3f1052e96f0458cefc9ff9017b3fe8266dc074f6e217a3c8e24a3a1e3899be69cdb982706a92f60593ac543c996fd7f05a1004977b6dbeeacb012a76f29762e98b04e60f3fce94ae2f72e8207bfcb4c186a8e59d57e7a54e51e13fbba75f4b2f80588630961d6c8ed762e8327b67a0cdeb786b6a5c9c6ca47dc03bd4707b348ccea80ee0fbcd5406257dbec17fb321c0068509a658be447d479d22d035fbb50b88b90d1bccba1744dcc11f8a480e2f46583dd135702448b20a72af234754b934c7dda61dafa974a7c67942cb0d9286a239c8a90f6b4a860b5b1e4ffd31da13280bb02077ae5c08e78a5c635e7d795514260b999aa5b6cbc86da27fdeee729a2be13f6a97dd99770b12806f46348fcaa7aec7131e47f888480c73a37ca90b2ec816bcd3ad844a1afb1c18ccc2676ab0518469bd6783ba70bf113874b23fddf7c4023f0899033c0df06bca72215f3cd218c44f5b9135595267f5a4aee2f8aafd4e0748c935bf715d15194830226602c6b79c1a3bd8c85c253c24da3a66a40505bd7a3f92056673cfa9d4b24c3178b6138826c3c9cdec5842d8640cd81a35f12161568bc48a9a4f5de36e7186779a92ec86b8f1480f49184f3c1e4bf0a5a2fcf0506e97d3758ba5acf58b6d2612f2647bdb86bfa6ac08cdf7355ba9fa0e7af142402268f3f4d2db86a95aae73d0becf66e80bc810b8f72979abcf75fc1cbcb4ca865555351826d454b8b60fc8e63f5971918074e8afffc2a128bbbc4267e88c2b6f79670df509e768ea14ef6a7e584ec777ac5de6625ba14a257ffa7e6a49827f94670608123f1e147234af7829f705a2609ed2eb9f228406b841be6650ef7b6911291738ca968e274f06efa62921e1d06a0f7b3eac4d633a4060536669bc256c94711f8ba66abe61b8e87817d3d67cf660cd7ed60e73245d9babff293fc8dba09f8c0cd3089b8006714a4c2d5416e9b3a80a3c281b723f9eafc4ad2c2dd7e5c26cdf3f21df2cb6a7279f077e6c0d43cadbc8da013011f74a2ab5c741968e26f14a8495a0a27a5cd41cb3196a7ac19cb148c52b0f4cb21758cd467d7ea9cb73dbefa218e4dd720f6e556cef00452aecfa23c4268aa63c6f875e2a6632103af98e396f26919859746967a2fd8750fa6e2e65372376793f90f3c30964ec9b586c77d328cdd495bf6389d581e358fbe49e96a69f01a1aec80be68214b38d669b9231839f0869c838998f1838b1059ae0b92218d93c367fc31fd634c2a96c4f3450a9e726e329c3f7675f56592c15ced36c77f1fd2e860f60db7e73f15d2b56b0cd41f89fd618da4a8014c9651d20897c9bf365eee89e0862ede8fb15f92f26fe1437baf0d372e88dd055b7f7f5cf93309d9c5f871a18ea3b51f2cb01d96e22711201441a5bdf68a4e1a11edc02f9ba4da2af170e4d628cfabc3538298c34a06be2fd08d48ab6a99c10fbc63fccf4183bb8fa93e0ea272ef5c24c8da15d94a3411b3c69ba989c164ce96413cb50782475b6d415f915d39a6650a9c4119c0c02413caf50ce2a184954c5394d717c34aa6bbf54829b3886ccbe380f584a7dff15afae25ecfcd519c7821dc39d92dd9acdc00d23b2f888b8688bd9c14bd47a18ed260c289c7fe7313f672b0aea232d28c49efcc756440d458465418dde50d8975f505300def80640c62d754eb2226986225c522edfca8a753a5e50385588cb6e0f04e5ad1c7d27b335978a3ceeebbb225107ce7e47362f7fbf4bc711b50b5e5e8bb99c310d7e13c083a89d0adb4418ac449e6772cfc3f169528c027c4c1d0542c295ee413c24e156fd0d002e808557e04b8a1e8b0744fda528e93ac0bf746cf9cbfefd25d9d302c954e49deaec941fc9a1e70cf60543bcc8ae0e96141adb0de7064b660059aa99b74df63b6d5dde7b16cd9ef384757cdd77cb60ac937fcaf025001e46aff79b7f15f9dc2c8e7b474bc22901aad1e912867c56360a7bed03c4eed4c64e4692d88a2112dcf44063495ccb135c557160bff66071d05aef134f10c9813115cff02419a205e8ef160ec1a9d37bfee7f9a0df99b409d113f76266b0d021b48dd6cee83453aed3ee6970078d654ec926fe8759b3a776546dbeff98570b57a1b1b6a42a5ff37727ab1e6ae2202c32f8308e2f3c0422215e2610fb386f6e5d12df6012a5dccbb4d3a1cbe1693e8ebe5d89532f24c3eab8ebf5fc4379b57dde5fc2d97bdbb7e533f83ff1b7b443ff2a699b5cadf4eced05a6d668ebc602413ab4e851116023246c8fafb5f11dd5c735a8fa7e0ea60c26b20a2c7397e9121c82b09cfb59ff338713db5b73d24cbf0860b818da90e1c3ad0bbc29b92fd8dcee04443e138c82af9cc8409b1e473d7be9638b9b643fa8ac24886286b951ff555f0c4f0ba63f8ad73fb43709a7618f83ba344185986a28aae5613ef748618cc1be832a23d3f576f960372794b18940017d902fd83fcf56a19cde8795393deb1f7b8c5bf1c37d6e8bf30ea25f58e12dc11ca9536908fab270e458b8b48a6e427a807d85f90e86367dca5096acd93365be92cab040bf2b9c1b162a040bf754acd74d93a40aa6d056d8f8814227e4e7ff9b0685addd090fab5b7631fb09f4fc1613cfb8c79ba8dac0b56f95a3b0b1ad047246e0a127b71402ca76b16e0bfbd3f75f975d23ea36a2f0fc0933b238acf9eec95ea6a13ba34056a55b714d9b1be83e458a075edef2ae92ab1892a8a6154d4fa27ed6113b4357494a5dab5f54b6f954258234ca8cf40ed960fa1bc3d0e398cd1622fd00d480231d02a39f61ca897251b483d97bf07d34ea3ea3c28ecd738fad4feabf2dfc0de57cf24f9642a282b44e2ed643df756b185978b379d3c8f9829ab632d8e2cc528273cffcc3689172a7f1f6424dbf22592c145575cd48cfc24b1716f57e647f99ee1fea869c648d0f40e335e04758860ea85ff0caea196d7bfee1122616b9a291ff84fd"}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) [ 2811.483665] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2811.485085] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:49:40 executing program 7: syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x5000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20}, 0x0) kcmp(r5, 0xffffffffffffffff, 0x1, r0, r0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000004c0)={0x0, 0x3, 0x8000, 0x1}) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000140)=""/228, 0xe4}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000280)=""/99, 0x63}], 0x5, &(0x7f0000000300)=""/41, 0x29}, 0x2) shmdt(r1) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000940)=""/135) 18:49:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x7fffffff, 0x44004, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x1}, 0x8054, 0x6, 0x6, 0x3, 0x9b, 0x1, 0xfe01, 0x0, 0x8001, 0x0, 0x76f0}, 0xffffffffffffffff, 0x8, r1, 0x2) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x44c80, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 18:49:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66232e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:49:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0xba3a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000001400)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1479], 0x5c7) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000680)={{0x0, @dev={0xac, 0x14, 0x14, 0x30}, 0x4e24, 0x1, 'sed\x00', 0x20, 0x7fffffff, 0x20}, {@rand_addr=0x64010101, 0x4e23, 0x4, 0x9, 0x20, 0x9}}, 0x44) 18:49:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6}, 0x0, 0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)=ANY=[]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x28900, 0x80) openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x14101, 0xa6) 18:49:40 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x500, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:49:40 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x8) close(r0) [ 2811.739156] FAT-fs (loop6): Directory bread(block 3) failed [ 2811.739847] FAT-fs (loop6): Directory bread(block 4) failed [ 2811.743067] FAT-fs (loop6): Directory bread(block 5) failed [ 2811.744849] FAT-fs (loop6): Directory bread(block 6) failed [ 2811.747185] FAT-fs (loop6): Directory bread(block 7) failed [ 2811.750264] FAT-fs (loop6): Directory bread(block 8) failed [ 2811.762078] FAT-fs (loop6): Directory bread(block 9) failed [ 2811.763828] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2811.767124] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:49:40 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000380)='./file0\x00') umount2(0x0, 0x4) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0), 0x4004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) 18:49:40 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66252e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:49:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) [ 2812.057717] FAT-fs (loop6): Directory bread(block 3) failed [ 2812.059018] FAT-fs (loop6): Directory bread(block 4) failed [ 2812.060536] FAT-fs (loop6): Directory bread(block 5) failed [ 2812.061878] FAT-fs (loop6): Directory bread(block 6) failed [ 2812.063148] FAT-fs (loop6): Directory bread(block 7) failed [ 2812.064741] FAT-fs (loop6): Directory bread(block 8) failed [ 2812.070037] FAT-fs (loop6): Directory bread(block 9) failed [ 2812.088163] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2812.110354] EXT4-fs (loop7): re-mounted. Opts: (null) 18:49:55 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 30) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:49:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x4) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r1, 0x0, 0xb) fallocate(r1, 0x3, 0x0, 0x18000) pread64(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x125342, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xce) r4 = dup2(r3, r2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000340)=ANY=[@ANYBLOB="43e31f68a5ccc3ec69aa4806b01906076162f9ffffff7f25a5b9630f39230e9287790aa0db89f36cf6d04afe658ee20d9546dcdbddc85e7781b3d91b937e00001233a571b304c38b6d4200"/89, @ANYRES16]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffffff9) 18:49:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x7fffffff, 0x44004, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x1}, 0x8054, 0x6, 0x6, 0x3, 0x9b, 0x1, 0xfe01, 0x0, 0x8001, 0x0, 0x76f0}, 0xffffffffffffffff, 0x8, r1, 0x2) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x44c80, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 18:49:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0xfffa, 0x3}}}, {{@arp={@empty, @local, 0x0, 0xff000000, 0x4, 0x2, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x3fc9, 0x3, 0x3, 0x9, 0x9, 'caif0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x0, 0xa0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="006e51413da2", @empty, @remote, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000e00)=0x7fff) preadv(r3, &(0x7f0000000b80)=[{&(0x7f0000000500)=""/171, 0xab}, {&(0x7f00000005c0)=""/222, 0xde}, {&(0x7f00000006c0)=""/255, 0xff}, {&(0x7f00000007c0)=""/78, 0x4e}, {&(0x7f0000000840)=""/96, 0x60}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/139, 0x8b}, {&(0x7f0000000980)=""/131, 0x83}, {&(0x7f0000000a40)=""/28, 0x1c}, {&(0x7f0000000a80)=""/254, 0xfe}], 0xa, 0x7, 0x4) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'hsr0\x00'}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000dc0), 0x60c03, 0x0) dup3(r4, r1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r5, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r5}, 0x68) pread64(r5, &(0x7f0000002e00)=""/4096, 0x1000, 0x80000001) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 18:49:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) flistxattr(r0, &(0x7f0000000000)=""/144, 0x90) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000100)) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}, 0x3, 0x2}, 0xe) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) 18:49:55 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x9fd, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:49:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b662a2e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:49:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000001c0)={0x94, ""/148}) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="0300f158bcfef032014e36ffcbbc49258a40b893b30cf53dc04a34de4f34f437a986cf8d88c4f66ece301db6ad7894d8f0a435c64f2c04c70fc79a83b1f8846434df0960e00247f71eeac7af12be8905ec5bf64eb1cb9e2e3fb256fc628ce07990def3d9a0e037b35c8d2598f37543be2099301193"]) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000000)={0x1, 0xf1, "d5533c9196b9dd36efe815961bb975b38d969ccfd6359ea35755f9ef9ed6400cc6c627a7ae262aa8ea53845ccdb9adaf069481476fe7ff1658f534cdec09f845d3e27a173c8add95898a746666e9162f204e202bb9e4c89b0e937ad7323ad9cfee57702cbac2fd958e1aa1ac2d04da2dd05d55801d094ed1b266d1d142a8787ed6cce5a3023e54839a7f468ad253b458e279f7a9510f708d0c8ccfe9bf990f4d99c5c4db82225af767f5985bf276500fcdcaefdbd596ed2afbaefbbb04db58c50a1af0681e109e74d8dc3f55687631eb96c2327b4a84f6726696df12c3b2141c3a634411f7e6c9107df5c900265db353fa"}) [ 2826.578583] FAULT_INJECTION: forcing a failure. [ 2826.578583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2826.581475] CPU: 0 PID: 16777 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2826.582972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2826.584759] Call Trace: [ 2826.585328] dump_stack+0x107/0x167 [ 2826.586112] should_fail.cold+0x5/0xa [ 2826.586938] _copy_from_user+0x2e/0x1b0 [ 2826.587802] __copy_msghdr_from_user+0x91/0x4b0 [ 2826.588819] ? __ia32_sys_shutdown+0x80/0x80 [ 2826.589769] ? udp_v6_push_pending_frames+0x360/0x360 [ 2826.590889] ? inet6_sendmsg+0xbd/0x140 [ 2826.591750] ? inet6_compat_ioctl+0x320/0x320 [ 2826.592722] ? __sock_sendmsg+0x55/0x190 [ 2826.593609] sendmsg_copy_msghdr+0xa1/0x160 [ 2826.594546] ? do_recvmmsg+0x6d0/0x6d0 [ 2826.595422] ? __lock_acquire+0x1657/0x5b00 [ 2826.596392] ___sys_sendmsg+0xc6/0x170 [ 2826.597235] ? sendmsg_copy_msghdr+0x160/0x160 [ 2826.598214] ? vmacache_find+0x55/0x2a0 [ 2826.599071] ? __lockdep_reset_lock+0x180/0x180 [ 2826.600094] ? lock_acquire+0x197/0x470 [ 2826.600950] ? find_held_lock+0x2c/0x110 [ 2826.601838] ? __might_fault+0xd3/0x180 [ 2826.602705] ? lock_downgrade+0x6d0/0x6d0 [ 2826.603602] ? asm_exc_page_fault+0x1e/0x30 [ 2826.604578] __sys_sendmmsg+0x195/0x470 [ 2826.605491] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2826.606471] ? lock_downgrade+0x6d0/0x6d0 [ 2826.607432] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2826.608551] ? wait_for_completion_io+0x270/0x270 [ 2826.609651] ? rcu_read_lock_any_held+0x75/0xa0 [ 2826.610709] ? vfs_write+0x354/0xa70 [ 2826.611565] ? fput_many+0x2f/0x1a0 [ 2826.612389] ? ksys_write+0x1a9/0x260 [ 2826.613165] ? __ia32_sys_read+0xb0/0xb0 [ 2826.613991] __x64_sys_sendmmsg+0x99/0x100 [ 2826.614852] do_syscall_64+0x33/0x40 [ 2826.615603] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2826.616662] RIP: 0033:0x7f9d069ffb19 [ 2826.617420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2826.621233] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2826.622973] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2826.624602] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2826.626199] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2826.627810] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2826.629427] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2826.656351] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2826.660719] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2826.663104] FAT-fs (loop6): Directory bread(block 3) failed [ 2826.664045] FAT-fs (loop6): Directory bread(block 4) failed [ 2826.665094] FAT-fs (loop6): Directory bread(block 5) failed [ 2826.665794] FAT-fs (loop6): Directory bread(block 6) failed [ 2826.666647] FAT-fs (loop6): Directory bread(block 7) failed [ 2826.668454] FAT-fs (loop6): Directory bread(block 8) failed [ 2826.669877] FAT-fs (loop6): Directory bread(block 9) failed 18:49:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b662b2e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:49:55 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:49:55 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0xfffffffffffffffe, 0x80000001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) close(r1) 18:49:55 executing program 7: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a80)={{{@in6, @in=@remote}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), 0x0, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) r1 = getegid() r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000f41b00210c000000000000fd13000100fc0200000038a57930000100943200000000000062ec00000000bf48634a4ee264c0af667d7f5e6bd5304c35287bcc2963c845ef68ce72fb8fdd51a5e917e36e515ab61ed59b5f1e90"], 0x38}}, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001a40)={0x0, @multicast1, @multicast1}, 0xc) r5 = openat(r2, &(0x7f0000000280)='./file0\x00', 0x488000, 0x4e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x8080) preadv2(r5, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/86, 0x56}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000780)=""/6, 0x6}, {0x0}, {&(0x7f00000007c0)=""/21, 0x15}, {0x0}], 0x9, 0x1000, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='encrypted\x00', &(0x7f0000000380)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) unshare(0x48020200) setresgid(0x0, 0x0, 0x0) setresgid(0x0, r1, 0x0) getsockname(r3, &(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000480)=0x80) 18:49:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000040)="c5e66dc0823c10165040fae256c281733b89f46fbe5a086ccb93336dbcfab89a3a2e80a64632294871cd5f5facef35d676f48c839c95a446cae38bf1c655c6dc7ff50ff5cfa395ee68c2b743822a9d3bfe6fc1d96bb6186643d49a24235f72c8a4531a06061249bd29e47120f58af134918069a90e0c415a0492c55b1b0c791ab55e6f741e24a467277a50161e21ce537ba8957e0b9fea0851e6fe58aff7b15f8d9815ee9ced98f80c271427f65b", 0xae}, {&(0x7f00000001c0)="5eb59b5f5a1be771d00975a5ff3563dd34ea71cf2dab7f10263d6c7149397844b287b29847bf307fc1e53e3965b664c0bef16a647cc6fb27df80b15e4b6c5b1c228822546bb6293f24124197f5b71cb055ab013d382b3a26e7e8c0e48cab060b1ead6fbc986de383d4e91ef62ce27795d0878f993139644f236aea5b81505d440b7fbb91d770a484aac928a607a99a833bf01a5187cc57f2e709e1a054265eb525a9fa166ed10229c369098d7d76901ff8d6704c0be164646c32d92ef68a3b3f75dcc137ec05556841127201d1e6d6f1bb6a2c0a93c32bfec47242067a9e6f98617c08bb6e9c09e6e93a060a196c61", 0xef}, {&(0x7f0000000100)="3c4117c5e13997ee98b12ce6f02e6ab11312beca65fd1499184152e42269c8e4520c23297b71", 0x26}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f00000002c0)="5f3ed7c76675a32f7da08a4a1035cbf34bb2b443847b0c9ecf80107a4e91899e7aee756ccda70254596689432f3cb31540ee20868bbed298f0094034233df9decc80b749d9b60b3b0ffeee95a88a3e8df0ae6ac3198e8700072f649375b359fe8400d12dd724a703f52dd1ee0dd37c8f13f727936062c7059faf5193af43", 0x7e}, {&(0x7f0000002e00)="60a50d85a9b6939f59b7f414d7a3fa85ceb82e6c08de30d46956c7590841bbdd3e34320c973de9b4563275acb1511f1d95ca4ddb09f4aa4213e820cf7301d99b1166ff190509b188b8bf05748716838a70b4525427e71c185ce3fa83cabcdec2932225458d015991e3836d0915f60aacdbf0f9ba1cda1d2915f332d49d979843c047e6fa0b71b81c3f2cb5360166b5337ee8c05be82b2a34bf785e17ebab2df102e90d51e22ae9dea39c08a5cece6f1c1127d73f5c78ee53634b7efbfe758720b8f28e66a719f411ffe51edb3f225377eca64b7e92883f128ee91d312524bd6adec240b3a16e01da2c9d281c9b78593633033b0e601f0711189cfd3fb5c6ad6fbe93360e7a958f46cebcf0d211f57c1785bdd2097a5920fac872616b60d35bd354d3dbd3da37731d81fe8a78fee7d9b0bdc016d42b122e45bd4c899a457cfc9fccf7eaac899d1d70cd91b2e575c2875a392849479c9648e874acc365147c2daa39e454e9de01b332d77958a49dd9795fd05ce3341cd1f8bdf19855d1dacab33c3894819ae9ebfb09fd1d1e193a29fa11871361279f66a4f926874d6ca7ed1aff8c4587f61d688a7b1e8d825f37bc8516d85105a92e5b62bed27659ea32ff22eac504ef95361858bed9d9ceab0280440ddfcafd65e035ea52195a27b225bd81914eb30dc022c105df9dd9fa52fc186f701e2247bbc03f3d82eaa7ecb9a53af247ab9fd0e310b4786e9a5bcb3af2ca069b90441ef5e01385998603e02eccf0c1fdcece968914b6691ee95d1beca9edc40a3e17ed695adb3ea38115743ed2fc6cd981ea983b7b2e085b17ab595d17d490f4c65f574c738f3ccdc26140f503cb60e80046adf2fd3036a1a068c19b080e02fb6367515cc80fd61c889ed360e659b6b79403697a7205864eef67440622fae84907866f8a8f932e0ff11eec921a14c40b77872c673150ee5cb82cfcd5822b778bb3de99afde3981e75e19104c1c157e1838fe9792ab88ed45423f806fe13dabfddbbebf0b7053426eb10cae6c429bc30454c5c408d79952297fcf902918dbf1ff790f0ef5ec4cf6c558fbf1e5fe2a0a72592b7329e5aa1de11ef24dbb881456046f83df2d5bff07dcba1957caaf7aeabf8e1fabc60ed425847ea5de20501f67aea3194d291253c9f808068e40106757a2cc7ecb8ed85cb56b41aa310fb62b329fdcbdf8f85b834020f814ea0f23c4444e88fd6dd2e103d50b8ab33452ea7fe2e5a6d34f284c1d2afe1302d3216e64e156cf3e3a2c933b2c581b1317d148bf0a7377abd7948da04b439b79018a831f9ab440f132f928ac04fca0a4036255a26ffe34c0cec8fe793962087c911052b0d6b16f07c878b0916c5960b7bdae2595754f751c33b364a446dfdd97115a399579e4915c59a8f76b5d408bd025e9953cad4b17b6ed636e7b9279b0cd3b381633da7d4501052c5e77c71552da5b28a28440e2c35ed5a2854768ef5778dc80baaaff1c095e181545b4bde1b588c45a4af387ca898b848cfcf8273edfa65704ded2b0b561b1da6feb183366d102598b597fd776c514398bce15de9f122d64d749a972dd3fada009acd4f1db7bc44eddd92960d493a6f24ee5669c5c0e6be10042ac7db1b43d5d64deb53b145b2fee7d0f326e206ebda89507d2deae6d8f51e9cdb4998b5d0fe652c395fc62eff5d6195e13146013983ea688657ac65de199072db58a7044e1b3cbf9341bdacbc9179a1e54ab3918c164908887adf5f83417a407dc4c0952df97a5b9eaf33646229e345521de806a01e7e83c267a4f5f78623ffd5a4824d2431e1eb45dd74aa5aca2be648dbe8e5cdfb0e366df5e262f6226773d209d79e05af1802b728dab2fd7e7bdbd66a7dbdac86a886988226fed64f506f60ef7dc904e935c254e22a70e6fcf70e0cfd22ac470a6c7bbe2de8b61c2e857b563f130a2393d1f36ebf7fd9160e8ececa0ade1601fdafc09b4b0acf4d28efe57c4e9eef33f6d00230aeb1b01ed8b3120a95a20cb016670b7a8ad441aea6ffee467d53b9f394c80f1bc3d1f589f9f0814ff547649560842d504b5f576da04f9dda3629c5d816a1faa5d70047991338486109b31439409ffe924322fdc9feb85fe00ab7b7853edf8ccb4dfc9090f0560641150c4b529732546042e8eaf48ac2153efd61f729dfa0f9540221af363dbb7e16d587ce5a10c1c98eec0e0c636bcf46e3a3e2e9625586175d238bfdded114c0cb2701296130d552471516b4340322152374a3937347062f4c7c9ae3f134d8a43a35a0f937db202d7b7c7d3744aa7e5a3ba4c172bca9c043e82f73065bceb8adcf645b58f77dbc3679eda4e756ee0a397ecbcb640783520b0c6966535b92cd9f1df8e737a78cc69f94a48cac158f16904d15fbcd1a5705188ea0e7e467376c97ebbde9a4fd8c51a96d05b504dbc77e8b287dd9424ea60b416c7df31b9c5b7de233e77f5434fd04f8646b97e6f5a91753003c14f6ea1f8e8b425388e5eca1cfbb76c20193821e9f4caab624d585bf9d314fd9daed49b7c37bb43661d8485610b34684feab7b04382750f067ffc8d6a096d6cdd9d5d986d0550b3c98baaddd0db491a7357f0fab5e0e823c831f3f591182958bcc3f12db9c74018a7988de174874331b7b53a1f1cad886e162927a1524be48bc72d52b19c6760af026d7f16080c736249a9f7dbae02e49da927938c3328ab796f260f80f80635f54a09265d2c9e093fc7977eab019ea9d33584ca2abf22e7e9bc1ec20dd4f1b71cf1573a90c9d138d6fb242c786d2c3466766f412fcb2b2d6fec80d38df8fb058dcdedb035a9638960683db3ffe66969c674d40448c30fa30d2d6b35b050f3597262ba6cfb8cb11f8b248d51d511b09061695279cec901628ca7bf5384a1dbb007cabbecf8630dd36974e704dcde523b7038ddf7897f3fae9605ad6c22d0ede0e5147f112f11f119089e21316797562a82e2a52b9563cfdbf496ecabddf38294c7ecd140f955f52a791d71ec6552ffcb6ea656e03a02c87619502a52342fb1eeab890a8c025934b83c07acce5fce3556208fc9a33c0b7646b291dfce4f3c23d51c5d8614a4d93fdb1c8b06391dd51d7887608d4a587f7fd55478ffcbef0ef5667382759717b403c541f84f9c7410aca97fef66a1e2766d8c85ee26eec97cacae2c97db2c2cbaa72173257bf8af505f9ae0dc435b90d9404f4516a9b6e8209730ff2ca98e3121b5ee3180a7e4011a4a3ea23d23135d6490827f47f633c1269a9b9fe0b0c6ef9747bd4027f798199f38ab0c58177763e11695b0fd99d16591f41a1ba2f1a2af67a37e268c48fd3c725634996483daa2a542f5db570cc32a504b7b6211417047911a3bfc0ecf0d94d1bd2df714452c39cd6af3c727f10d699c0d42318c2bdc42453730c60408da96b7a4c1f42a8597f60bc6a196d965443b651ee81fac39a674185491ba0981d9842f25469d4d517ca6bd029898df7d33f2e416351f1fed6fbedfc2b08d0ab31ee79d96637d9caa16ea62998e8d6f4b0139dc705babec6f7ca9eee9d0d52ee5029dcb604958532b675f556520919935fbf1b68655e5e902a1872ee37f17dd9554b787c96b6683f6d44e53089faa5042b5b9f2d16630f977b4dc2f9d677ea3746fa0ed5b01110e22df921ac4b7a9c1fb849114a4c679f9084d20c76a76feedb198b8cefaba8ef0a63966be0bb0ab91c1f94e30ccc99654d07f6654c5ce1a68a8e1d4dae0ace4b58a0f3a49f3a7e3bc6154af6f82c5f8b2013d9047a0d467ae2ccdebbbd87e7b0e84b45c82f3ce3573702baa83978ad5743bb5a9e825cf3fb70bcddc918fa1cbc5d7cf0a43f34827a6b55fcc06c4ec326f8e4ad29be77bb50acce286f2b085dc760027728656dc01b75de84d998b42ed8728ac701f1bd5963a3dabcf6e3291eb7590ab8820349c61b4fd353fc0a17da6df68d0409f3181ac97d353d10f2e0db572345b20060337f816a88562aced3deedb1b0e8851194a98faecb7c5659c5156979b592a49bc2255a5923deb4c9c8799ed3b4f99393c38dd24baaad5f1af84a3bd5599276117af8da7a39ab850fff9e7387ed75a1bad3c305276c313986f6f06b9672ee3f7d74416109b6a086f767f8d957b79a6820634cfdb547af3e71b8e1d102a651ea6dc50d20080915ee0d6f4216cb1341cff00195b7e70ac9d01b831ee594fde5becdd01274c7a351d270df1b30c361f61247ff056f6b349318a33bc01789bc8183d8fafa3a617357f9335e1110753436daab71ce00a91f39ff15b7f6d731f1fb837c0b1affc7f7910ee57513d251c05c4dcb2eea5e38e816564073fcbf75b0e8d4337c96029cbc638e8454d2ca3e2f23be3b79042ac349022f9106ad998f2057121dfa7b9e3fb269336c1483ec5144448141992513ba72f094c96f5dac4559ba4ff5aced11220ac605b46946ea65fddc70ae12e8c22fc5b2182bb657ddd0ccc2b63ba588d73072fb5e5ffa0687d6e445e805e55e88a803c586370878eaf750d936b3aaff6ca5fe58f97ae9588265d4b2c881cda3e83993860599a64e4c7a617f227afabab1d78bfdd69ca4e85bfd8b53320baf76ad02d4f10fed4f2a63d1b706854cc63acb84a63b9b44f2b6e02b52c0fb811f75ecf7403f15812b0f096bbafc56078ed8f50353b77377b30f4a829c907de060069bbc95b0aa090231715f52648b825d9955a435b8829513aae5a422eaa75bfecd32d0c51b9e86d21c42dcb547991bfb8479f94822aad3bfdf2024563258cf776e1f78fcb94c6c7adbdce719c657cb07b474f71e7f0aaca3dd44295963ad6810766a565f2bb8f69fb07a2017fe3cb42d94535a85f070fbfaa4198eb951d45ae52527a2acd955237553704d7988e1aa3b4fb7ac76c89f5ea0a75cafe0e47d0a317d4b17435d73f1c5152ddbf84ac4438a982e21d51885f52829d639e0133a063dffe21e08c574cd8d008ededbcac0a65d108063a36be867e618722b6c2f26e899b3e01333e4bd4426d3c9967d4d2eb09e3f8de60d3e3c74c331da2cad8aec679d46c00fdd23d2f686a8a438784b5e5df2d4de4f0e7831891432f4d34564bc8a87cd048a474e5bce552b24a225b6b39246293eb628ce5eeca7f29177038fe30ad9fc2d9933474852da8711121fe9ae63ea77260709fb9ec1805d2d9d33578176b565fd5d1d64cf7ea9635305122d9719fe231316b9dda01dd969eea953c639b5c848579c5cb59187a9842349e5cb7fdec68364ea0be03579a751a4b4820ada8acf5efa2aad0b81feac5ceca65a30ea29f7529f55dd5911dd48af7b2ba868e8d73c5cc7e3d3fd444c5d05faa2fca65edf9f1520550967257ed414e76314b3c0b604d5b8842939a2f0e0c11fc304a2d2c1e80669ee7c2d5f96acb9399e4945defc648669116c12c7e2c31fbc4b9bdff5d7225f1e4bfda3c077eed2962f9bba470dc4afd7a3300e5580a38804bbd9cab172c55341bac5d2835e85455687631147c31823108ee53e5f89fbb15e5c63598771e3df0f8150a6bf0b622519ada29dca1e6a7623cbc7b3f4a0f2f1ac7ff1ced9ef100b1a23059009d3199f0785efc97985e730f3e8324854823a1c36a3e0ece2253a4241afcef7995166c9a8797c3e9ae74ce5fc5193584cb0458448be8ae9c5d24f444618a9a7a835dbe0764619f798fa9051a8ee81964fa18db2df8329e52d067b8fa75dd454e93ee07694b3f4d0f14404c6b7dd3e5e8a9ac2445260fc066e0bf5bc822f4cb88843983d60f0b771bd144f331dbd3be02f24abda8521e91d99598482a84e3", 0x1000}, {&(0x7f0000000340)="00c9949ac6ec5e633d7046d271172714d886da171fa6c60941e55038b1f28663ba915b370eb00b35b36a566859f7326ba224edbd3c491d1d5f296192dcd21a312cbd5ddfbd75fc124b8a3eedca523ad35a4066d91e900ebcce338c52233f93d18e3f7c4f1e4ae5951ac14955171615e6f0e4e312d3c936bcfbf25e71ca6913", 0x7f}, {&(0x7f0000000f00)="b833a23c3f7cc2167db74e7075a73d877ebc8631a92756e72fcf65d3219cd1d73218c061c508b483c91537d692651993ee59863a111972db37852bc31a4190b7c5c2359539ae55ed32c04036", 0x4c}], 0x8, &(0x7f0000001000)=[@rthdr={{0x48, 0x29, 0x39, {0x33, 0x6, 0x0, 0x1, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2]}}}], 0x48}, 0x800) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5}, 0x68) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001180)=ANY=[@ANYBLOB="0100353701004000180000005f49362ef7d6ba4bd0ada2d97ba7cf21ae9c1b21feebf69a46eaf52694e1bab6459925a4bc287ee00cc60723a8b73f9b5807aece44ee86e5c52540db312610cbf2955d44b4c9c7e50ee1fa4483b9dea7fabb9dafc6a8ce1f65527b830e378cd903de9745ac0cd3c48989605b411bc5ab808de6fb830ddb080943f4587cba762e36f826c51a264aa8783300ec", @ANYRES32=r3, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000001080)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:49:55 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x400010e, 0xc000) dup(r4) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) dup3(r3, r0, 0x80000) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(0xffffffffffffffff, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r6}, 0x68) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x10000}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) [ 2826.954166] FAT-fs (loop6): Directory bread(block 3) failed [ 2826.955613] FAT-fs (loop6): Directory bread(block 4) failed [ 2826.975307] FAT-fs (loop6): Directory bread(block 5) failed [ 2826.975971] FAT-fs (loop6): Directory bread(block 6) failed [ 2826.976629] FAT-fs (loop6): Directory bread(block 7) failed [ 2826.977419] FAT-fs (loop6): Directory bread(block 8) failed [ 2826.982694] FAT-fs (loop6): Directory bread(block 9) failed 18:49:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/227, 0xe3}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/62, 0x3e}], 0x4}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/209, 0xd1}, {&(0x7f00000014c0)=""/196, 0xc4}, {&(0x7f00000015c0)=""/170, 0xaa}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/234, 0xea}], 0x8}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001980)=""/62, 0x3e}, {&(0x7f00000019c0)=""/110, 0x6e}, {&(0x7f0000001a40)=""/219, 0xdb}, {&(0x7f0000001b40)=""/148, 0x94}], 0x4, &(0x7f0000001c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000002f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002f80)=@abs, 0x6e, &(0x7f0000004400)=[{&(0x7f0000003000)=""/78, 0x4e}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/48, 0x30}, {&(0x7f00000040c0)=""/154, 0x9a}, {&(0x7f0000004180)=""/199, 0xc7}, {&(0x7f0000004280)=""/234, 0xea}, {&(0x7f0000004380)=""/115, 0x73}], 0x7}}], 0x5, 0x20000, &(0x7f00000045c0)={0x0, 0x3938700}) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x6, 0xff, 0x0, 0x0, 0x9, 0x30803, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x101, 0x1, @perf_config_ext={0x1, 0x55}, 0x1200, 0x6, 0x10000, 0x5, 0xd34, 0x7, 0xfff, 0x0, 0x8, 0x0, 0x3}, r2, 0x10, r3, 0x9) close(r0) 18:49:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b662c2e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2827.125865] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2827.140809] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2827.185783] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2827.224128] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2827.304730] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2827.306388] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2827.334836] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2827.373232] FAT-fs (loop6): Directory bread(block 3) failed [ 2827.402730] FAT-fs (loop6): Directory bread(block 4) failed [ 2827.404101] FAT-fs (loop6): Directory bread(block 5) failed [ 2827.405391] FAT-fs (loop6): Directory bread(block 6) failed [ 2827.416012] FAT-fs (loop6): Directory bread(block 7) failed [ 2827.417650] FAT-fs (loop6): Directory bread(block 8) failed [ 2827.424501] FAT-fs (loop6): Directory bread(block 9) failed 18:50:10 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x5, 0x9, 0x1, 0x7f, 0x0, 0xfffffffffffffff7, 0x180, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x996, 0x7f}, 0x111, 0x1c5f, 0x7, 0x9, 0x5, 0x8, 0xff4c, 0x0, 0x30d, 0x0, 0x7ff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) close(r1) 18:50:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x9, 0x7, 0x0, 0x1, 0xa20, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0xe000, 0x8, 0x1000, 0x5, 0x1ff, 0x8, 0x20, 0x0, 0x80000000, 0x0, 0x2}, 0xffffffffffffffff, 0xf, r1, 0xd) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000000)) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 18:50:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r2) sendmsg$IEEE802154_START_REQ(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xbc}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040880) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ')J\xff\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x40}}, 0x0) 18:50:10 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x40) ftruncate(r0, 0x9) 18:50:10 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 31) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:50:10 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3cf3, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:50:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b662d2e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:50:10 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x5, @remote, 0x9}, 0x1, [0x8, 0x85, 0x8, 0x2, 0x80000001, 0x8000, 0xe46, 0x301c]}, 0x5c) [ 2841.559716] FAT-fs (loop6): Directory bread(block 3) failed [ 2841.560659] FAT-fs (loop6): Directory bread(block 4) failed [ 2841.563518] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2841.563773] FAT-fs (loop6): Directory bread(block 5) failed [ 2841.565664] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2841.571893] FAT-fs (loop6): Directory bread(block 6) failed 18:50:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x40100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x288541, 0x0) close(r0) [ 2841.575259] FAT-fs (loop6): Directory bread(block 7) failed [ 2841.577025] FAT-fs (loop6): Directory bread(block 8) failed [ 2841.578878] FAT-fs (loop6): Directory bread(block 9) failed [ 2841.592674] FAULT_INJECTION: forcing a failure. [ 2841.592674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2841.595561] CPU: 0 PID: 16857 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2841.597032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2841.598755] Call Trace: [ 2841.599310] dump_stack+0x107/0x167 [ 2841.600082] should_fail.cold+0x5/0xa 18:50:10 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b662e2e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2841.600897] _copy_from_user+0x2e/0x1b0 [ 2841.601814] __copy_msghdr_from_user+0x91/0x4b0 [ 2841.602770] ? __ia32_sys_shutdown+0x80/0x80 [ 2841.603676] ? udp_v6_push_pending_frames+0x360/0x360 [ 2841.604756] ? inet6_sendmsg+0xbd/0x140 [ 2841.605573] ? inet6_compat_ioctl+0x320/0x320 [ 2841.606489] ? __sock_sendmsg+0x55/0x190 [ 2841.607331] sendmsg_copy_msghdr+0xa1/0x160 [ 2841.608217] ? do_recvmmsg+0x6d0/0x6d0 [ 2841.609026] ? __lock_acquire+0x1657/0x5b00 [ 2841.609946] ___sys_sendmsg+0xc6/0x170 [ 2841.610791] ? sendmsg_copy_msghdr+0x160/0x160 [ 2841.611733] ? vmacache_find+0x55/0x2a0 [ 2841.612569] ? __lockdep_reset_lock+0x180/0x180 [ 2841.613631] ? lock_acquire+0x197/0x470 [ 2841.614533] ? find_held_lock+0x2c/0x110 [ 2841.615455] ? __might_fault+0xd3/0x180 [ 2841.616371] ? lock_downgrade+0x6d0/0x6d0 [ 2841.617307] ? asm_exc_page_fault+0x1e/0x30 [ 2841.618308] __sys_sendmmsg+0x195/0x470 [ 2841.619211] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2841.620189] ? lock_downgrade+0x6d0/0x6d0 [ 2841.621109] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2841.622108] ? wait_for_completion_io+0x270/0x270 [ 2841.623105] ? rcu_read_lock_any_held+0x75/0xa0 [ 2841.624070] ? vfs_write+0x354/0xa70 [ 2841.624857] ? fput_many+0x2f/0x1a0 [ 2841.625610] ? ksys_write+0x1a9/0x260 [ 2841.626394] ? __ia32_sys_read+0xb0/0xb0 [ 2841.627238] __x64_sys_sendmmsg+0x99/0x100 [ 2841.628116] do_syscall_64+0x33/0x40 [ 2841.628918] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2841.629962] RIP: 0033:0x7f9d069ffb19 [ 2841.630732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2841.634512] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2841.636067] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 18:50:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r1, &(0x7f00000002c0)=""/225, 0xe1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r0, r0) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x3c7) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') r5 = fork() syz_open_procfs(r5, &(0x7f00000000c0)='net/llc/socket\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, r2, r3, r4, 0xffffffffffffffff, r0], 0x6) clone3(&(0x7f0000000200)={0x44004100, &(0x7f0000000080), 0x0, &(0x7f0000000180), {0x18}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r5, 0x0], 0x2}, 0x58) [ 2841.637541] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2841.639067] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2841.640534] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2841.641988] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2841.650152] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2841.652189] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:50:10 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f800002000400000000000000000000100", 0x26}, {0x0, 0x0, 0x1e0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010700), 0x0, 0x4400}], 0x0, &(0x7f0000011100)) unlinkat(0xffffffffffffffff, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, 0x0, 0xced) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x9}) sendfile(r1, r4, 0x0, 0x100000001) openat(r1, &(0x7f0000000300)='./file1\x00', 0x90001, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x1d, 0x8, 0x70bd2c, 0x25dfdbfd, {0x8}, [@generic="be068a28c9719511a0c7febc0de608b43d2293a43fed3e496866fc77c4ef5ab62031a75adaa99150974f2f2d8b72d3a85b66284f68da3f9f3b7fdc8b002b1cf93bd4b07287c851cb378b787bfc40d37e5130ad128410f31a57b24334486d"]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="09000000ffff6530000000362e80c06e"]) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000002c0)=0x9, 0x4) [ 2841.721503] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2841.723309] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:50:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4317, 0x94000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) 18:50:10 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:50:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/132, 0x84}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) [ 2841.898973] FAT-fs (loop6): Directory bread(block 3) failed [ 2841.899632] FAT-fs (loop6): Directory bread(block 4) failed [ 2841.901823] FAT-fs (loop6): Directory bread(block 5) failed [ 2841.902672] FAT-fs (loop6): Directory bread(block 6) failed [ 2841.903443] FAT-fs (loop6): Directory bread(block 7) failed [ 2841.904352] FAT-fs (loop6): Directory bread(block 8) failed [ 2841.905255] FAT-fs (loop6): Directory bread(block 9) failed [ 2842.060316] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2842.061495] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:50:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r1, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12100, &(0x7f0000000180)={0xa, 0x4e23, 0x400, @private1}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x6359, 0x4) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x4180, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x148, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xec, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000881) 18:50:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66302e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:50:27 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x400, 0x0, 0x0, 0x0, 0x3}, r0, 0xe, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x100) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:50:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(r0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x3f, 0x81, 0x9, 0x7, 0x0, 0x3, 0x40a49, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xf90d, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x80, 0x0, 0x5, 0x3, 0x100000001, 0x101, 0x0, 0x0, 0x8, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x2) 18:50:27 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:50:27 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 32) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:50:27 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$batadv(0x0, r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0x8, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) r10 = open(&(0x7f00000001c0)='./file0\x00', 0x440400, 0x40) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r11) 18:50:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40880, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x6f1e, 0x301801) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) [ 2858.389312] FAT-fs (loop6): Directory bread(block 3) failed [ 2858.390766] FAULT_INJECTION: forcing a failure. [ 2858.390766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2858.392116] CPU: 1 PID: 16922 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2858.392882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2858.393778] Call Trace: [ 2858.394066] dump_stack+0x107/0x167 [ 2858.394458] should_fail.cold+0x5/0xa [ 2858.394867] _copy_from_user+0x2e/0x1b0 [ 2858.395305] __copy_msghdr_from_user+0x91/0x4b0 [ 2858.395799] ? __ia32_sys_shutdown+0x80/0x80 [ 2858.396273] ? udp_v6_push_pending_frames+0x360/0x360 [ 2858.396841] ? inet6_sendmsg+0xbd/0x140 [ 2858.397265] ? inet6_compat_ioctl+0x320/0x320 [ 2858.397740] ? __sock_sendmsg+0x55/0x190 [ 2858.398190] sendmsg_copy_msghdr+0xa1/0x160 [ 2858.398648] ? do_recvmmsg+0x6d0/0x6d0 [ 2858.399072] ? __lock_acquire+0x1657/0x5b00 [ 2858.399533] ___sys_sendmsg+0xc6/0x170 [ 2858.399957] ? sendmsg_copy_msghdr+0x160/0x160 [ 2858.400462] ? vmacache_find+0x55/0x2a0 [ 2858.400889] ? __lockdep_reset_lock+0x180/0x180 [ 2858.401405] ? lock_acquire+0x197/0x470 [ 2858.401840] ? find_held_lock+0x2c/0x110 [ 2858.402290] ? __might_fault+0xd3/0x180 [ 2858.402718] ? lock_downgrade+0x6d0/0x6d0 [ 2858.403174] ? asm_exc_page_fault+0x1e/0x30 [ 2858.403651] __sys_sendmmsg+0x195/0x470 [ 2858.404081] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2858.404545] ? lock_downgrade+0x6d0/0x6d0 [ 2858.405002] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2858.405516] ? wait_for_completion_io+0x270/0x270 [ 2858.406038] ? rcu_read_lock_any_held+0x75/0xa0 [ 2858.406562] ? vfs_write+0x354/0xa70 [ 2858.406970] ? fput_many+0x2f/0x1a0 [ 2858.407361] ? ksys_write+0x1a9/0x260 [ 2858.407768] ? __ia32_sys_read+0xb0/0xb0 [ 2858.408227] __x64_sys_sendmmsg+0x99/0x100 [ 2858.408695] do_syscall_64+0x33/0x40 [ 2858.409099] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2858.409655] RIP: 0033:0x7f9d069ffb19 [ 2858.410059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2858.411997] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2858.412809] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2858.413568] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2858.414341] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2858.415184] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2858.415983] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2858.427899] FAT-fs (loop6): Directory bread(block 4) failed [ 2858.428762] FAT-fs (loop6): Directory bread(block 5) failed [ 2858.444145] FAT-fs (loop6): Directory bread(block 6) failed [ 2858.447375] FAT-fs (loop6): Directory bread(block 7) failed [ 2858.461688] FAT-fs (loop6): Directory bread(block 8) failed [ 2858.462745] FAT-fs (loop6): Directory bread(block 9) failed 18:50:27 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:50:27 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = syz_io_uring_setup(0x6510, &(0x7f0000000300)={0x0, 0x338d, 0x0, 0x0, 0x6b, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x8}, &(0x7f0000000280)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_setup(0x7129, &(0x7f0000000140)={0x0, 0xe906, 0x2, 0x3, 0x87, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) perf_event_open(0x0, 0x0, 0x0, r0, 0xa) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:50:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) flistxattr(r0, &(0x7f0000000080)=""/189, 0xbd) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 18:50:27 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf33c, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:50:27 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffc]}, 0x8, 0x80000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x124, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4011}, 0x4000012) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400010e, 0xc000) write$binfmt_elf64(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7f, 0x7b, 0x1, 0xd532, 0x2, 0x3, 0x5, 0xe8, 0x40, 0x32b, 0xfffffffc, 0x1ff, 0x38, 0x1, 0x9, 0x6}, [{0x3, 0x664, 0x5, 0x3ff, 0x80, 0x2, 0x1a05fd99, 0x6e389ef9}], "48e883817d89db3d770d6778c37cac701be813f94c4b45ac799522fcee425412752e41091434a7030f39ccc9a48f6881ce9469a07fae3d1b111ff4751661f1e9332b2113ad0943d5482c7b58fb5273fc2e6bab6b6b9f230551ef4bb09d0fba4691f2c4998add4b4f165be03f0286c168dc2062ae9d977aea73a09dc57cd787a2e80b608ae26b549365fad86db30f4011fc087b914c7ebb63dc7535b7aeaacce2b7", ['\x00', '\x00']}, 0x319) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r2) 18:50:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66582e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:50:27 executing program 1: r0 = request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f00000003c0)='{-(\x00', 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='!@@-*\x00', r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "e796893b66b230714e3d1c8de5163e9dd1c249181f92d16781d8d06c999cbba3d8869f066594824f8e6717115cf98d77c92eb4c4ea515008defafaa24b91bd28", 0x23}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, 0x0, 0x1) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000600)='big_key\x00', 0x0) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x48, r3) request_key(&(0x7f00000004c0)='blacklist\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$search(0xa, r2, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r3) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000080)="a3", 0x1, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r4], 0x48, r6) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r6) add_key(&(0x7f0000000480)='.dead\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000ac0)="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", 0x1000, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, r5) request_key(&(0x7f0000000380)='ceph\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='\x00', r6) [ 2858.716529] FAT-fs (loop6): Directory bread(block 3) failed [ 2858.724718] Option '$%&'()*+,-./ %ûµ456789:;<' to dns_resolver key: bad/missing value [ 2858.732251] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2858.735375] FAT-fs (loop6): Directory bread(block 4) failed [ 2858.736088] FAT-fs (loop6): Directory bread(block 5) failed [ 2858.736707] FAT-fs (loop6): Directory bread(block 6) failed [ 2858.737385] FAT-fs (loop6): Directory bread(block 7) failed [ 2858.742423] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2858.746191] FAT-fs (loop6): Directory bread(block 8) failed [ 2858.747012] FAT-fs (loop6): Directory bread(block 9) failed [ 2858.759591] Option '$%&'()*+,-./ %ûµ456789:;<' to dns_resolver key: bad/missing value 18:50:27 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/sr0', 0x513800, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r3, 0x8f26d5309b039a71, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20, 0x69}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$CDROMREADMODE2(r6, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:50:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66632e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2858.939203] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2858.941866] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2858.974352] FAT-fs (loop6): Directory bread(block 3) failed [ 2858.975769] FAT-fs (loop6): Directory bread(block 4) failed [ 2858.985552] FAT-fs (loop6): Directory bread(block 5) failed [ 2858.986751] FAT-fs (loop6): Directory bread(block 6) failed [ 2858.994436] FAT-fs (loop6): Directory bread(block 7) failed [ 2858.997329] FAT-fs (loop6): Directory bread(block 8) failed [ 2859.006280] FAT-fs (loop6): Directory bread(block 9) failed [ 2859.013583] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 18:50:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) write(r2, &(0x7f00000001c0)="f29107", 0x3) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x0, r1, 0x4, 0x5, 0x8, 0x7fff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="8401001610000100000000000300000000000000000036a83d0c00000000ffffac14140d2f70a65b8e8cbb0400000000000000aa0000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x184}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="425b52ee81368fcbc5ba1c2285c55336e616917a96d4720a0a9add5c971dbdc94c4560931e89a14e8f9447b2b4ae73f0f94058ec45d6ef7242dd345c0ddd2ba5f4f908db0aae86c3391a0091737b41f03b8a4259372118576143ad9f0ce7abbf1aefd60c20211ddbf3e3540a3b", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250b000000080085007063690011000200303030303a30303a31302e300000000008000b000100696d0000000f0002006e6574646576736d6d30000008000b008000e2ff070001007063690011000200303030303a30303a31302e3000000071668aa461a6c4d154bf030d3a53000008000b00aeffffff"], 0x84}}, 0x24048015) creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001ac0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:50:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x800) dup2(r2, r1) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r4, @ANYBLOB]) socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r0, 0x0, 0x4000007ffffffc) 18:50:42 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 33) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:50:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000017c0)={@private, @local, 0x0}, &(0x7f0000001800)=0xc) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000001740), 0x800) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001700)='$\x00', 0x0, r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004c00)={'bridge_slave_0\x00', 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000000c80)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r8], 0x38}}], 0x1, 0x400c100) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000005cc0)={'ip6gre0\x00', &(0x7f0000005c40)={'syztnl1\x00', 0x0, 0x4, 0x8e, 0x3f, 0x9, 0x4, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x40, 0x3, 0xa6a}}) sendmmsg$inet6(r2, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000011c0)="3e58711cec23ed2418b57d5a56bbe91cbfd6bccc98e8307b65c5cee9aa64f8a629637dee3287a7bc651df2e3d468f95e4ffd3b22fb286bff1894ee32f8337b25f1ab3d43a0e2c857b569d5d3edc05fc031032abe362f3a1559397e662f700d9decccadfddc87af", 0x67}], 0x1}}, {{&(0x7f0000001280)={0xa, 0x4e22, 0x0, @local, 0x2}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000001e00)="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", 0x1000}, {&(0x7f00000012c0)="009517d31df7c751563535400d6bc1bea0596fe1605611a02e92425fa91071a9ba3d47137ed58a35afadce77f43a573b120e5e6a20ea62c40cbd730acb50a22a1556dad5ad5bc7082c35d82b79b828519f0d38effe247334f479d8eebaf7887946862d6dad04e3ae23d6a7f4cefa650c2afffaace67e9b37977304beb2b1074a438cddae02c1c2d1efe918865fe96afee1cd07ea9a14823fb4e70cd8a6ca2733a369cb1f8dfcf6560939d766", 0xac}, {&(0x7f0000001380)="02ca52dfefa4e64af310c9d6320c82e70633a4ab180759cb4fff168cd7e918d619a41336b0afde042f4402964f1ff8b68cfaf09155e69d035675a6bd9aa6e79810ec051c642acfb04ee36311e19c5b3fc1a4b036ca7171c8734c77f89208315ec4089730864eb33a93a752c9b119b656c07c82dffa0589c8bec29a", 0x7b}, {&(0x7f0000001400)='3`\bk', 0x4}, {&(0x7f0000001440)="c4dc0d6fe741417d8636438da5160c101d9388afc5332ba82f79c1eec9ccb441cae728dd4bd56963ade10f216a3a790987f504dd702b00624f1382d97bc5741b34e379bd3326e52a34570339513bda384dc19675159f28901cd64311d0c5a51daafb231d3cba77aa20fc87b469d89f78ecdb54", 0x73}, {&(0x7f00000014c0)="0f366c34ded018ef61b145041b23149e2ce2fae54dfe36bd224ab7b25288e326fe164caf15ac9655c57540ef75187bd72fbe1bd2557121ee5e95b0680bf2967b24a5ccd312df23626aec0a07cabb5dcbf5d7b02e052cd86ca93571259c957ce8a0571c14ae69561162531f57a799f033750f55fb6236ec685482a42d0bd06c4771afc2d4e5a3bde6a139e7c17eb2a5801efb66ddbcfab81e2ddf4dc0195025b3d81d0f7766ada0b04d058845102de0e412e3bbe926c283e0a0d23891397e13801576ce6f9fb07bda1bd95f98963370b38aaa72c0bc3d17c2d9f2f0bf18296b029dda658c931647b0a5fa22af85a23288a9", 0xf1}, {&(0x7f00000015c0)="005967aa9b52787104505215e6f162484e27c1a1c79d9c6010496121dfc92df5ae2457455d0fb628b23ef9bc93fbdc5ff278fe316a08c853e9eafce7e5b1c754f958397303c83602c16402945e8ea885d0363f29d9f9a932a7c0daa253cb70f306b649ee81f8e8005ed4f53431dc082c31cf7eb75b4e1cbb19ad5f521badda031be10e022a6aadeba7a7af7c0b5f282b14064a22180361a85c50d3029791a87861e0944f3c88d6eb17f359631ac4e3feeda8ffd48358aefe0efdb436947579", 0xbf}], 0x7, &(0x7f0000001840)=[@dontfrag={{0x14, 0x29, 0x3e, 0xa076}}, @hopopts={{0xa0, 0x29, 0x36, {0x16, 0x10, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xffffff91}, @calipso={0x7, 0x58, {0x1, 0x14, 0x3f, 0x8, [0x6, 0xdad, 0x80, 0x1, 0x6d, 0x1, 0x7, 0x2, 0x55e, 0x4932bcd6]}}, @pad1, @pad1, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7f}, @jumbo={0xc2, 0x4, 0x75}, @ra={0x5, 0x2, 0x9}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r3}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0xf8}}, {{&(0x7f0000001940)={0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000001980)="c1562a688da00113006e44fdd45e69675cefb0b136d4776a592203227edf3b26327d9d36f5a8b7c96b6c9b", 0x2b}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f00000019c0)="5d7ebef56aaee749313a2fc971e2a591ca63df1ad567ecfa4f2546a1c9c385ea2b05b5e11c42b0e4be80fce8719d9502b25809da39f75bf4354aec72f1a502eddadb8d2afb7bf512c4f1846c2a8ef5f1dd223665ca5967afd918b7c21f3fb6979720b9c565d248542033632f01c2e8f004548e613b6d90caf755f731f860737447025b0c8cc02eb6b3de9f5300009f351fcce4217894b781520b7d56da0c4b58edbfecfa90a7d709c940ec54f6fb3127b9397561b7184bf5d935def5b1", 0xbd}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="376307bd4cca15ae7fce45dd7771d7ec1f05c2228357c2ea6447ac3a93b247b70ee90d1fbe97dcab2f48ef1457d41ebd2a6cdc97edc3c1537f1df06b2c11bb7fcda03677e0257f3e4aaf495ba1b87133c702", 0x52}, {&(0x7f0000001b40)="2e0b784db9222f2f4b5083b05fb3167e579b852cddf4ab5a5b8270801951c451312c6d59bade6443b3282d2d55245d791362e3b594ef", 0x36}], 0x6, &(0x7f0000001c00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdr={{0x28, 0x29, 0x39, {0x84, 0x2, 0x1, 0x1, 0x0, [@mcast2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x68}}, {{&(0x7f0000001c80)={0xa, 0x4e23, 0x7, @mcast2, 0x4}, 0x1c, &(0x7f0000004080)=[{&(0x7f0000001cc0)="fa9324179734267d530ec4bb4ce95a95aba85d3e3f6fa9859536af23f10333b01a2d72c799f399b1cf25e9052e8fcd804e0d8423109a4136cff4e0bf20386f3718a9bd98e4b77542be16064a6cf84cef3e131aadcee7b4c61f92a7117fb92beada3a6bfeaf6f73d35f6ee96708ba4a0a97199ad63b7fcb0c876ac8383bc88c6c827dfd7fd8be69503766d1ab4cfee50ba2f2570ca9a8090f102b955faff0689e9bf570a5e27afd5b94ece43acd11bad86be5e372d94a57", 0xb7}, {&(0x7f0000003e00)="64bd5613f3e27da64400ff7dc2699e410cf119d0ad3312a44d65a7f1d7b9f9fc27d2785004d50524f8dfa162f8a94c4972d82dd43007f01543b59faa34b607899b2ea8bad0e6d5d8ce81b19f87ed52ad6885129d6b3a9287be20928d46eb6fd77aee4a41da37b7e20e2897a61f839d4cf9cf63a79bcad1d4f3d89ae148b9e53355eac8177fd1d5dc6fc090a065398cc726d91f94acb63a73b54958126d28205d6a074b0b2d6bbc22349241856806d29ce9821eca1219a9c635fca687793c134cc2df633ae204430c7b52ef87", 0xcc}, {&(0x7f0000003f00)="65607ad596c8a937d5b56186960a3465e6e6a0f02a7557e38e115dcecb2c61d2fa8fdd0cea841be6530359b302389438401b2d2ae1688ef629104f4e70381a22994c", 0x42}, {&(0x7f0000003f80)="3f059dfd73e536765de8e8dc8bbc3b747165a4466c4f2dd42806c57149e0f5a780502589d45893b8e14f44d1754fcdd82e8b8960955c0763fc65e275e2560d0dfe840f030623a50f199a4f3662fc75e83051928d7fc9ae1a4c1349d06d266154e42015c11b8425f0cd2255acb648153f92fa2c6b31ec289169d46ca23d7ab8fc944fc61c96b45348a9262f2034c1567f4ba74a5e8b4d7e7e90c036e419b6f0a5a1d9141a607302eb0bfe3d82c0da85527b2d461c8ecfef3f394862fd52f16e30ba30", 0xc2}], 0x4, &(0x7f00000040c0)=[@hopopts_2292={{0xb0, 0x29, 0x36, {0x0, 0x12, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0xfffa, [0x74f, 0x9, 0x6]}}, @enc_lim={0x4, 0x1, 0x3f}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x66, 0x4c, "cf1a7dc085ead287493a2fc2839b7c4ba39fc6954fba87d8ba20801457fc5215f837e438315bd1f9d15d461c45962fb7d29013763b280c426187b09a716cd36ea75ec442324633396900ef7b"}, @padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6ac2}}, @rthdr={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x2, 0x0, 0x0, [@remote, @private0, @remote]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5f}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x140}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004200)="e63589e36a28959d4853da36fcd397a5475ec2b9dd2e097e1ddac56aff97b1d264f7cbdd58bb2242f71a226ea84a36522481201c4c0139f528b137f91e7cb7e81a08ee028f0d8189c02d526a4a0cbffc44155ffb0954093fc5ac8624f827b5747c5ec6a8d7d6a0907e66ad8964e8dcfb2ad9a9507e248b4ef73a4262e8e5c5000b5eca79300b24e3efd345bebf26e664a81e12e4679738fc03e1add42c7b355a7803307864a3695a21e12498b633c138dde355792d6f48f0e2b90b254bb657553624ca16a7c482bc22dedf79e6dc7ec8e1", 0xd1}, {&(0x7f0000004300)="8c789d39397c", 0x6}, {&(0x7f0000004340)="93661864f03f88bf89622f21fbe38c99b85a51988df7b54f7319663374c86ddeebe01751bb4ad1d0e3a4cc293493c22ae6405fdef3330df36d2eb843576d75853336941b308f134b6baed22d3827d9b3cf04d734b9dcebf219d6a768e8e744c3", 0x60}, {&(0x7f00000043c0)="6763131b49b833261eba1a0c66c1ba32a0179d3dc9aba435dd09d6789a6a418052c460064668e056bd443c475bdd406b6421ff9fbcf13614936971abc6e6a9b7817c54d6979bb35a3d37738bc5e637b76f3c18fa8bf93bb0d020918a58e24b6717edecf3375c05d115ffba761e99ac88f3b51de4e361df499ea573708c30", 0x7e}, {&(0x7f0000004440)="15b8b3cf7fc0fbb9088fa3276c5f7a3dab11c9bf38c4ce8c3c5ca0fed1af06111c2c6b8927f5e9dcd94393a01a1b3fd3847153e0bcdc772759e01cbdf4895323f5d313fbe5a2d138c4883ea906f72379d86be5423db7137487f9d5f5701a79c9dfe2af3747703459abd02450e15bb2613d4bd2092a5ed48db20c6de92472ea4e9ae3c63000ba938e858201b08bd8e49aacaa962abad904be7b028b696f92a06729fb08655e49ec89b83fd24b311088df157d3e354fe7fd3183ae3cde0db0a56330fe585bdf342e2eb5d819f6fd39cd", 0xcf}, {&(0x7f0000004540)="a1d8d191db0c753091077cce52bf5d3fa7080c82fcdd228bdb9618de907c77e8f648419bca7e9b24b29ed30d28e6ba5df4ba83f15daf4c2ed858682c6aa9796637d85bcdb735fb6b7888ed6d6bd8072541d5e41bb3a2d1fb1bc6e435572424009302c123f8cb8aad6f0fd675944203fdd5f64916fe594cf1964f7f2d6737786f008243d5848b44e9d4f5005c2d4843ef13a9c4f9d9f25301df", 0x99}, {&(0x7f0000004600)}, {&(0x7f0000004640)="e66e28d581aab058fc30b8b7fabfa3a0c60b5b6b5a80d0703ea62543760a77465032394967ee0857f360ec91a3299fe57d7b7acf860238513e2c72a9ce71939a36ef7594168c44f62dc50682c62bb86f28c9a9e3211436585c620ce3e5e45e3f1bf17232869c1715fa9b6ef77ca0314dbde3", 0x72}], 0x8, &(0x7f0000004740)=[@hopopts={{0x70, 0x29, 0x36, {0x88, 0xa, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x0, 0x31, "54dd7d2e5e2898590fbbe27f8fde3f7249e6591ae6f19784c720f8f5bf0120ade7fe4ffdd38cb60befa887305ec0a4dca7"}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x2}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x1, 0x9, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0x16ed}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x84, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x68, 0x29, 0x39, {0xc, 0xa, 0x0, 0x0, 0x0, [@mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @private0]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts={{0x18, 0x29, 0x37, {0x3b}}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x1, 0x8, 0x0, [@empty]}}}], 0x1c8}}, {{&(0x7f0000004940)={0xa, 0x4e20, 0x7, @private0, 0x101}, 0x1c, &(0x7f0000004bc0)=[{&(0x7f0000004980)="08b8aec642c646867ece347e42054bf22cc514229916aa2746db174ddce3e79d330fb52b98b1eb07e5611598656501669c98cb184687e65756607847d21bb37e4526c9dcbef7c18d3f84a2a2483eb5fa1b1fc63a9f3aeff3f8ce594f809f28ce6467c281203a8ead2d12643ae7980abdbd0e720e5f0ff26cdda2c9c42d07607a8bd212d41c389fa016e34522a755a26429344201d2a514e7f3f9f976e327059a4dfa748af89271feaec053a1fe9be39367213557116abae5e7b89e6f1936e131ba168ae83263fc73c06839d042eaebf0de363dcecb47dc7bc817ce11704bdb8eee5fa5e49b658b9cc410fd5ff21e7485b20ad54e", 0xf4}, {&(0x7f0000004a80)="a7d688990b37e47243b79179c93445d234a122d7c82f109e9e4e89881f05e9ec8afc89457ace743e95591ace6b15fa023bca707afcca575db72436480769c52494d657f5b0cf55db957d28ddc1450b8d691d8119e8709bc5969f595c22392003a57324e2e2be3ab0e780b836dc353ba8e66f9800a60d64f933c614fde902b78d505c9c7cc1d6f0ebb6ff1d1426aa8455ca050ff6a6425b668912e4e2cdb69cc77edf892d2b7cc13c94fcaefb63fac7641607a0e0f8c6e0fa915158e91c1229f131a28b6844a4aed6f42853f668b36569cb3134fdaf875226e9", 0xd9}, {&(0x7f0000004b80)="0feafe6db7d129b19ab82321c183", 0xe}], 0x3, &(0x7f0000004c40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @dstopts={{0x90, 0x29, 0x37, {0x87, 0xe, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0xe0, 0x719, [0x7fff, 0x101, 0x4, 0x1]}}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x30, {0x2, 0xa, 0x8, 0x1, [0x7ce, 0x10001, 0x8a, 0x2, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r5}}}], 0xd0}}, {{&(0x7f0000004d40)={0xa, 0x4e22, 0x9, @loopback, 0x770}, 0x1c, &(0x7f0000004f00)=[{&(0x7f0000004d80)="efc286e5dc89f4022d437c40969aeebe73b27234e227d857884fca365bae90dbac2b7e56c9c2f5d9abb0dbc1a1c478290702822b766931bb57b3c2e89b9ee9ba5de560f06198eeae5ff913da0957a0d61e4406c64fddaf6c94039a625578a6d1466d", 0x62}, {&(0x7f0000004e00)="b7e8ccb2bcd7c72a47899e839b164b58ef5b874af5c694abaf9f310164c53d77e6434a19184108e5523d", 0x2a}, {&(0x7f0000004e40)="6affe7f35035d1044d90318efd71a9f3bf91ba73cad835a68cfe47d0b245510e653ea9d6a8c6b60cbf9e2e81887e4db3f0a7fadcafa87b7955dd68c58d4e26f6ee4765a43b10c2996f6e4d8a094439395179e0506d814453d7b89536aff85311740d192ec941de57d76e2688d50aa30bb9227099269f85f77b01f0caf51b2d603d82b033e7ac26638b83aa5bbe8294cba7220437026dd4b02c8c7b663bfaf92d44", 0xa1}], 0x3, &(0x7f0000005d00)=[@dstopts_2292={{0x1050, 0x29, 0x4, {0x2f, 0x206, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3f}, @generic={0xc5, 0x1000, "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"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x2, [0x9, 0x800]}}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @loopback}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r8}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r9}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffd}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2c}}}, @rthdrdstopts={{0x100, 0x29, 0x37, {0x11, 0x1c, '\x00', [@hao={0xc9, 0x10, @mcast2}, @generic={0x9, 0x41, "76deb11c5ac6a084e82ee5c8291c80dfdd118288888c0314db1409e530d3fc69a80cf154137add4d8aac8652356b51888039ee26ce1c78f89ee6e53211cf395bc8"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x2}, @generic={0x1, 0x82, "ba6c6c2975f0e4c59c098968eaa3b3f90c83478b484ca2008c5e463ea82ddec198453463833e1c725a6b68dea62b9f1ecb5ce1fb13fd9920f8ade8badd318efa65796ba3d9b809abf7bcf012ee19b48f54db3cd3f4bc1dc208581d3075104f01164d0611e963b3b94fad2757d30936f45a8f8dfa5038616eb50b7af417ef4f829657"}]}}}, @hopopts={{0x90, 0x29, 0x36, {0x16, 0xe, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0xcb}, @generic={0x5, 0x19, "21de95bd1817e27ae5daee31ccd157faa790ff8db6cc5c04bf"}, @pad1, @pad1, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xe1}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3f, 0xfff8, [0x1, 0x1, 0x3699, 0x7, 0x0]}}, @generic={0x3, 0x1, ' '}]}}}], 0x1260}}], 0x7, 0x8880) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x400010e, 0xc000) getpeername(r1, &(0x7f0000001100)=@in={0x2, 0x0, @remote}, &(0x7f0000001180)=0x80) close(r2) readv(r1, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) 18:50:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:50:42 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66642e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:50:42 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfd09, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2873.448417] FAULT_INJECTION: forcing a failure. [ 2873.448417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2873.450236] CPU: 0 PID: 16997 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2873.451201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.452289] Call Trace: [ 2873.452667] dump_stack+0x107/0x167 [ 2873.453173] should_fail.cold+0x5/0xa [ 2873.453697] _copy_from_user+0x2e/0x1b0 [ 2873.454247] __copy_msghdr_from_user+0x91/0x4b0 [ 2873.454879] ? __ia32_sys_shutdown+0x80/0x80 [ 2873.455493] ? udp_v6_push_pending_frames+0x360/0x360 [ 2873.456199] ? inet6_sendmsg+0xbd/0x140 [ 2873.456763] ? inet6_compat_ioctl+0x320/0x320 [ 2873.457365] ? __sock_sendmsg+0x55/0x190 [ 2873.457938] sendmsg_copy_msghdr+0xa1/0x160 [ 2873.458520] ? do_recvmmsg+0x6d0/0x6d0 [ 2873.459056] ? __lock_acquire+0x1657/0x5b00 [ 2873.459653] ___sys_sendmsg+0xc6/0x170 [ 2873.460191] ? sendmsg_copy_msghdr+0x160/0x160 [ 2873.460820] ? vmacache_find+0x55/0x2a0 [ 2873.461368] ? __lockdep_reset_lock+0x180/0x180 [ 2873.462025] ? lock_acquire+0x197/0x470 [ 2873.462578] ? find_held_lock+0x2c/0x110 [ 2873.463143] ? __might_fault+0xd3/0x180 [ 2873.463692] ? lock_downgrade+0x6d0/0x6d0 [ 2873.464266] ? asm_exc_page_fault+0x1e/0x30 [ 2873.464893] __sys_sendmmsg+0x195/0x470 [ 2873.465440] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2873.466034] ? lock_downgrade+0x6d0/0x6d0 [ 2873.466629] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2873.467296] ? wait_for_completion_io+0x270/0x270 [ 2873.467956] ? rcu_read_lock_any_held+0x75/0xa0 [ 2873.468600] ? vfs_write+0x354/0xa70 [ 2873.469126] ? fput_many+0x2f/0x1a0 [ 2873.469628] ? ksys_write+0x1a9/0x260 [ 2873.470156] ? __ia32_sys_read+0xb0/0xb0 [ 2873.470724] __x64_sys_sendmmsg+0x99/0x100 [ 2873.471303] do_syscall_64+0x33/0x40 [ 2873.471827] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2873.472524] RIP: 0033:0x7f9d069ffb19 [ 2873.473040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2873.475585] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2873.476627] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2873.477637] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2873.478634] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.479623] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2873.480609] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2873.525505] FAT-fs (loop6): Directory bread(block 3) failed [ 2873.526795] FAT-fs (loop6): Directory bread(block 4) failed [ 2873.527804] FAT-fs (loop6): Directory bread(block 5) failed [ 2873.530643] FAT-fs (loop6): Directory bread(block 6) failed [ 2873.538495] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2873.540515] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2873.548313] FAT-fs (loop6): Directory bread(block 7) failed [ 2873.554314] FAT-fs (loop6): Directory bread(block 8) failed [ 2873.555400] FAT-fs (loop6): Directory bread(block 9) failed 18:50:42 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66692e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2873.699880] selinux_netlink_send: 28 callbacks suppressed [ 2873.699901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=16998 comm=syz-executor.7 18:50:42 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2873.744712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=16998 comm=syz-executor.7 [ 2873.749577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=16998 comm=syz-executor.7 [ 2873.761553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=16998 comm=syz-executor.7 [ 2873.858631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=16998 comm=syz-executor.7 [ 2873.870856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16998 comm=syz-executor.7 [ 2873.893135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=16998 comm=syz-executor.7 18:50:42 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b666c2e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2873.906685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=16998 comm=syz-executor.7 [ 2873.951834] FAT-fs (loop6): Directory bread(block 3) failed [ 2873.953055] FAT-fs (loop6): Directory bread(block 4) failed [ 2873.953755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=16998 comm=syz-executor.7 [ 2873.954482] FAT-fs (loop6): Directory bread(block 5) failed [ 2873.955559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=16998 comm=syz-executor.7 [ 2873.957616] FAT-fs (loop6): Directory bread(block 6) failed [ 2873.961204] FAT-fs (loop6): Directory bread(block 7) failed [ 2873.963199] FAT-fs (loop6): Directory bread(block 8) failed [ 2873.965588] FAT-fs (loop6): Directory bread(block 9) failed 18:50:42 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:50:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="007da1a04886b1655e09966a7e07c44f01000080ecfbb6650240e9635802006dcb1b3d4462fe59be4c704b17c759b22d78c09367f849dcb8494ee15dcf7d0932dbae7e939e371d798c807d65eecdf0eaed8aa6cb52ef5ae7ab35864fec9cb6832dcf658d3b207a59e9d55e0757fcf48c97ef843f7e84427f72f50c0a97bc0c9c36d67ab1f2da2c55c115d396d32dbe7a6a4cfb095759c0886d72759b5455e224e4470e75c595283d19ecc0b5eb9bb3215701168256bfe9e8b81cf85699ccb0a83a2d5ffae33d8cf09c7ae3"]) mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0x0) r2 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f9, [0x0, 0xc8a2, 0x8, 0x8000, 0x101, 0x4]}) mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x40000, &(0x7f0000000480)={[{@cpuset_v2_mode}, {}, {@clone_children}, {@noprefix}, {@cpuset_v2_mode}, {}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10) mkdirat(r2, &(0x7f0000000000)='./file1\x00', 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file1', [{}, {0x20, '+[-+\xc3'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, 'vfat\x00'}, {0x20, '\\'}, {0x20, '\x00'}], 0xa, "2bbafb9d871e8a182aaaa667a7c4c9da64386a63f6b22e89b8dab7a5dbd814e3a1206dc7f2870f"}, 0x49) unshare(0x48020200) 18:50:42 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 34) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) [ 2874.082140] FAULT_INJECTION: forcing a failure. [ 2874.082140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2874.085574] CPU: 1 PID: 17048 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2874.086635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2874.087909] Call Trace: [ 2874.088322] dump_stack+0x107/0x167 [ 2874.088888] should_fail.cold+0x5/0xa [ 2874.089477] _copy_from_user+0x2e/0x1b0 [ 2874.090091] __copy_msghdr_from_user+0x91/0x4b0 [ 2874.090806] ? __ia32_sys_shutdown+0x80/0x80 [ 2874.091482] ? udp_v6_push_pending_frames+0x360/0x360 [ 2874.092274] ? inet6_sendmsg+0xbd/0x140 [ 2874.092913] ? inet6_compat_ioctl+0x320/0x320 [ 2874.093616] ? __sock_sendmsg+0x55/0x190 [ 2874.094249] sendmsg_copy_msghdr+0xa1/0x160 [ 2874.094920] ? do_recvmmsg+0x6d0/0x6d0 [ 2874.095526] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2874.096352] ? ___sys_sendmsg+0x8b/0x170 [ 2874.097000] ___sys_sendmsg+0xc6/0x170 [ 2874.097561] ? sendmsg_copy_msghdr+0x160/0x160 [ 2874.098258] ? __lockdep_reset_lock+0x180/0x180 [ 2874.098923] ? trace_hardirqs_on+0x5b/0x180 [ 2874.099583] ? lock_acquire+0x197/0x470 [ 2874.100186] ? find_held_lock+0x2c/0x110 [ 2874.100822] ? __might_fault+0xd3/0x180 [ 2874.101405] ? lock_downgrade+0x6d0/0x6d0 [ 2874.102035] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2874.102829] __sys_sendmmsg+0x195/0x470 [ 2874.103442] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2874.104089] ? lock_downgrade+0x6d0/0x6d0 [ 2874.104717] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2874.105474] ? wait_for_completion_io+0x270/0x270 [ 2874.106181] ? rcu_read_lock_any_held+0x75/0xa0 [ 2874.106900] ? vfs_write+0x354/0xa70 [ 2874.107458] ? fput_many+0x2f/0x1a0 [ 2874.108030] ? ksys_write+0x1a9/0x260 [ 2874.108591] ? __ia32_sys_read+0xb0/0xb0 [ 2874.109235] __x64_sys_sendmmsg+0x99/0x100 [ 2874.109894] do_syscall_64+0x33/0x40 [ 2874.110474] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2874.111272] RIP: 0033:0x7f9d069ffb19 [ 2874.111823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2874.114706] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2874.115890] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2874.117013] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2874.118133] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2874.119250] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2874.120359] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 18:50:56 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 35) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:50:56 executing program 7: perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fe000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1, 0xffffffffffffffff}}, './file0\x00'}) 18:50:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b666f2e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:50:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000013c0), 0x100, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002580)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={r7, 0x0, 0x20}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYRESHEX=r5]) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000f00)={r7, 0x3f, 0x8000000, 0x1}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:50:56 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000008000900000034"], 0x34}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x13c, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x158) 18:50:56 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:50:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x2b, 0x7ff, 0x10000}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 18:50:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000003e00)=ANY=[@ANYRES64=r3], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r6}, 0x68) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x40, 0x1, 0x6, 0x0, 0x3f, 0x40010, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x3f, 0x2}, 0x10008, 0x2, 0x1, 0x5, 0x8, 0x9, 0x4, 0x0, 0x6, 0x0, 0x96a}, r5, 0x6, r6, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="030001000400000004000000db5b7d"]) [ 2887.773806] FAULT_INJECTION: forcing a failure. [ 2887.773806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2887.776675] CPU: 0 PID: 17067 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2887.778544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.780858] Call Trace: [ 2887.781559] dump_stack+0x107/0x167 [ 2887.782569] should_fail.cold+0x5/0xa [ 2887.783534] _copy_from_user+0x2e/0x1b0 [ 2887.784405] __copy_msghdr_from_user+0x91/0x4b0 [ 2887.785414] ? __ia32_sys_shutdown+0x80/0x80 [ 2887.786343] ? udp_v6_push_pending_frames+0x360/0x360 [ 2887.787427] ? inet6_sendmsg+0xbd/0x140 [ 2887.788295] ? inet6_compat_ioctl+0x320/0x320 [ 2887.789253] ? __sock_sendmsg+0x55/0x190 [ 2887.790113] sendmsg_copy_msghdr+0xa1/0x160 [ 2887.791009] ? do_recvmmsg+0x6d0/0x6d0 [ 2887.791827] ? __lock_acquire+0x1657/0x5b00 [ 2887.792756] ___sys_sendmsg+0xc6/0x170 [ 2887.793614] ? sendmsg_copy_msghdr+0x160/0x160 [ 2887.794558] ? vmacache_find+0x55/0x2a0 [ 2887.795391] ? __lockdep_reset_lock+0x180/0x180 [ 2887.796363] ? lock_acquire+0x197/0x470 [ 2887.797199] ? find_held_lock+0x2c/0x110 [ 2887.798044] ? __might_fault+0xd3/0x180 [ 2887.798872] ? lock_downgrade+0x6d0/0x6d0 [ 2887.799716] ? asm_exc_page_fault+0x1e/0x30 [ 2887.800624] __sys_sendmmsg+0x195/0x470 [ 2887.801481] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2887.802402] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2887.803296] ? clockevents_program_event+0x131/0x360 [ 2887.804401] ? tick_program_event+0xa8/0x140 [ 2887.805332] ? hrtimer_interrupt+0x771/0x9b0 [ 2887.806262] __x64_sys_sendmmsg+0x99/0x100 [ 2887.807142] do_syscall_64+0x33/0x40 [ 2887.807915] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2887.808976] RIP: 0033:0x7f9d069ffb19 [ 2887.809737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.814003] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2887.815614] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2887.817125] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2887.818640] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2887.820410] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2887.821900] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 18:50:56 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2887.870125] FAT-fs (loop6): Directory bread(block 3) failed [ 2887.871583] FAT-fs (loop6): Directory bread(block 4) failed [ 2887.902666] FAT-fs (loop6): Directory bread(block 5) failed [ 2887.915469] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2887.919589] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2887.921628] FAT-fs (loop6): Directory bread(block 6) failed [ 2887.934069] FAT-fs (loop6): Directory bread(block 7) failed [ 2887.950516] FAT-fs (loop6): Directory bread(block 8) failed [ 2887.960859] FAT-fs (loop6): Directory bread(block 9) failed 18:50:56 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000854, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) poll(&(0x7f00000002c0)=[{r1, 0x4}, {r1, 0x3232}, {0xffffffffffffffff, 0x82}, {r2, 0x4}], 0x4, 0x7fff) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x0) mknodat$loop(r3, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000006, 0x10010, r1, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x6, 0x5, 0x0, 0xffff, 0x1, 0x1}, 0x20200) openat(r1, &(0x7f0000000140)='./file1\x00', 0x200040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x31d, 0x0, 0x0, 0x4, 0x1000000, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x20d315) 18:50:56 executing program 1: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x840000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) inotify_init1(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 18:50:56 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66702e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:50:56 executing program 0: sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x9, 0x6, 0x1b01, 0x0, 0x0, {0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x94}, @IPSET_ATTR_SKBMARK={0xc}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'wg2\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_COMMENT={0xd, 0x1a, '/dev/sg#\x00'}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000045}, 0x48000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:50:56 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 36) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:50:56 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) close(r1) 18:50:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x80, 0x1, 0x3f, 0x1, 0x0, 0x1, 0x9840, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0xd84220a7e38ad751, 0x9, 0x9d, 0x1, 0x1, 0xcb, 0xffff, 0x0, 0x40, 0x0, 0x400}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="013800080000000012dbe6b4d124ef9d0ec5947fe3cc2517873fed301a5c8fecc8517d48c2b42c"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x2, 0x5, 0x8, 0x0, 0x7ff, 0x40000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100b99, 0x0, @perf_config_ext={0x6, 0x6}, 0x1a20e, 0x8, 0x4, 0x7, 0x4, 0x1, 0x1f, 0x0, 0x400, 0x0, 0x10000}, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 18:50:56 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2888.308372] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2888.314622] FAULT_INJECTION: forcing a failure. [ 2888.314622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2888.318536] CPU: 0 PID: 17112 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2888.319948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.321645] Call Trace: [ 2888.322183] dump_stack+0x107/0x167 [ 2888.322930] should_fail.cold+0x5/0xa [ 2888.323674] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2888.323730] _copy_from_user+0x2e/0x1b0 [ 2888.326266] __copy_msghdr_from_user+0x91/0x4b0 [ 2888.327286] ? __ia32_sys_shutdown+0x80/0x80 [ 2888.328197] ? udp_v6_push_pending_frames+0x360/0x360 [ 2888.329275] ? inet6_sendmsg+0xbd/0x140 [ 2888.330090] ? inet6_compat_ioctl+0x320/0x320 [ 2888.331003] ? __sock_sendmsg+0x55/0x190 [ 2888.331834] sendmsg_copy_msghdr+0xa1/0x160 [ 2888.332734] ? do_recvmmsg+0x6d0/0x6d0 [ 2888.333534] ? __lock_acquire+0x1657/0x5b00 [ 2888.334433] ___sys_sendmsg+0xc6/0x170 [ 2888.335222] ? sendmsg_copy_msghdr+0x160/0x160 [ 2888.336152] ? vmacache_find+0x55/0x2a0 [ 2888.336966] ? __lockdep_reset_lock+0x180/0x180 [ 2888.337923] ? lock_acquire+0x197/0x470 [ 2888.338723] ? find_held_lock+0x2c/0x110 [ 2888.339571] ? __might_fault+0xd3/0x180 [ 2888.340393] ? lock_downgrade+0x6d0/0x6d0 [ 2888.341258] ? asm_exc_page_fault+0x1e/0x30 [ 2888.342172] __sys_sendmmsg+0x195/0x470 [ 2888.342985] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2888.343857] ? lock_downgrade+0x6d0/0x6d0 [ 2888.344742] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2888.345735] ? wait_for_completion_io+0x270/0x270 [ 2888.346713] ? rcu_read_lock_any_held+0x75/0xa0 [ 2888.347659] ? vfs_write+0x354/0xa70 [ 2888.348469] ? fput_many+0x2f/0x1a0 [ 2888.349248] ? ksys_write+0x1a9/0x260 [ 2888.350028] ? __ia32_sys_read+0xb0/0xb0 [ 2888.350874] __x64_sys_sendmmsg+0x99/0x100 [ 2888.351744] do_syscall_64+0x33/0x40 [ 2888.352530] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2888.353602] RIP: 0033:0x7f9d069ffb19 [ 2888.354366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.358301] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2888.359877] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2888.361363] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2888.362855] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2888.364347] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2888.365828] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2888.386248] FAT-fs (loop6): Directory bread(block 3) failed [ 2888.388809] FAT-fs (loop6): Directory bread(block 4) failed [ 2888.394189] FAT-fs (loop6): Directory bread(block 5) failed 18:50:57 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4f4f, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) [ 2888.396636] FAT-fs (loop6): Directory bread(block 6) failed [ 2888.402092] FAT-fs (loop6): Directory bread(block 7) failed [ 2888.407347] FAT-fs (loop6): Directory bread(block 8) failed [ 2888.410836] FAT-fs (loop6): Directory bread(block 9) failed [ 2888.528459] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2888.531670] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:51:15 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 37) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:51:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffc00000000000}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffc0000000000002, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) dup3(r3, r5, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000c0004000000dbf57d"]) 18:51:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40800) clone3(&(0x7f0000000340)={0x205000600, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x9}, &(0x7f0000000140)=""/255, 0xff, &(0x7f0000000240)=""/31, &(0x7f00000002c0)=[r1, r0], 0x2, {r2}}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 18:51:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x62081, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f0000000000)) 18:51:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x40640) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0c00900090000000000000000400710087dab4f44cec1c82439f427621f8aa7855f4409bb846363bb0aa9b3e1c7765e5cb2a361e952fdd750e6dd6b3b4a766b35774e46a1e0498eb86d204c4848884d0995c26496115bf9d4ccbdde6bd593d992cb54dca3262951d7a69ef505a4bed9b9f22d0db1171b5c3463d806852a0b5df3d10b3b47019cb71c0b4d8b71999790662216a2d225c99a00a26014b276fe30750c26505b32370b3d0e054dcf084373e4b93815405d5884830415362008e52058d2a5ca186009e338c66ed8cfda7298c619dcf37d0f80e5a4275ab8853be63dd1444bf31385e1ff95af018c87f0d839827438b3a1417da5492dde978b08ec135a95b3f2326c24efd8570d995e5c034647bbf9dd82b2378d1d39651975e6e9fe877dd3d9057440409354e93315eb85482057a84f7b32497090fc7c9fabafcc302bea0df2a388261f5fca6280f4b9181bdee3c74902af7000000"], 0x2dc}, 0x1, 0x0, 0x0, 0xc801}, 0x24010090) 18:51:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66752e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:51:15 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3f000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:51:15 executing program 1: getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/106, 0x6a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@random={'btrfs.', '*++.\x00'}, &(0x7f0000000580)=""/22, 0x16) io_uring_enter(r1, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x1) io_uring_enter(0xffffffffffffffff, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0xfd, 0xff, 0x0, 0x0, 0x0, 0x15e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0xffffffff, 0x1003, 0x5, 0x9, 0x401, 0x40, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r2, &(0x7f0000000000), 0x5ac, 0x0, 0x0) [ 2906.424678] FAULT_INJECTION: forcing a failure. [ 2906.424678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2906.426493] CPU: 1 PID: 17159 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2906.427416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2906.428495] Call Trace: [ 2906.428856] dump_stack+0x107/0x167 [ 2906.429349] should_fail.cold+0x5/0xa [ 2906.429878] _copy_from_user+0x2e/0x1b0 [ 2906.430404] __copy_msghdr_from_user+0x91/0x4b0 [ 2906.431039] ? __ia32_sys_shutdown+0x80/0x80 [ 2906.431617] ? udp_v6_push_pending_frames+0x360/0x360 [ 2906.432315] ? inet6_sendmsg+0xbd/0x140 [ 2906.432840] ? inet6_compat_ioctl+0x320/0x320 [ 2906.433452] ? __sock_sendmsg+0x55/0x190 [ 2906.433992] sendmsg_copy_msghdr+0xa1/0x160 [ 2906.434572] ? do_recvmmsg+0x6d0/0x6d0 [ 2906.435092] ? __lock_acquire+0x1657/0x5b00 [ 2906.435682] ___sys_sendmsg+0xc6/0x170 [ 2906.436198] ? sendmsg_copy_msghdr+0x160/0x160 [ 2906.436814] ? vmacache_find+0x55/0x2a0 [ 2906.437359] ? __lockdep_reset_lock+0x180/0x180 [ 2906.438000] ? lock_acquire+0x197/0x470 [ 2906.438525] ? find_held_lock+0x2c/0x110 [ 2906.439077] ? __might_fault+0xd3/0x180 [ 2906.439605] ? lock_downgrade+0x6d0/0x6d0 [ 2906.440165] ? asm_exc_page_fault+0x1e/0x30 [ 2906.440750] __sys_sendmmsg+0x195/0x470 [ 2906.441313] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2906.441900] ? lock_downgrade+0x6d0/0x6d0 [ 2906.442477] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2906.443123] ? wait_for_completion_io+0x270/0x270 [ 2906.443911] ? rcu_read_lock_any_held+0x75/0xa0 [ 2906.444712] ? vfs_write+0x354/0xa70 [ 2906.445392] ? fput_many+0x2f/0x1a0 [ 2906.446022] ? ksys_write+0x1a9/0x260 [ 2906.446826] ? __ia32_sys_read+0xb0/0xb0 [ 2906.447534] __x64_sys_sendmmsg+0x99/0x100 [ 2906.448303] do_syscall_64+0x33/0x40 [ 2906.449104] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2906.450071] RIP: 0033:0x7f9d069ffb19 [ 2906.450637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2906.453962] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2906.455247] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2906.456524] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2906.457814] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2906.458931] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2906.460194] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2906.466763] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2906.481773] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:51:15 executing program 7: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)='3', 0x1}, {&(0x7f0000000100), 0x55}], 0x2) ftruncate(0xffffffffffffffff, 0x0) unshare(0x48020200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xfffffffffffffc9a}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xfffffffffffffc9a}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x2c}}, 0x0) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x8, 0x70bd2b, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x64008004}, 0x4044) 18:51:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x4080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="03230005000000000000026e1bd01b86c5dc2c19a74778470f09430b399c6236aeecba66c7887e59ad7eeed99ef3c834c1a1fb898a1e38d0d3d7b60db907bd0610f99a85a73185c2c321cc130dfee3e16acb9c9bca3e27b62d971c9851a6533e82cc5148788acdb48c410df95e125487eeb870a98d04cb6fcb78649879ece9229939ec98e36e5450609a8a9219d68d3b878848569dd7cf5c49"]) [ 2906.560238] FAT-fs (loop6): Directory bread(block 3) failed [ 2906.574559] FAT-fs (loop6): Directory bread(block 4) failed [ 2906.589449] FAT-fs (loop6): Directory bread(block 5) failed [ 2906.600700] FAT-fs (loop6): Directory bread(block 6) failed 18:51:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) [ 2906.614852] FAT-fs (loop6): Directory bread(block 7) failed [ 2906.626466] FAT-fs (loop6): Directory bread(block 8) failed [ 2906.627806] FAT-fs (loop6): Directory bread(block 9) failed 18:51:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000f00)=@disckey={0x2, 0x0, "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"}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:51:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66782e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2906.815536] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2906.831741] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:51:15 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:51:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x62081, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f0000000000)) [ 2906.899848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2906.930447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2906.950335] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2906.979296] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2906.981967] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2907.269696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 18:51:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730266617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:51:29 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x124, 0x2, 0x1, 0x7, 0x80, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x408) close(r1) lseek(r0, 0x3, 0x2) 18:51:29 executing program 7: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0xeac}, @void}}}, 0x1c}}, 0x0) 18:51:29 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 38) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:51:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000005b00)=""/4096, 0x1000) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) recvmmsg$unix(r2, &(0x7f0000005880)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/253, 0xfd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000f00)=""/95, 0x5f}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x3, &(0x7f0000000f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001080)=""/112, 0x70}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000001100)=""/227, 0xe3}, {&(0x7f0000001200)=""/29, 0x1d}, {&(0x7f0000001240)=""/195, 0xc3}], 0x5}}, {{&(0x7f00000013c0), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001440)=""/150, 0x96}], 0x1, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f00000015c0), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001640)=""/36, 0x24}, {&(0x7f0000001680)=""/181, 0xb5}, {&(0x7f0000001740)=""/2, 0x2}, {&(0x7f0000001780)=""/46, 0x2e}, {&(0x7f00000017c0)=""/167, 0xa7}, {&(0x7f0000001880)=""/187, 0xbb}, {&(0x7f0000001940)=""/65, 0x41}, {&(0x7f00000019c0)=""/138, 0x8a}], 0x8, &(0x7f0000001b00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/177, 0xb1}, {&(0x7f0000003e00)=""/189, 0xbd}, {&(0x7f0000001d00)=""/46, 0x2e}, {&(0x7f0000003ec0)=""/141, 0x8d}], 0x4}}, {{&(0x7f0000003f80), 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004000)=""/54, 0x36}, {&(0x7f0000004040)=""/83, 0x53}, {&(0x7f00000040c0)=""/210, 0xd2}], 0x3, &(0x7f0000004200)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000004280)=@abs, 0x6e, &(0x7f0000005780)=[{&(0x7f0000004300)=""/156, 0x9c}, {&(0x7f00000043c0)=""/132, 0x84}, {&(0x7f0000004480)=""/69, 0x45}, {&(0x7f0000004500)=""/117, 0x75}, {&(0x7f0000004580)=""/213, 0xd5}, {&(0x7f0000004680)=""/49, 0x31}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/107, 0x6b}, {&(0x7f0000005740)=""/28, 0x1c}], 0x9, &(0x7f0000005840)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x9, 0x0, &(0x7f0000005ac0)={0x77359400}) 18:51:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x50, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}, 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="600100001000010000000000000040bcff020000000000000200000000000001fc00f7ff0000000000000000000000060000000000001a130000008d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000e2ff07000000000000000000000000000032000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000660cf85e460000000000000000fcffffff00000000000000000a000000000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000080000000976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b740d32b84ddaa118cc7f738efcfc854c0c373eca9a8f6b763f78515ab28695e1887685c5a3ea1b47cb1a6ecc3fe7c59988c0a7cc021c20cedf1ad75b701889cda8e4a4676c5bb94da08c0f9bb6c548a2f02d155ca4fc9d9a2c4587f3ea0c0d16a9ca1f40c1ff7484a6da5b45ec4cbad3777be99dbd7ad58385a937e457001c40a5bd102537a4669700796fe4784db527401df9594924306eedb9afb33b40a26cb2f332"], 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) r3 = msgget(0x3, 0x202) msgrcv(r3, &(0x7f0000000000)={0x0, ""/30}, 0x26, 0x0, 0x3000) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:51:29 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:51:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x4]}, 0x8, 0x800) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000100000000000000169bacc28a0000dbf57d0000000000"]) [ 2920.539813] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2920.541977] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2920.545374] FAT-fs (loop6): Directory bread(block 3) failed [ 2920.546150] FAT-fs (loop6): Directory bread(block 4) failed [ 2920.546979] FAT-fs (loop6): Directory bread(block 5) failed [ 2920.548039] FAT-fs (loop6): Directory bread(block 6) failed [ 2920.549005] FAT-fs (loop6): Directory bread(block 7) failed [ 2920.549063] FAULT_INJECTION: forcing a failure. [ 2920.549063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2920.549885] FAT-fs (loop6): Directory bread(block 8) failed [ 2920.552270] CPU: 0 PID: 17241 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2920.553255] FAT-fs (loop6): Directory bread(block 9) failed [ 2920.554440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2920.554448] Call Trace: [ 2920.554474] dump_stack+0x107/0x167 [ 2920.554502] should_fail.cold+0x5/0xa [ 2920.559123] _copy_from_user+0x2e/0x1b0 [ 2920.559993] __copy_msghdr_from_user+0x91/0x4b0 [ 2920.561005] ? __ia32_sys_shutdown+0x80/0x80 [ 2920.562002] ? udp_v6_push_pending_frames+0x360/0x360 [ 2920.563132] ? lock_chain_count+0x20/0x20 [ 2920.564040] ? inet6_sendmsg+0xbd/0x140 [ 2920.564913] ? inet6_compat_ioctl+0x320/0x320 [ 2920.565894] ? __sock_sendmsg+0x55/0x190 [ 2920.566791] sendmsg_copy_msghdr+0xa1/0x160 [ 2920.567729] ? do_recvmmsg+0x6d0/0x6d0 [ 2920.568581] ? __lock_acquire+0x1657/0x5b00 [ 2920.569531] ? mark_held_locks+0x9e/0xe0 [ 2920.570418] ___sys_sendmsg+0xc6/0x170 [ 2920.571266] ? sendmsg_copy_msghdr+0x160/0x160 [ 2920.572269] ? __lockdep_reset_lock+0x180/0x180 [ 2920.573306] ? lock_acquire+0x1b9/0x470 [ 2920.574176] ? find_held_lock+0x2c/0x110 [ 2920.575054] ? __might_fault+0xd3/0x180 [ 2920.575919] ? lock_downgrade+0x6d0/0x6d0 [ 2920.576813] ? asm_exc_page_fault+0x1e/0x30 [ 2920.577774] __sys_sendmmsg+0x195/0x470 [ 2920.578643] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2920.579584] ? lock_downgrade+0x6d0/0x6d0 [ 2920.580507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2920.581570] ? wait_for_completion_io+0x270/0x270 [ 2920.582616] ? rcu_read_lock_any_held+0x75/0xa0 [ 2920.583615] ? vfs_write+0x354/0xa70 [ 2920.584423] ? fput_many+0x2f/0x1a0 [ 2920.585209] ? ksys_write+0x1a9/0x260 [ 2920.586039] ? __ia32_sys_read+0xb0/0xb0 [ 2920.586922] __x64_sys_sendmmsg+0x99/0x100 [ 2920.587834] do_syscall_64+0x33/0x40 [ 2920.588639] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2920.589761] RIP: 0033:0x7f9d069ffb19 [ 2920.590563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2920.594524] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2920.596170] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2920.597712] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2920.599239] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2920.600758] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2920.602294] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2920.613431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 18:51:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="013820230000000012dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fec1e517d48c2b42c"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 18:51:29 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf33c0000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:51:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730366617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2920.685456] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. 18:51:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = eventfd2(0x0, 0x80001) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x96e, 0x8, 0x81, 0x2, 0x80000000}) inotify_init() openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x2000, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0), 0x7, 0x10000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) openat(r2, &(0x7f0000000180)='./file2\x00', 0x0, 0x80) sendfile(r4, r2, 0x0, 0x7ffffff9) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x40085503, 0x20000000) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x0, 0x6, 0x2, 0x2, 0x3, 0x3, 0xdd45, 0x214, 0x40, 0x26d, 0x9, 0x1, 0x38, 0x2, 0x3, 0x100, 0xc93d}, [{0x70000000, 0x2, 0x1, 0x3f, 0x7, 0x9, 0x3, 0x7}, {0x6474e551, 0xa6d, 0x7, 0x38, 0x6, 0x0, 0x20, 0x5}], "e369e5d652693cd6673bbdf6aa87b9134905952437faa78ddd9c67cdc36080806f430a8ea2a2bc6eac90", ['\x00']}, 0x1da) 18:51:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x47) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:51:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$CDROMEJECT(r3, 0x5309) 18:51:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x50, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}, 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="600100001000010000000000000040bcff020000000000000200000000000001fc00f7ff0000000000000000000000060000000000001a130000008d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) r3 = msgget(0x3, 0x202) msgrcv(r3, &(0x7f0000000000)={0x0, ""/30}, 0x26, 0x0, 0x3000) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:51:29 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) [ 2920.885298] FAT-fs (loop6): Directory bread(block 3) failed [ 2920.893218] FAT-fs (loop6): Directory bread(block 4) failed [ 2920.894581] FAT-fs (loop6): Directory bread(block 5) failed [ 2920.898713] FAT-fs (loop6): Directory bread(block 6) failed [ 2920.906263] FAT-fs (loop6): Directory bread(block 7) failed [ 2920.911458] FAT-fs (loop6): Directory bread(block 8) failed [ 2920.913528] FAT-fs (loop6): Directory bread(block 9) failed [ 2920.932131] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2920.938383] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2920.940876] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:51:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730466617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2920.975483] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2920.979028] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:51:29 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfd090000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:51:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x50, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}, 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="600100001000010000000000000040bcff020000000000000200000000000001fc00f7ff0000000000000000000000060000000000001a130000008d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) r3 = msgget(0x3, 0x202) msgrcv(r3, &(0x7f0000000000)={0x0, ""/30}, 0x26, 0x0, 0x3000) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x0) [ 2921.141426] FAT-fs (loop6): Directory bread(block 3) failed [ 2921.142488] FAT-fs (loop6): Directory bread(block 4) failed [ 2921.143458] FAT-fs (loop6): Directory bread(block 5) failed [ 2921.145782] FAT-fs (loop6): Directory bread(block 6) failed [ 2921.148435] FAT-fs (loop6): Directory bread(block 7) failed [ 2921.151343] FAT-fs (loop6): Directory bread(block 8) failed [ 2921.154287] FAT-fs (loop6): Directory bread(block 9) failed [ 2921.250441] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. 18:51:30 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 39) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:51:30 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) read(r1, &(0x7f0000000000)=""/3, 0x3) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:51:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) pwrite64(r3, &(0x7f0000000000)="d5b64ad21cf89591fc6c03092fc87ec3ff17248b8085b4dc7a95a8c11c2054764373459a98bbc648b4ac1333fe", 0x2d, 0x6fbb) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:51:30 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x3f, 0x5c, 0x8d, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x40200, 0x41, 0xfffffff7, 0x0, 0xffff, 0x0, 0x5, 0x0, 0x7a, 0x0, 0x94}, r1, 0x7, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000000)) close(r3) 18:51:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730566617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:51:30 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:51:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$CDROMEJECT(r3, 0x5309) [ 2921.477818] FAT-fs (loop6): Directory bread(block 3) failed [ 2921.478607] FAT-fs (loop6): Directory bread(block 4) failed [ 2921.479706] FAT-fs (loop6): Directory bread(block 5) failed [ 2921.484587] FAT-fs (loop6): Directory bread(block 6) failed [ 2921.488755] FAT-fs (loop6): Directory bread(block 7) failed [ 2921.491871] FAT-fs (loop6): Directory bread(block 8) failed [ 2921.493103] FAT-fs (loop6): Directory bread(block 9) failed [ 2921.503363] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2921.506357] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2921.732924] FAULT_INJECTION: forcing a failure. [ 2921.732924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2921.735843] CPU: 0 PID: 17338 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2921.737343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2921.739032] Call Trace: [ 2921.739583] dump_stack+0x107/0x167 [ 2921.740336] should_fail.cold+0x5/0xa [ 2921.741129] _copy_from_user+0x2e/0x1b0 [ 2921.741960] __copy_msghdr_from_user+0x91/0x4b0 [ 2921.742917] ? __ia32_sys_shutdown+0x80/0x80 [ 2921.743817] ? udp_v6_push_pending_frames+0x360/0x360 [ 2921.744874] ? lock_chain_count+0x20/0x20 [ 2921.745735] ? inet6_sendmsg+0xbd/0x140 [ 2921.746553] ? inet6_compat_ioctl+0x320/0x320 [ 2921.747471] ? __sock_sendmsg+0x55/0x190 [ 2921.748327] sendmsg_copy_msghdr+0xa1/0x160 [ 2921.749213] ? do_recvmmsg+0x6d0/0x6d0 [ 2921.750039] ? __lock_acquire+0x1657/0x5b00 [ 2921.750933] ? mark_held_locks+0x9e/0xe0 [ 2921.751778] ___sys_sendmsg+0xc6/0x170 [ 2921.752582] ? sendmsg_copy_msghdr+0x160/0x160 [ 2921.753539] ? __lockdep_reset_lock+0x180/0x180 [ 2921.754504] ? lock_acquire+0x1b9/0x470 [ 2921.755320] ? find_held_lock+0x2c/0x110 [ 2921.756160] ? __might_fault+0xd3/0x180 [ 2921.756977] ? lock_downgrade+0x6d0/0x6d0 [ 2921.757854] __sys_sendmmsg+0x195/0x470 [ 2921.758677] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2921.759589] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2921.760475] ? clockevents_program_event+0x131/0x360 [ 2921.761542] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2921.762624] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2921.763730] ? trace_hardirqs_on+0x5b/0x180 [ 2921.764628] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2921.765761] __x64_sys_sendmmsg+0x99/0x100 [ 2921.766633] do_syscall_64+0x33/0x40 [ 2921.767401] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2921.768451] RIP: 0033:0x7f9d069ffb19 [ 2921.769217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2921.773014] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2921.774579] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2921.776039] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2921.777506] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2921.778971] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2921.780431] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 18:51:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x13400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4540000000000000}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 18:51:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x4000007ffffffc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000240)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000001300)=ANY=[@ANYBLOB="013820230000000012dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b43c"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) write$bt_hci(0xffffffffffffffff, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5}, 0x68) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f00000002c0)={r3, r4/1000+10000}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r5, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r5}, 0x68) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x8, 0x70bd2a, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x1000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004d00), 0x400010e, 0xc000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4060, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}, {@version_L}]}}) 18:51:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="0018000000", @ANYRES32=r0, @ANYBLOB="ff000000000000002e2f66696c653000"]) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0x80000000, @private1, 0x21}, {0xa, 0x4e23, 0x8, @private1, 0x76}, 0x8, [0x101, 0x7, 0xb71, 0x4af, 0x6, 0x3, 0x3f, 0x401]}, 0x5c) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x4) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000180)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r4, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r4}, 0x68) mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x2}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x6226) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x8, &(0x7f0000000140)={[0x31]}, 0x8) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x2) 18:51:44 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x7ffffffff000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:51:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x414a00, 0x0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0xfc, 0x9, 0x0, 0x86, 0x8, 0xd}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="03e3f9ff2b00001e80d37400000000"]) 18:51:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730666617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:51:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000f00)=@disckey={0x2, 0x0, "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"}) 18:51:44 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 40) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) [ 2935.579569] FAT-fs (loop6): Directory bread(block 3) failed [ 2935.580526] FAT-fs (loop6): Directory bread(block 4) failed [ 2935.581356] FAT-fs (loop6): Directory bread(block 5) failed [ 2935.586162] FAT-fs (loop6): Directory bread(block 6) failed [ 2935.590803] FAT-fs (loop6): Directory bread(block 7) failed [ 2935.591947] FAT-fs (loop6): Directory bread(block 8) failed [ 2935.592887] FAT-fs (loop6): Directory bread(block 9) failed [ 2935.613398] FAULT_INJECTION: forcing a failure. [ 2935.613398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2935.615878] CPU: 1 PID: 17364 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2935.617282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2935.619024] Call Trace: [ 2935.619596] dump_stack+0x107/0x167 [ 2935.620359] should_fail.cold+0x5/0xa [ 2935.621142] _copy_from_user+0x2e/0x1b0 [ 2935.621980] __copy_msghdr_from_user+0x91/0x4b0 [ 2935.622923] ? __ia32_sys_shutdown+0x80/0x80 [ 2935.623820] ? udp_v6_push_pending_frames+0x360/0x360 [ 2935.624866] ? inet6_sendmsg+0xbd/0x140 [ 2935.625688] ? inet6_compat_ioctl+0x320/0x320 [ 2935.626597] ? __sock_sendmsg+0x55/0x190 [ 2935.627426] sendmsg_copy_msghdr+0xa1/0x160 [ 2935.628299] ? do_recvmmsg+0x6d0/0x6d0 [ 2935.629091] ? __lock_acquire+0x1657/0x5b00 [ 2935.629989] ___sys_sendmsg+0xc6/0x170 [ 2935.630779] ? sendmsg_copy_msghdr+0x160/0x160 [ 2935.631703] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2935.632800] ? __lockdep_reset_lock+0x180/0x180 [ 2935.633772] ? lock_acquire+0x197/0x470 [ 2935.634578] ? find_held_lock+0x2c/0x110 [ 2935.635411] ? __might_fault+0xd3/0x180 [ 2935.636220] ? lock_downgrade+0x6d0/0x6d0 [ 2935.637056] ? asm_exc_page_fault+0x1e/0x30 [ 2935.637956] __sys_sendmmsg+0x195/0x470 [ 2935.638768] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2935.639641] ? lock_downgrade+0x6d0/0x6d0 [ 2935.640498] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2935.641496] ? wait_for_completion_io+0x270/0x270 [ 2935.642478] ? rcu_read_lock_any_held+0x75/0xa0 [ 2935.643420] ? vfs_write+0x354/0xa70 [ 2935.644177] ? fput_many+0x2f/0x1a0 [ 2935.644914] ? ksys_write+0x1a9/0x260 [ 2935.645696] ? __ia32_sys_read+0xb0/0xb0 [ 2935.646526] __x64_sys_sendmmsg+0x99/0x100 [ 2935.647408] do_syscall_64+0x33/0x40 [ 2935.648167] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2935.649214] RIP: 0033:0x7f9d069ffb19 [ 2935.649973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2935.653696] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2935.655230] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2935.656669] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2935.658115] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2935.659550] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2935.660984] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2935.676449] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2935.678517] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:51:44 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) fcntl$setstatus(r0, 0x4, 0x40000) [ 2935.724192] selinux_netlink_send: 28 callbacks suppressed [ 2935.724211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=17365 comm=syz-executor.7 18:51:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730766617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2935.806126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=17365 comm=syz-executor.7 18:51:44 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x6, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x40010, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x6, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2935.814832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=17365 comm=syz-executor.7 [ 2935.824118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=17365 comm=syz-executor.7 18:51:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) r4 = pidfd_open(0x0, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) 18:51:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000100)) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x40, 0x9, 0x40000003, 0x1, 0x0, 0x800000101, 0xffffffff, 0xd1b1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x2, 0x6, 0xe5, 0x4, 0x2, 0x19, 0x7, 0x4, 0x3f}, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000000c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) 18:51:44 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2935.881755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=17365 comm=syz-executor.7 [ 2935.906876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17365 comm=syz-executor.7 18:51:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) [ 2935.925081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=17365 comm=syz-executor.7 [ 2935.929503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=17365 comm=syz-executor.7 [ 2935.977051] FAT-fs (loop6): Directory bread(block 3) failed [ 2935.980303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=17365 comm=syz-executor.7 [ 2935.981863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=17365 comm=syz-executor.7 [ 2935.983519] FAT-fs (loop6): Directory bread(block 4) failed [ 2935.987597] FAT-fs (loop6): Directory bread(block 5) failed [ 2935.990767] FAT-fs (loop6): Directory bread(block 6) failed [ 2935.996867] FAT-fs (loop6): Directory bread(block 7) failed [ 2935.998412] FAT-fs (loop6): Directory bread(block 8) failed [ 2936.004063] FAT-fs (loop6): Directory bread(block 9) failed 18:51:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x519000, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r5, 0x8f26d5309b039a71, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, r2, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'team0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004010}, 0x841) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) clock_gettime(0x6, &(0x7f0000000040)) 18:51:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) [ 2936.332620] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2936.339666] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2936.431693] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2936.433850] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:51:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0) sendto$unix(r1, &(0x7f0000000100)="b9faf1bf19f4ccac7234fa5feeb95ef5cf6e633d7769f71b83872d49a5d6fd25eddadd7c4403957f5879d61c3f3d6a77bebb37789b0d7afab9c93f35ba4695b273ab4d35314b3c2d1be88ca770ff9dbc4b39fc948ff114cdaf2eae38ecc77edb8ac67023f48e94c838b26050cf3ccd854c2e2e8603b3031dc70d20b8feb2fa1dbb459655687858c468921fa481fe8dc4fbc1d84be9305bd24608633fc8ddd0a2dd330c9d66c37c6f806f70699b6b59ab051f8624491eafdbe8fb997c92eb3affdbc12bd3a8cbcf4017cab55d678dd9", 0xcf, 0x8800, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x5, 0x8, 0xf8, 0x3f, 0x0, 0x20, 0x50000, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x41820, 0x7, 0x8, 0x5, 0xe38, 0x5, 0x15, 0x0, 0x7f, 0x0, 0x4ac}, r3, 0xa, 0xffffffffffffffff, 0x9) 18:51:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:51:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) pwrite64(r1, &(0x7f0000000000), 0x0, 0xe7) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:51:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x0, 0x989680}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = fcntl$dupfd(r5, 0x0, r0) ioctl$CDROMREADMODE2(r6, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, 0x0) 18:51:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730866617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:51:59 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 41) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:51:59 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:51:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000100)) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x40, 0x9, 0x40000003, 0x1, 0x0, 0x800000101, 0xffffffff, 0xd1b1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x2, 0x6, 0xe5, 0x4, 0x2, 0x19, 0x7, 0x4, 0x3f}, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000000c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) [ 2950.657734] FAULT_INJECTION: forcing a failure. [ 2950.657734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2950.660626] CPU: 1 PID: 17444 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2950.662121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2950.663873] Call Trace: [ 2950.664439] dump_stack+0x107/0x167 [ 2950.665218] should_fail.cold+0x5/0xa [ 2950.666047] _copy_from_user+0x2e/0x1b0 [ 2950.666902] __copy_msghdr_from_user+0x91/0x4b0 [ 2950.667890] ? __ia32_sys_shutdown+0x80/0x80 [ 2950.668828] ? udp_v6_push_pending_frames+0x360/0x360 [ 2950.669929] ? inet6_sendmsg+0xbd/0x140 [ 2950.670777] ? inet6_compat_ioctl+0x320/0x320 [ 2950.671729] ? __sock_sendmsg+0x55/0x190 [ 2950.672592] sendmsg_copy_msghdr+0xa1/0x160 [ 2950.673503] ? do_recvmmsg+0x6d0/0x6d0 [ 2950.674363] ? __lock_acquire+0x1657/0x5b00 [ 2950.675298] ___sys_sendmsg+0xc6/0x170 [ 2950.676126] ? sendmsg_copy_msghdr+0x160/0x160 [ 2950.677088] ? vmacache_find+0x55/0x2a0 [ 2950.677948] ? __lockdep_reset_lock+0x180/0x180 [ 2950.678942] ? lock_acquire+0x197/0x470 [ 2950.679786] ? find_held_lock+0x2c/0x110 [ 2950.680655] ? __might_fault+0xd3/0x180 [ 2950.681503] ? lock_downgrade+0x6d0/0x6d0 [ 2950.682404] ? asm_exc_page_fault+0x1e/0x30 [ 2950.683344] __sys_sendmmsg+0x195/0x470 [ 2950.684202] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2950.685118] ? lock_downgrade+0x6d0/0x6d0 [ 2950.686038] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2950.687069] ? wait_for_completion_io+0x270/0x270 [ 2950.688095] ? rcu_read_lock_any_held+0x75/0xa0 [ 2950.689094] ? vfs_write+0x354/0xa70 [ 2950.689900] ? fput_many+0x2f/0x1a0 [ 2950.690673] ? ksys_write+0x1a9/0x260 [ 2950.691472] ? __ia32_sys_read+0xb0/0xb0 [ 2950.692342] __x64_sys_sendmmsg+0x99/0x100 [ 2950.693241] do_syscall_64+0x33/0x40 [ 2950.694059] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2950.695143] RIP: 0033:0x7f9d069ffb19 [ 2950.695933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2950.699807] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2950.701414] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2950.702942] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2950.704444] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2950.705957] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2950.707457] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2950.764422] FAT-fs (loop6): Directory bread(block 3) failed [ 2950.771340] FAT-fs (loop6): Directory bread(block 4) failed [ 2950.785838] FAT-fs (loop6): Directory bread(block 5) failed [ 2950.794471] FAT-fs (loop6): Directory bread(block 6) failed [ 2950.804492] FAT-fs (loop6): Directory bread(block 7) failed [ 2950.828230] FAT-fs (loop6): Directory bread(block 8) failed [ 2950.829527] FAT-fs (loop6): Directory bread(block 9) failed [ 2951.015806] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2951.018126] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:52:17 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 42) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:52:17 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="0138204000000000000000b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc3517d48c2b42c"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r1}, 0x68) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f00000001c0)=""/226, 0xe2, 0xffff, 0x6}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r5, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r5}, 0x68) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"11e9402da023f0d0bade5027c3398e03", 0x0, 0x0, {0x100, 0x5}, {0x81, 0x5}, 0x8, [0x40f5, 0x4, 0x8, 0x9, 0xffffffff, 0x100000001, 0x0, 0x7, 0x0, 0x800, 0x71d, 0x5, 0x1, 0x2, 0x7, 0xfffffffffffffffe]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000f00)={"0795d489e1537ae566ff87ac1a5eb341", 0x0, 0x0, {0x5, 0x8}, {0x8, 0x4}, 0x8, [0x7, 0x3ff, 0x2, 0x0, 0x4f, 0x9, 0x0, 0x100000000, 0x2, 0x4, 0x492e, 0x3, 0x7, 0x1f, 0x9, 0x7fff]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001000)={"420c367b2c7149cb6fc2b0359ddaabae", r6, r7, {0x7fffffff, 0x800}, {0x0, 0xfffffc00}, 0x9, [0x0, 0x101, 0x8, 0x7, 0x9, 0x3, 0x4, 0x88, 0xfff, 0x6, 0x2, 0x9e, 0x8000, 0xa317, 0x2]}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) 18:52:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730966617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:52:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:52:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) clock_gettime(0x0, &(0x7f0000004cc0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000f00)=""/160, 0xa0}, {&(0x7f00000003c0)=""/42, 0x2a}], 0x4, &(0x7f0000000fc0)=""/72, 0x48}, 0xff}, {{&(0x7f0000001040)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001240)=[{&(0x7f00000010c0)}, {&(0x7f0000001100)=""/39, 0x27}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001140)=""/205, 0xcd}], 0x4}, 0x6}, {{&(0x7f0000001280)=@nfc_llcp, 0x80, &(0x7f0000001500)=[{&(0x7f0000001300)=""/64, 0x40}, {&(0x7f0000001340)=""/5, 0x5}, {&(0x7f0000001380)=""/37, 0x25}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001480)=""/81, 0x51}], 0x5}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001580)=""/240, 0xf0}], 0x1, &(0x7f00000016c0)=""/224, 0xe0}, 0x9}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000017c0)=""/188, 0xbc}, {&(0x7f0000001880)=""/133, 0x85}, {&(0x7f0000001940)=""/235, 0xeb}, {&(0x7f0000001a40)=""/53, 0x35}, {&(0x7f0000001a80)=""/168, 0xa8}, {&(0x7f0000001b40)=""/125, 0x7d}, {&(0x7f0000001bc0)=""/149, 0x95}], 0x7}, 0x30}, {{&(0x7f0000001d00)=@isdn, 0x80, &(0x7f0000004240)=[{&(0x7f0000002e00)=""/102, 0x66}, {&(0x7f0000002e80)=""/85, 0x55}, {&(0x7f0000002f00)=""/120, 0x78}, {&(0x7f0000002f80)=""/251, 0xfb}, {&(0x7f0000003080)=""/209, 0xd1}, {&(0x7f0000003180)=""/69, 0x45}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)}], 0x8, &(0x7f00000042c0)=""/77, 0x4d}, 0x7fffffff}, {{&(0x7f0000004340)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004700)=[{&(0x7f00000043c0)=""/255, 0xff}, {&(0x7f00000044c0)=""/143, 0x8f}, {&(0x7f0000004580)=""/163, 0xa3}, {&(0x7f0000004640)=""/191, 0xbf}], 0x4, &(0x7f0000004740)=""/76, 0x4c}, 0x80000001}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000047c0)=""/44, 0x2c}, {&(0x7f0000004800)=""/59, 0x3b}, {&(0x7f0000004840)=""/77, 0x4d}, {&(0x7f00000048c0)=""/164, 0xa4}], 0x4, &(0x7f00000049c0)=""/237, 0xed}, 0x3}], 0x8, 0x2040, &(0x7f0000004d00)={r2, r3+60000000}) openat2$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000004200)={0x40000, 0x40}, 0x18) r5 = fcntl$dupfd(r4, 0x0, r1) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000004d80)=ANY=[@ANYBLOB="0300000004000000ff000000dbf57d36a6637300000000000079ad468f161f6740d0462698a300070d748d0e82366815a8609741a3058052e62dde000200002ac27f0f6f6fe300000000000000000000e906218c612a8b40c801ac09ee45ac9f48e0f8ccfe799a538f024477b8098cc8c674a467f118c7c81b6836694678753a5c7931bfdeb210d7c532bd76528713b85f81102e3d58d07efbc150634069e27e730411187218eee3e093fc89974a0cc717153d72dc229848b82361a2be4426909bb197a749dbfe7f42c0746698003b9a6e2015d465"]) r6 = signalfd(r0, &(0x7f0000000040)={[0x7]}, 0x8) r7 = gettid() r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f0000004d40)) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8001, 0x3ff, 0x1, 0x2, 0x6, r7}) 18:52:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:52:17 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) [ 2968.422039] FAT-fs (loop6): Directory bread(block 3) failed [ 2968.424006] FAT-fs (loop6): Directory bread(block 4) failed [ 2968.429541] FAT-fs (loop6): Directory bread(block 5) failed [ 2968.432476] FAT-fs (loop6): Directory bread(block 6) failed [ 2968.435831] FAT-fs (loop6): Directory bread(block 7) failed [ 2968.441669] FAT-fs (loop6): Directory bread(block 8) failed [ 2968.446088] FAT-fs (loop6): Directory bread(block 9) failed 18:52:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) setresgid(0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003d80)={0x0, 0x0}, &(0x7f0000003dc0)=0xc) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004240), 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000004d00), 0x400010e, 0xc000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r8, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r8}, 0x68) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000004280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000004d00), 0x400010e, 0xc000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000980)="7747e0a5968f5beaab959cef0586f9ac673651c2e7631a6444c46bf503f278f87b51be197330497eb450ffbf0bc1ddbe6a65b2290f91973fd44ad7a1b7f87022f48a56d00a453488a62ecae0d74939fe8f5bb90cddd645037cc2cd3e6ae43b0c230a65f361f5ddc46f8045433b8a86881baee756d530987aea70d5c36aec2b005952feaab89c17a9e421e07411a307422e77ffee2e2a2da9d7479cc8a13beeb93d8aec21d900f5cc1096364567ce88c0318ece00e9660e85", 0xb8}, {&(0x7f0000000a40)="d2a668e2e7d0a8b2482e5d8d98eb629f0ec76d2bf856491d3676dc850d567ccfebc18c4b01f3f75d39971811b119552e0424dac5a9ca26fd86ac401eafaada0a54bfaa8e607607f21677761dfaf52b08351936b0fab318ab5dbc44adca71b157c060953ec9b99852294502ada7827982683929a7384b7b6a5c33801ae21fcc6675700cf3153b15551f3516c37313850c2c94338c55f0e91a108f00873a6331ab9dc7715025a19377f838769bdb0786d6d854ea595a443c3745161df13872a8c2c95c63bd2c2bf1ac846178", 0xcb}, {&(0x7f0000000b40)="c4fca10720441b3ff8f5322699141f1f6eb89f8f629c1bbc7fd326a783fa19ab77d16c0d97b9061519ecc0806267ba832eb6665685b9a86655194075cf0a1353721592c89f64c8c18f851c693e7a5477316833804e07f126d84c3425cb24b8750218b7c43b6495cf372b0879e85055a0f1189da8c2d0f5059a1763a4586056844eb7c73e6937ba1951a3e38223820f8b47627032b708f379839250fe19c1be436bf5fe39a19478277aa637eea06c7bfb85911518749f54ea9381c112b7026c4fd42da2c205e3a789d0a7403c9ace3264b0ebb3", 0xd3}, {&(0x7f0000000c40)="049dd08fb0a0ebea32cf0020b124c01db85cf2555f5c53dae0a0737cd9cacde2d4ac0256ab75609ba5897167cd8b39212792dd1abc15f9b84445ab66b399774338a596c8ff785b21bb4de94e8fe8c9612b76768cb1fdec8676db79b63b5149a3dc107b0d4eb65e26d73bc871f1f1dc0dd5564dabef700d49f4832936807ff39fbe1bc0393eb981e85f7658a579d68890356925c77b5e5375fcff12cbbaf2b3f5a21fbc5805096eb461ebd6377f6c31830284d39a00cab2dd522e4f205e3020500862cb9ad14110bc6e712a562ade5eb05e3c97b9092d8326183b1357b78b84a3886f84b33e4f005186d029", 0xeb}, {&(0x7f0000000d40)="dd1d6a7be81a2e013067ad465a29ed4c51655aaf7be61fb75a94c45e6ce604e9f0c49e1d482d4cf54db55be327c08147628ad651ae1c9b6109fb5d5922dcb60371052e50165f892c8f42bb72f0e6d8da7e4f5c3ce8fc50d3d96ccbca52d8fae626cd3321bfa658ffff9585edf987160039ee02beee6fc52898c88efdb1510b25aaa3e71948c0236ca797987ffd92cd55ae0938c603d20c67e0081db87fca3da0c30fdfb610f260d7cea007ce2ef835dc73a34db53d4b6ffe586c2074d17fd851acb90bbb0c7cd9677029378fa13d8d0525daea579d130fcfd4c531c543e1e9fe94e91297e8e80310bb64349fd95ed6", 0xef}], 0x5, &(0x7f0000001100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}], 0x48, 0x80}}, {{&(0x7f0000001180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001200)="6f6a9b3f779b2d3b179cd45639500aaa5724bccc9707c70ddc21bcc601cc5dd4f5840539df5d27a83685cc32202dc96d6aff3502875988af5254d45a9a0ba4607dc83d89f61b0c6ca662a6d36de6570c3c370ba25452827b2ceb690c5a3493443d5f07b5fa4164705c75f6b998b972773a479618236a55f3859c4a41f2ce97ec8da33f14d33a9b24ae804edb8b5155cd5d732a33cff237a5b8f6071fa9da57c0df81a76641d1960561a24935dae87fab2a5f422c702fa19024bcbc3160307414e94f93a92e794ceb7f63fab420ed4befbb7605123f61", 0xd6}, {&(0x7f0000001300)="6d521665dfb4dae2de7b92c43337da1da0", 0x11}], 0x2, &(0x7f00000016c0)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0xa8, 0x800}}, {{&(0x7f0000001780)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001800)="2a6140a0a6e5f8644f4b0d4557c0a60c0f4111d4761a02a4e6eef80c075ad0528cbc63f3a4c691d125c54c4ad0b2b6a6618c96d061641094c7c91d738df3ca15e734c9716ddc28a86ca1602f7efd7f1a2ef772720c67c9971759851398bf40a9a8876d3a2d5ca9f9d83fcc5a25656841a5fa1021421ed1eded7a614c4aca33f46b676416b59050b8e9a20af03f603a4fb3", 0x91}, {&(0x7f00000018c0)="6f42a1e99d2acf81ae34c716558dd0c6dc255064be781de32d", 0x19}, {&(0x7f0000001900)="bfa34e5fb8c14754e0bf537dd4b9d3a50a606791ab6aa53708093decdff1ef7fba3ca9317788f4a6db1509cfa2860d06912558849f0a532ee41def58dd74bfef9934aafbd6ec2783ba38f63e389820a778038c76ca788ccea447e95d916e72133d3e5edb9776507b0d74f3e94672f9082ad26adc6ff94ffca00f40255acd38c6bc7398e2d3bc32873cecda637787b75db10349b3c0696173063c2160bd9a3943084888d133b187b3bc83f0796e6e51a88cab0ed02f9a9b10756ec17b41ca8703a01c7ab29cd8d648f1ae7116328318c80bf9332b252c6947ee6d5ed126398c85610698aa78b722e5444c44b4634a22c01e", 0xf1}, {&(0x7f0000001a00)="dbde78090e96db663402f93c9ad1d48d2b038f946473c3d6513d9762da5153a0ad822e0deee31ad692aceed77a9f44728b95f12fd6fb35d19cdf280ea4e665ebf85e52c79d6368d7c2bb6d4fcd1e2ce245510e7b6d23e2303228b9e9358d96d6f1c7fefcb9362d1cf3f739fac24eeb7d1db33037dee9f9fe759a660bcd17359a57c5e5c2db61", 0x86}, {&(0x7f0000001ac0)="078a3cfcd3cf4c6c6f68c77cdb3d97406f023f2657e78bdec2136fb1b34110da6f7e20cd065b99b218253b9da0e3b939aa2b63a449e92fb72b15d7fecac94839157b60ea9d7f84eb323f81fe6e7ac9d6111d13c003101f792eaafb0e3df842c9e8297955a2ca948f36c131100ce0ecc5f14e74ba2a770587a15f8e86a47cc2b1e26451b8906deaeea4758f", 0x8b}, {&(0x7f0000001b80)="732675aba2c4070c02ead4fc67d431cde93bb97f3d5dea7395be7f701b88502f65a0c6a0593fdfb6f902dc4edad1e0ec7431d72fdb3a62ffd52e9a48eff16de4170b89d1c2dc9ee4080796b6cdf48b060f363e1a798d83ec4f97391bdebc0cb302d6c79d435a29e096e8c2eb38411cd5d9f0641920487748ad224c6cc1d8e430b8bd990d1b6254586e56bf9d4ce56c331a0c005e9b74d052bd770645cda7a8f27aa8fb17f7235a7d26", 0xa9}, {&(0x7f0000001c40)="ca8386fe7428abbe68a2032581a608a7234bf2b40fba331da6325479ef7e3a2fdf913f94d5960ed7d98758e5e3dbabb5e6e7e8a16fc98046da7c9e558afdf0a9c76d326c9e86fe3457bc43fcabb60f541c12771eeb31028af1fcc6619d8489b4ebfd240eea3ead794cbe3eb9a9dac01ded154647ff6c54828a36901699c227c65f89e722559e2c4c0260d78a2fb025c1922716954fbf54974dd718e9dbb3a6a35685cdd3191a05c66c94b12c0f0b972a1a40b761574dcda1f5cbe02499d1c6470ac2d6e246afc49e18e39e9c6c2cd9f2c13477ee72b81973be07ae62400c75140a2541bbf274", 0xe6}], 0x7, &(0x7f00000039c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r0, 0xffffffffffffffff]}}], 0xe0, 0x80}}, {{&(0x7f0000003ac0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003b40)="e5c7a82474a5e5bc970b26bd6319102419432abd7ebc81b36399d781ac0078348cc02995b825b5afa58142511208f612809f966f090daae7b042a2aef0fcb564abdc3ec668d0a7a8a02d8fde43a957d9e3c071753b835663e89ac761ad2dffff9778c0083c6ce11a0c7f539459daa6830c0ba41983f650f4b8a3a87bb22efddda42f3208478c77357a604ab06b81dbc6e96042f3a7a984cad40eee28f8203b865a9a68f04b9d16f1946e092bbe5dd343f1d4d653b7c154c6fcf0260b03064b99bf", 0xc1}, {&(0x7f0000003c40)="6341ab0d4d2565e1a3e44a8567a26a5def142ba1ad63e963641032b68912da3f8a9b4eac41f2746bbcb95abd77dbf802a09206d5883a8208ccdf28a23fe35035eaca507031db46c15f016d8abdff0d3c365062f4674b4168e27e77b2efa1977d77b924269696e2a86a14a669e49ba88de49c5228", 0x74}], 0x2, &(0x7f0000003e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r2, r5, r4}}}], 0x60, 0x8010}}, {{&(0x7f0000003e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000003f00)="b6dee4a702bf2dc1d5b2c216814a0a20e6e8ce4c5ba8c06f660c40350e2322f006ed505f88983c05ec6d4fb451e43e9c6a458635861a6600540ad4dad2d5ccc85a4351d36cdd25c7d5c5896cefc8f52d2c930c6b398fe3f411aaa4a492e1569922b166", 0x63}, {&(0x7f0000003f80)="1637a37913f00b475d8e67f7092ebe61b42c9ec3c0554383d208f97f6e68a589ad3f7c81e8de5f38f42f6644365ba50bca951f5290559c1942973403eae0da92b96e2dd634842e9ea745364e799445c76d9ee1eeee8d6997292c15890ed0a61e0c", 0x61}, {&(0x7f0000004000)="5b1d9743d7c80716b65b0ca6a33c806accd70d3cd771534f748c61403b724ae5a88957e95d0a45a85f609416a9ab7f0ec4ad4c18bb1bf0a6f9648308713ec3d3dd9e8d647cf83eddac4a76", 0x4b}, {&(0x7f0000004080)="ebd2e2b1f0f7e1ac4299f23300997fc03b836730d89f51ca9f46326e3e05efec220ee4c5f69bcc18103f85c71aff57da097602189ebdc17eba57e9743aa14543bb58d8b28f1c679e2d9c7235c980f363dc07e625121360a5ed71682f95c9cf6f4345592368b87a2ff6027080592969e0ae766739d66d553c90d88050e5093194470934c0f778690e181b2d746b5a35963004b530935e33530bb982c23ff370474bbb50fd23a401289bb4b8ea2b8cada4cac8a3b13f772a1de3d4385215f02c7534718f5fcc6358f78cf572a47276cadf403bdac5641c44a0b3eacfffef14b242b981aa6d3722065f", 0xe8}, {&(0x7f0000004180)}], 0x5, &(0x7f00000042c0)=[@rights={{0x34, 0x1, 0x1, [r6, r7, r8, r0, r0, r0, r9, r10, r0]}}], 0x38, 0x4040881}}], 0x5, 0x4004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfff}, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0x2, 0xffffffffffffffff, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r11) 18:52:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730a66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2968.505009] FAULT_INJECTION: forcing a failure. [ 2968.505009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2968.507372] CPU: 1 PID: 17491 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2968.508681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2968.510189] Call Trace: [ 2968.510666] dump_stack+0x107/0x167 [ 2968.511349] should_fail.cold+0x5/0xa [ 2968.512048] _copy_from_user+0x2e/0x1b0 [ 2968.512781] __copy_msghdr_from_user+0x91/0x4b0 [ 2968.513604] ? __ia32_sys_shutdown+0x80/0x80 [ 2968.514425] ? perf_trace_lock+0xac/0x490 [ 2968.515180] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2968.516128] sendmsg_copy_msghdr+0xa1/0x160 [ 2968.516909] ? do_recvmmsg+0x6d0/0x6d0 [ 2968.517621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2968.518564] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2968.519534] ? trace_hardirqs_on+0x5b/0x180 [ 2968.520321] ___sys_sendmsg+0xc6/0x170 [ 2968.521028] ? sendmsg_copy_msghdr+0x160/0x160 [ 2968.521854] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2968.522670] ? _raw_spin_unlock_irq+0x27/0x30 [ 2968.523480] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2968.524282] ? finish_task_switch+0x126/0x5d0 [ 2968.525079] ? finish_task_switch+0xef/0x5d0 [ 2968.525860] ? __switch_to+0x572/0xf70 [ 2968.526588] ? __switch_to_asm+0x3a/0x60 [ 2968.527316] ? __switch_to_asm+0x34/0x60 [ 2968.528036] ? __schedule+0x82c/0x1ea0 [ 2968.528731] ? io_schedule_timeout+0x140/0x140 [ 2968.529549] __sys_sendmmsg+0x195/0x470 [ 2968.530272] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2968.531050] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2968.531813] ? clockevents_program_event+0x131/0x360 [ 2968.532717] ? tick_program_event+0xa8/0x140 [ 2968.533498] ? hrtimer_interrupt+0x771/0x9b0 [ 2968.534299] __x64_sys_sendmmsg+0x99/0x100 [ 2968.535060] do_syscall_64+0x33/0x40 [ 2968.535732] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2968.536635] RIP: 0033:0x7f9d069ffb19 [ 2968.537295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2968.540552] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2968.541906] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2968.543157] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2968.544425] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2968.545682] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2968.546965] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2968.554892] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2968.561829] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:52:17 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:52:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:52:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x560, 0x2000000000004}, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7f, 0x34, 0x1000, 0x1f}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000007e0000000000000006c6c62559f95a2cbfc2ae9865a10092aab562f80afdde1f7f0622ff8b5320805198dff09559e03ad5c12cff166a640677872867b86530229e41872e050de48c9c17adf0628d07bdd7da648b1748b38af561358c72a070c6018f8d", @ANYRES32=0x0, @ANYBLOB="d77662fea97a101f78936bda3824eda0b9e07a10aa7916f6f1c1c20d6a55bb2c19933d79b1c2090c30a041f77749faa62ed7b64113961ef439008bd0ce9914e6cbd0998e548a7f1cc4034c7630274306d584c0fe2b58d3d514594377dd2ffc8b0ce5d88ccbb6bb9287a5a83891b88ee5aebc3a1a456475fc0b26e418a24307b5d4dc3f452cba1e3f871d3b"], 0x1c}}, 0x0) 18:52:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000000)=0xb4fd) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{r4}, 0x80000000, 0xfffffffffffffffb, 0x297}) r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="039a000000000000f0f87d936018844985e36dc703d072f7589566312380503583c83ba404567a941a596253b47ed161b0f9499c85ec6a3953402964eb417e775bdb3556c6d94cf5ebb3b0739bfd56497e239d23d9e1e25a61201f7b958f2cf9342045020b3ef9dfbcefdc5b25097f40a2"]) 18:52:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x101000) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) [ 2968.777612] FAT-fs (loop6): Directory bread(block 3) failed [ 2968.793473] FAT-fs (loop6): Directory bread(block 4) failed [ 2968.797430] FAT-fs (loop6): Directory bread(block 5) failed [ 2968.803603] FAT-fs (loop6): Directory bread(block 6) failed [ 2968.812312] FAT-fs (loop6): Directory bread(block 7) failed [ 2968.826389] FAT-fs (loop6): Directory bread(block 8) failed 18:52:17 executing program 3: sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="df463200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xec80fd3be383861e) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x101b00, 0x100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) [ 2968.844037] FAT-fs (loop6): Directory bread(block 9) failed [ 2968.883286] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2968.902630] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2968.907123] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2968.943887] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2968.944083] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2968.984454] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2969.036892] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2969.040085] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:52:31 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 43) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) 18:52:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x560, 0x2000000000004}, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7f, 0x34, 0x1000, 0x1f}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000007e0000000000000006c6c62559f95a2cbfc2ae9865a10092aab562f80afdde1f7f0622ff8b5320805198dff09559e03ad5c12cff166a640677872867b86530229e41872e050de48c9c17adf0628d07bdd7da648b1748b38af561358c72a070c6018f8d", @ANYRES32=0x0, @ANYBLOB="d77662fea97a101f78936bda3824eda0b9e07a10aa7916f6f1c1c20d6a55bb2c19933d79b1c2090c30a041f77749faa62ed7b64113961ef439008bd0ce9914e6cbd0998e548a7f1cc4034c7630274306d584c0fe2b58d3d514594377dd2ffc8b0ce5d88ccbb6bb9287a5a83891b88ee5aebc3a1a456475fc0b26e418a24307b5d4dc3f452cba1e3f871d3b"], 0x1c}}, 0x0) 18:52:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730b66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:52:31 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:52:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0xfffffffffffffffc, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000f00)={0x0, 0x9, 0x2, 0x0, 0x8, 0x5}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r2) 18:52:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2100, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x100040, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ieee80211', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x401, 0x8}}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4842, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x2, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 18:52:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x9100}, @void, @arp=@generic={0x303, 0x88e5, 0x6, 0x4, 0x9, @remote, 'EXR5', @empty, "395f6af4faa58d3cc34074d787910847"}}, 0x2c) 18:52:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x102) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) [ 2982.754286] FAULT_INJECTION: forcing a failure. [ 2982.754286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2982.756242] CPU: 0 PID: 17561 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2982.757316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2982.758435] Call Trace: [ 2982.758788] dump_stack+0x107/0x167 [ 2982.759276] should_fail.cold+0x5/0xa [ 2982.759792] _copy_from_user+0x2e/0x1b0 [ 2982.760316] __copy_msghdr_from_user+0x91/0x4b0 [ 2982.760939] ? __ia32_sys_shutdown+0x80/0x80 [ 2982.761518] ? udp_v6_push_pending_frames+0x360/0x360 [ 2982.762198] ? inet6_sendmsg+0xbd/0x140 [ 2982.762723] ? inet6_compat_ioctl+0x320/0x320 [ 2982.763312] ? __sock_sendmsg+0x55/0x190 [ 2982.763844] sendmsg_copy_msghdr+0xa1/0x160 [ 2982.764417] ? do_recvmmsg+0x6d0/0x6d0 [ 2982.764940] ? __lock_acquire+0x1657/0x5b00 [ 2982.765528] ___sys_sendmsg+0xc6/0x170 [ 2982.766064] ? sendmsg_copy_msghdr+0x160/0x160 [ 2982.766679] ? __lockdep_reset_lock+0x180/0x180 [ 2982.767305] ? lock_acquire+0x197/0x470 [ 2982.767829] ? find_held_lock+0x2c/0x110 [ 2982.768379] ? __might_fault+0xd3/0x180 [ 2982.768911] ? lock_downgrade+0x6d0/0x6d0 [ 2982.769486] __sys_sendmmsg+0x195/0x470 [ 2982.770001] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2982.770584] ? lock_downgrade+0x6d0/0x6d0 [ 2982.771158] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2982.771803] ? wait_for_completion_io+0x270/0x270 [ 2982.772454] ? rcu_read_lock_any_held+0x75/0xa0 [ 2982.773083] ? vfs_write+0x354/0xa70 [ 2982.773593] ? fput_many+0x2f/0x1a0 [ 2982.774085] ? ksys_write+0x1a9/0x260 [ 2982.774593] ? __ia32_sys_read+0xb0/0xb0 [ 2982.775146] __x64_sys_sendmmsg+0x99/0x100 [ 2982.775708] do_syscall_64+0x33/0x40 [ 2982.776202] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2982.776889] RIP: 0033:0x7f9d069ffb19 [ 2982.777399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2982.779889] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2982.780905] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2982.781852] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2982.782823] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2982.783767] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2982.784709] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2982.829277] FAT-fs (loop6): Directory bread(block 3) failed [ 2982.838117] FAT-fs (loop6): Directory bread(block 4) failed [ 2982.841046] FAT-fs (loop6): Directory bread(block 5) failed [ 2982.844860] FAT-fs (loop6): Directory bread(block 6) failed [ 2982.848245] FAT-fs (loop6): Directory bread(block 7) failed [ 2982.850641] FAT-fs (loop6): Directory bread(block 8) failed [ 2982.857547] FAT-fs (loop6): Directory bread(block 9) failed [ 2982.879538] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2982.891339] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2982.967454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 18:52:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="013820230000000012dbe6b4d124ef9dcc2517873fed301a5c8fecc8517d48c2b42c0000000000"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xff, 0x20, 0x81, 0x32, 0x0, 0x8000, 0x2002, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x200}, 0x10, 0x3, 0x80000001, 0x7, 0x3, 0xfffffffd, 0x8, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xe, r0, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) dup2(r0, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="013820230000000012dbe6b4d124ef9d0ed8947ff4cc2517873fed301a34c066537d5de05c8fecc8517d48c2b42c"], 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xff, 0xc9, 0x0, 0x1a, 0x0, 0x4, 0xa0, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x20, 0xfffe00000, 0x8001, 0x3, 0x6, 0x1, 0x3ff, 0x0, 0x80000000, 0x0, 0x4}, 0x0, 0x3, r2, 0xa) [ 2982.995557] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 18:52:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730c66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:52:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730b66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2983.005388] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 18:52:31 executing program 1: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:52:31 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7f, 0x0, 0x3, 0x8, 0x2, 0x3, 0x100, 0x20e, 0x40, 0x164, 0x5, 0x4, 0x38, 0x2, 0x723, 0xa219, 0x1}, [{0x7, 0x1, 0xe1, 0x6, 0x3, 0x0, 0x4000000000, 0x1}, {0x1, 0x2, 0x4000000000, 0x9, 0x4, 0x3ff, 0x100000001, 0x76d7d5ae}], "d146f94bb6b3694b5b261766d7e6a59ebec94990a3a9c04e47c98be34e22c9dd934d2beeb3b44854f5747de77f0f572e246b2c7b92566c65811856f8674bbef947f4010303eac437afab851f1865c279504111f517e767aeccf2d9e55906ab03779d9c18471715c307aab21107dd7d875d64818168d1d67fbabad52afcb24d9d7118d517e117b4a0186e89c114877d848255f7c591a2099c4d6d6a53fcbf497816a5ac6fb4dc43497d3fd72999c3512e045101ca92a68c6127ff9309965178382f2fb9ba552c382ee58fb5b34b5ff2232e24d31e2b145638ff45abb885bed699f88adbd826cb59a64d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa99) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:52:31 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:52:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) ioctl$CDROM_CLEAR_OPTIONS(r3, 0x5321, 0x1) [ 2983.237234] FAT-fs (loop7): Directory bread(block 3) failed [ 2983.238507] FAT-fs (loop7): Directory bread(block 4) failed 18:52:31 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x10, 0x1, 0x0, 0x3, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x81, 0xa4, 0x54, 0x0, 0xc8, 0x12100, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x3, 0x4}, 0x11000, 0x0, 0x2, 0x9, 0x80, 0x9, 0x395, 0x0, 0x0, 0x0, 0x4be}, 0x0, 0x3, r0, 0x1) dup(r0) [ 2983.267378] FAT-fs (loop7): Directory bread(block 5) failed [ 2983.275177] FAT-fs (loop6): Directory bread(block 3) failed [ 2983.276434] FAT-fs (loop6): Directory bread(block 4) failed [ 2983.277711] FAT-fs (loop7): Directory bread(block 6) failed [ 2983.285784] FAT-fs (loop7): Directory bread(block 7) failed [ 2983.287293] FAT-fs (loop7): Directory bread(block 8) failed [ 2983.297146] FAT-fs (loop6): Directory bread(block 5) failed [ 2983.300029] FAT-fs (loop7): Directory bread(block 9) failed [ 2983.302793] FAT-fs (loop6): Directory bread(block 6) failed [ 2983.310117] FAT-fs (loop6): Directory bread(block 7) failed [ 2983.319980] FAT-fs (loop6): Directory bread(block 8) failed [ 2983.348772] FAT-fs (loop6): Directory bread(block 9) failed [ 2983.366402] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2983.371782] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2983.443180] cgroup: fork rejected by pids controller in /syz1 18:52:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730d66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:52:47 executing program 1: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:52:47 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:52:47 executing program 7: bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') read$rfkill(r2, &(0x7f0000000100), 0x8) write$bt_hci(r2, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) dup3(r2, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 18:52:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 18:52:47 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80, 0x4, &(0x7f0000000380)=[{&(0x7f0000000180)="159c9ad968c66f395537575073f0ad39d604eb6c953ebdbc5513b1287d32eaf9f305d8cc9b6031108c74527b0021baf106cc292197542e3dbea5a304de786124df75f62beecfc71e23f8a8ddad6c031a825e81dc1d6aac667aee68c29ccc7479bf", 0x61, 0x1}, {&(0x7f0000000200)="f95eabe3b9e89e0b", 0x8, 0x4}, {&(0x7f0000000240)="cb8eca3ea83ae679ef7e69335787e82fe82de48d1887772e7127674ef72665f3cd5652ab1088c378abc6b68a47238fe58703af014360694a347c4cf960e3a7a83e9912259a511b746b56fab6d7601a833c9eecc71b43ac8394ad9cfbbb5a39ecd9bd9de471fae7fa740d11bff18af45e24ae890e03bf633ba0a5a7eeaf600174e6b3ecfb2c94281261132d1a6eb250a59b6b9c96", 0x94, 0x80}, {&(0x7f0000000300)="4cb6fcc7885080724257ddc3f7ff0cf84ca527d1a3a2563af415967ea472ef20b46e54e0b9ad042570fb97e356e53a3316f485d76960adc8dac4debb7f3fe7899fbaf3951e04a93bdd71206549b50de729fb1adc9f7efaad4959223b87e33a1cc2cdfdc4d9bba7f9bb8fc358b872d2", 0x6f, 0x4}], 0x1000, &(0x7f00000004c0)={[{@huge_never}, {@gid={'gid', 0x3d, 0xee00}}, {@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x34, 0x38, 0x37]}}}}, {@mode={'mode', 0x3d, 0x1}}], [{@subj_role={'subj_role', 0x3d, '\\!$/^&#$('}}]}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000480)=0x2) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/nf_conntrack_ftp', 0x8400, 0x50) openat(r1, &(0x7f0000000440)='./file0\x00', 0x105080, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r3, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r3}, 0x68) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) 18:52:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) signalfd(r3, &(0x7f0000000000)={[0x5]}, 0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:52:47 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000340)=""/200, 0xc8}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x410000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x400010e, 0xc000) (fail_nth: 44) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x6) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ac18d514b01e49a62fd55bd41112fe7bb2ecdb56"}, 0x15, 0x2) [ 2998.878795] FAULT_INJECTION: forcing a failure. [ 2998.878795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2998.881387] CPU: 0 PID: 19215 Comm: syz-executor.4 Not tainted 5.10.200 #1 [ 2998.882827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2998.884540] Call Trace: [ 2998.885093] dump_stack+0x107/0x167 [ 2998.885850] should_fail.cold+0x5/0xa [ 2998.886668] _copy_from_user+0x2e/0x1b0 [ 2998.887502] __copy_msghdr_from_user+0x91/0x4b0 [ 2998.888465] ? __ia32_sys_shutdown+0x80/0x80 [ 2998.889390] ? udp_v6_push_pending_frames+0x360/0x360 [ 2998.890489] ? inet6_sendmsg+0xbd/0x140 [ 2998.891322] ? inet6_compat_ioctl+0x320/0x320 [ 2998.892256] ? __sock_sendmsg+0x55/0x190 [ 2998.893115] sendmsg_copy_msghdr+0xa1/0x160 [ 2998.894005] ? do_recvmmsg+0x6d0/0x6d0 [ 2998.894842] ? __lock_acquire+0x1657/0x5b00 [ 2998.895756] ___sys_sendmsg+0xc6/0x170 [ 2998.896588] ? sendmsg_copy_msghdr+0x160/0x160 [ 2998.897530] ? vmacache_find+0x55/0x2a0 [ 2998.898364] ? __lockdep_reset_lock+0x180/0x180 [ 2998.899327] ? lock_acquire+0x197/0x470 [ 2998.900142] ? find_held_lock+0x2c/0x110 [ 2998.900985] ? __might_fault+0xd3/0x180 [ 2998.901803] ? lock_downgrade+0x6d0/0x6d0 [ 2998.902672] ? asm_exc_page_fault+0x1e/0x30 [ 2998.903578] __sys_sendmmsg+0x195/0x470 [ 2998.904401] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2998.905299] ? lock_downgrade+0x6d0/0x6d0 [ 2998.906176] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2998.907216] ? wait_for_completion_io+0x270/0x270 [ 2998.908223] ? rcu_read_lock_any_held+0x75/0xa0 [ 2998.909190] ? vfs_write+0x354/0xa70 [ 2998.909976] ? fput_many+0x2f/0x1a0 [ 2998.910746] ? ksys_write+0x1a9/0x260 [ 2998.911544] ? __ia32_sys_read+0xb0/0xb0 [ 2998.912406] __x64_sys_sendmmsg+0x99/0x100 [ 2998.913303] do_syscall_64+0x33/0x40 [ 2998.914079] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2998.915156] RIP: 0033:0x7f9d069ffb19 [ 2998.915923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2998.919700] RSP: 002b:00007f9d03f75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2998.921265] RAX: ffffffffffffffda RBX: 00007f9d06b12f60 RCX: 00007f9d069ffb19 [ 2998.922749] RDX: 000000000400010e RSI: 0000000020004d00 RDI: 0000000000000005 [ 2998.923872] [ 2998.924247] RBP: 00007f9d03f751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.924596] ====================================================== [ 2998.926072] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 2998.927316] WARNING: possible circular locking dependency detected [ 2998.928806] R13: 00007ffdb31c0faf R14: 00007f9d03f75300 R15: 0000000000022000 [ 2998.930039] 5.10.200 #1 Not tainted [ 2998.932271] ------------------------------------------------------ [ 2998.933528] syz-executor.7/19210 is trying to acquire lock: [ 2998.934712] ffff88800fb1cae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2998.936740] [ 2998.936740] but task is already holding lock: [ 2998.937968] ffff88800fb1cf40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 2998.939803] [ 2998.939803] which lock already depends on the new lock. [ 2998.939803] [ 2998.944879] [ 2998.944879] the existing dependency chain (in reverse order) is: [ 2998.946391] [ 2998.946391] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 2998.947646] __mutex_lock+0x13d/0x10b0 [ 2998.948519] hci_dev_do_close+0xef/0x1240 [ 2998.949443] hci_rfkill_set_block+0x166/0x1a0 [ 2998.950448] rfkill_set_block+0x1fd/0x540 [ 2998.951368] rfkill_fop_write+0x253/0x4b0 [ 2998.952291] vfs_write+0x29a/0xa70 [ 2998.953100] ksys_write+0x1f6/0x260 [ 2998.953934] do_syscall_64+0x33/0x40 [ 2998.954809] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2998.955930] [ 2998.955930] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 2998.957269] __mutex_lock+0x13d/0x10b0 [ 2998.958153] rfkill_register+0x36/0xa10 [ 2998.959059] hci_register_dev+0x42e/0xc00 [ 2998.960027] __vhci_create_device+0x2c8/0x5c0 [ 2998.961037] vhci_open_timeout+0x38/0x50 [ 2998.961947] process_one_work+0x9a9/0x14b0 [ 2998.962903] worker_thread+0x61d/0x1310 [ 2998.963811] kthread+0x38f/0x470 [ 2998.964600] ret_from_fork+0x22/0x30 [ 2998.965434] [ 2998.965434] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 2998.966750] __mutex_lock+0x13d/0x10b0 [ 2998.967638] vhci_send_frame+0x63/0xa0 [ 2998.968535] hci_send_frame+0x1b9/0x320 [ 2998.969431] hci_tx_work+0x10af/0x1660 [ 2998.970321] process_one_work+0x9a9/0x14b0 [ 2998.971269] worker_thread+0x61d/0x1310 [ 2998.972167] kthread+0x38f/0x470 [ 2998.972953] ret_from_fork+0x22/0x30 [ 2998.973789] [ 2998.973789] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2998.975376] __lock_acquire+0x29e7/0x5b00 [ 2998.976311] lock_acquire+0x197/0x470 [ 2998.977172] __flush_work+0x105/0xa90 [ 2998.978034] hci_dev_do_close+0x131/0x1240 [ 2998.978989] hci_rfkill_set_block+0x166/0x1a0 [ 2998.979986] rfkill_set_block+0x1fd/0x540 [ 2998.980916] rfkill_fop_write+0x253/0x4b0 [ 2998.981860] vfs_write+0x29a/0xa70 [ 2998.982685] ksys_write+0x1f6/0x260 [ 2998.983522] do_syscall_64+0x33/0x40 [ 2998.984369] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2998.985496] [ 2998.985496] other info that might help us debug this: [ 2998.985496] [ 2998.987095] Chain exists of: [ 2998.987095] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 2998.987095] [ 2998.989628] Possible unsafe locking scenario: [ 2998.989628] [ 2998.990821] CPU0 CPU1 [ 2998.991735] ---- ---- [ 2998.992645] lock(&hdev->req_lock); [ 2998.993383] lock(rfkill_global_mutex); [ 2998.994693] lock(&hdev->req_lock); [ 2998.995918] lock((work_completion)(&hdev->tx_work)); [ 2998.996959] [ 2998.996959] *** DEADLOCK *** [ 2998.996959] [ 2998.998142] 2 locks held by syz-executor.7/19210: [ 2998.999383] #0: ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2999.001608] #1: ffff88800fb1cf40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 2999.003782] [ 2999.003782] stack backtrace: [ 2999.004843] CPU: 1 PID: 19210 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 2999.006486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2999.008452] Call Trace: [ 2999.009084] dump_stack+0x107/0x167 [ 2999.009953] check_noncircular+0x263/0x2e0 [ 2999.010968] ? register_lock_class+0xbb/0x17b0 [ 2999.012051] ? print_circular_bug+0x470/0x470 [ 2999.013123] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 2999.014189] __lock_acquire+0x29e7/0x5b00 [ 2999.015203] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2999.016287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2999.017336] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2999.018438] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2999.019525] lock_acquire+0x197/0x470 [ 2999.020299] ? __flush_work+0xdd/0xa90 [ 2999.021081] ? lock_release+0x680/0x680 [ 2999.021892] ? lock_release+0x680/0x680 [ 2999.022705] ? lock_chain_count+0x20/0x20 [ 2999.023541] ? perf_trace_lock+0xac/0x490 [ 2999.024389] ? lock_chain_count+0x20/0x20 [ 2999.025225] __flush_work+0x105/0xa90 [ 2999.025988] ? __flush_work+0xdd/0xa90 [ 2999.026790] ? queue_delayed_work_on+0xe0/0xe0 [ 2999.027712] ? hci_dev_do_close+0xef/0x1240 [ 2999.028575] ? __cancel_work_timer+0x2a9/0x4c0 [ 2999.029489] ? mutex_lock_io_nested+0xf30/0xf30 [ 2999.030436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2999.031482] ? cancel_delayed_work+0x24d/0x2b0 [ 2999.032394] ? trace_hardirqs_on+0x5b/0x180 [ 2999.033263] ? cancel_delayed_work+0x1b8/0x2b0 [ 2999.034175] ? cancel_delayed_work_sync+0x20/0x20 [ 2999.035159] hci_dev_do_close+0x131/0x1240 [ 2999.036016] ? rfkill_set_block+0x18f/0x540 [ 2999.036892] ? hci_dev_open+0x350/0x350 [ 2999.037706] ? mark_held_locks+0x9e/0xe0 [ 2999.038532] hci_rfkill_set_block+0x166/0x1a0 [ 2999.039442] ? hci_power_off+0x20/0x20 [ 2999.040235] rfkill_set_block+0x1fd/0x540 [ 2999.041074] rfkill_fop_write+0x253/0x4b0 [ 2999.041919] ? rfkill_sync_work+0xa0/0xa0 [ 2999.042761] ? rfkill_sync_work+0xa0/0xa0 [ 2999.043591] vfs_write+0x29a/0xa70 [ 2999.044304] ksys_write+0x1f6/0x260 [ 2999.045035] ? __ia32_sys_read+0xb0/0xb0 [ 2999.045855] do_syscall_64+0x33/0x40 [ 2999.046617] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2999.047639] RIP: 0033:0x7f06c3ae6b19 [ 2999.048393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2999.052140] RSP: 002b:00007f06c105c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2999.053670] RAX: ffffffffffffffda RBX: 00007f06c3bf9f60 RCX: 00007f06c3ae6b19 [ 2999.055111] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000006 [ 2999.056549] RBP: 00007f06c3b40f6d R08: 0000000000000000 R09: 0000000000000000 [ 2999.057988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2999.059453] R13: 00007ffcc75acc8f R14: 00007f06c105c300 R15: 0000000000022000 [ 2999.073437] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2999.117518] FAT-fs (loop6): Directory bread(block 3) failed [ 2999.117539] FAT-fs (loop6): Directory bread(block 4) failed 18:52:47 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730e66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) [ 2999.117557] FAT-fs (loop6): Directory bread(block 5) failed [ 2999.117575] FAT-fs (loop6): Directory bread(block 6) failed [ 2999.117593] FAT-fs (loop6): Directory bread(block 7) failed [ 2999.117769] FAT-fs (loop6): Directory bread(block 8) failed [ 2999.117795] FAT-fs (loop6): Directory bread(block 9) failed [ 2999.132450] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:52:47 executing program 2: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:52:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'wlan0\x00'}) close(r0) 18:52:47 executing program 1: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) io_uring_enter(r0, 0x3b4d, 0x0, 0x3, 0x0, 0x0) 18:52:48 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x4, 0x4, "dbf57d"}) 18:52:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r0, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r0}, 0x68) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r1, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e97c52", 0x5, r1}, 0x68) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r2, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r2}, 0x68) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r4, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00000001c0)="ba01000000c4d81ec29f2160033974c601a9b9b70d48301095c2116d5282ac6f541864ed046aec3cb7411cefce6401a857ed6ecb3c8cfbf81bd9e39d9efd4a96d8d33521f28d61bc08f6988e8cf11221cb9b7609ee158ecb2ebff5c6fbda904143457bb0e0ec194a96ae84b9ce20992c347d1bffe9ecb5b1876e42b4d9d922ce542a6ae55aade7fc1f821b68c31064d7ce9a16", 0x5, r4}, 0x83) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) [ 2999.341944] FAT-fs (loop6): Directory bread(block 3) failed [ 2999.355711] FAT-fs (loop6): Directory bread(block 4) failed [ 2999.363008] FAT-fs (loop6): Directory bread(block 5) failed [ 2999.373405] FAT-fs (loop6): Directory bread(block 6) failed [ 2999.387695] FAT-fs (loop6): Directory bread(block 7) failed [ 2999.392777] FAT-fs (loop6): Directory bread(block 8) failed [ 2999.423632] FAT-fs (loop6): Directory bread(block 9) failed [ 2999.511839] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2999.515130] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:52:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66730f66617400020101000270008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@numtail}, {@uni_xlate}, {@shortname_win95}]}) 18:52:48 executing program 3: lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x62, 0x5, &(0x7f0000000340)=[{&(0x7f00000000c0)="4be591f55775b4750cd1dff4cba47e0fcc041cb0e5a63d5efb0722436c2c4e424f40dadd61eac25cec7a4fc7018a02cecf9beddfdba1ab1c7a9ed93326d4f35f61218b071bc0b51443f3f9ef0a02f0d46d283e5d6c5afa51783c0d1de3672db293076a52e7a838191cf6d1030a26002f95b96303f5f67f83d672ffedf80e0f5126d0c9e72b64b75bdc5fc2358f994fb0bdadc1db86663ba2c51ac1da5af7b8e901a4af32a274534f02c5506feb9de1c4db424b6216bea9303ad76791258b75998a54b7da773ef9a7982f369a7af6b71c2ec5608cd4507da40fcb1808a7683a5aea5116aec4c2f048eb0166f52d6b2d3be7", 0xf1, 0x10001}, {&(0x7f00000001c0), 0x0, 0x7}, {&(0x7f0000000200)="62babf312e4b6b705ff757530dbebc7a9b660438ae52776c0bded74070cb4fb36e5b56a5fa3dbb036ef743f8da812efbfc45ff4d5c81a5b3d2b483ddf510da382f48b6b99f7f669cba8563d3e0c7887d65cbc6e58de01a5df901e119", 0x5c, 0x215}, {&(0x7f0000000280)="35d85c772adfb065f28c4eae630e766b91d28ec91e473352973efd33e1cf9c7af26d3ad1b5bc5fc7532fc1e96e19e126ce3662bd5dab769fb6524ea5a3168e09fc6bc369bf24049060a870d26fccb0c9a126e23a38db50a4d0e936fd5a67aa16b3fbd0478e708e8461d559f7a46361f3f11bd7986af65d5e1232f9c403", 0x7d, 0x9}, {&(0x7f0000000300)="80da09", 0x3, 0x6}], 0x1048440, &(0x7f0000000480)={[{@fat=@flush}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8}, {@rodir}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, '/dev/net/tun\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/net/tun\x00'}}, {@uid_gt={'uid>', r0}}, {@obj_user={'obj_user', 0x3d, '(+'}}, {@subj_role}]}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) [ 2999.608890] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 18:52:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0xd4, 0x80, 0x1, 0x0, 0x8, 0x60470, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x10040, 0x6cbc413d, 0x10000, 0x3, 0x9, 0x7fffffff, 0x8000, 0x0, 0x7, 0x0, 0x7942f163}, r1, 0xa, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x0, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000009067059e8838e92", @ANYRES32=r0, @ANYBLOB="0000000086000086fd11051f2fde98ccbe00000000000af2e3339f2656a265e50d21465c5c6a0192d1b9afff9a73f743140d016b9ce65cdb639080925b50fc8f19040c44e53222e4d0e707d55a82381edb220e08c05dbbc0b5d72db5"]) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000000100)={0x3f, 0xc, 0xa, 0x1, @lba=0x8, 0x40}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') write$bt_hci(r6, &(0x7f0000001300)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x0, 0x0, 0x0, "12dbe6b4d124ef9d0ed8947ff4cc2517873fed301a5c8fecc8517d48c2b42c"}}}, 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000040)="ae19e9710b", 0x5, r6}, 0x68) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) ioctl$CDROMREADRAW(r5, 0x5314, &(0x7f0000000f00)={0x7, 0x80, 0x4, 0xff, 0x8, 0x2}) 18:52:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400010e, 0xc000) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000f00)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x86, 0x8, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="03000023481a64a3acf17d00040000ff0000009ec5f0958e3ce4d1ea9c"]) [ 2999.739836] FAT-fs (loop6): Directory bread(block 3) failed [ 2999.745008] FAT-fs (loop6): Directory bread(block 4) failed [ 2999.755468] FAT-fs (loop6): Directory bread(block 5) failed [ 2999.768788] FAT-fs (loop6): Directory bread(block 6) failed [ 2999.777676] FAT-fs (loop6): Directory bread(block 7) failed [ 2999.793348] FAT-fs (loop6): Directory bread(block 8) failed [ 2999.794655] FAT-fs (loop6): Directory bread(block 9) failed [ 2999.844328] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2999.898508] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2999.908122] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO VM DIAGNOSIS: 18:52:47 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff850007b0 RCX=ffffffff81f1259f RDX=ffff888008921a40 RSI=ffffffff81f125ad RDI=0000000000000006 RBP=dffffc0000000000 RSP=ffff888008937d30 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000040 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81408aad RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe5dda82ba0 CR3=000000004859e000 CR4=00350ef0 DR0=07fe000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000000000 XMM01=00010000000000000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=ffffffff8111370affffffff8111370a XMM04=ffffffff8111370affffffff8111370a XMM05=ffffffff81113696ffffffff81113696 XMM06=ffffffff8110a6a7ffffffff8110a66f XMM07=ffffffff81088c1cffffffff81088be9 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822ca1e1 RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff88804ea5f2e8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=000000000000005d R13=000000000000005d R14=ffffffff879e81a0 R15=dffffc0000000000 RIP=ffffffff822ca238 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f06c105c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f318fdc4718 CR3=00000000490de000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000