0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:24:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000007c0)=0x2, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d070000009262122a0f3b35aac5866879b1c60000000024"], 0x33}}, 0x0) 11:24:21 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x21) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x20108, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) unlink(&(0x7f00000000c0)='./file1\x00') 11:24:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000180)) r3 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:24:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffdf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setlease(r0, 0x400, 0x1) r2 = dup2(r1, 0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r3 = fsmount(r2, 0x0, 0x80) r4 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/17], 0x14}}, 0x0) close_range(r3, r4, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x48020200) 11:24:21 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:24:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf, &(0x7f0000000380)={0x1, &(0x7f0000000080)=[{0xd1b, 0x0, 0x8, 0x7fffffff}]}) fallocate(r1, 0x5, 0x4, 0x8) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x1269, 0xffffffffffffffff) r3 = openat$cgroup(r0, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) pidfd_getfd(r2, r3, 0x0) write$binfmt_elf64(r2, &(0x7f0000001440)=ANY=[@ANYBLOB="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"/2802], 0xaea) execve(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000280)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x95%\x00'], &(0x7f0000000580)=[&(0x7f00000002c0)='\\*.s-)\x00', &(0x7f0000000300)='\x00', &(0x7f0000000540)='\x00']) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0) syz_io_uring_complete(r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x3, 0x2007, @fd_index=0x5, 0x9, &(0x7f0000000480)="878d3953c7be9ca4011486332caed252b145d6810b161a29326f24e74bad6df77aaa64e948d0e6a61170267509bc6fc2fd689dc71d38eb3fa6a0eecfc1dbe37a26f5a4ee3d08d653956d57e2ee86076595c81651cd95cc8a9397a722c27a89b42b13eacd264945318192aadcfd948fb1e7d9218a0da006fd0c3cf865266b30294bfc9c26fac08b34281f1e7dba2f83b5d013", 0x92, 0x54da4bd8fd2e79db}, 0x20) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000400)=0x4, r1, &(0x7f0000000440)=0xffff, 0x3, 0x0) 11:24:21 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2174.293912] blktrace: Concurrent blktraces are not allowed on loop12 [ 2174.344555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13518 comm=syz-executor.3 11:24:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000180)) r3 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2188.731288] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:24:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000200)=ANY=[@ANYBLOB="004ca27f606cb37a6bffd478140b2a44d5f9aa65e96df3291a6296763975a10c47ea98b127db8171f6f07bda66bddfdaeba4cf92fad6322eeb46b7326391570fe279e7a8bdd261f89ce6288ca48d2f11a920fab7973d0407052e0b2de09bc08c9162d720dd547a123516e1532b1c43bd455e8818b0b785cacb2faf8603"]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2001000, 0x0) 11:24:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:24:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:24:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000007c0)=0x2, 0x4) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x28}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7522, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000500)) 11:24:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100003c3a22870018000000", @ANYRES32=r0, @ANYBLOB="0000000066696c6531df000000000200"]) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40c00, 0x1a) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2bf}, 0x44e0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:24:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:24:44 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000001e80)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1b) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x14, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$inet6(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000000)="b608621fe2a8b787ef8f8566a1067b32d3271839be43921d94a61dd1a9ab3608505e47da94e75bc72b19ab222cfbf6ff654c4f91ef111884b7c3dea97aa4f7cadcee3cd6c7ef7529f0298ec1235fc03d8a5ebfc14a2bbf6982239654d1117866ce3765284a351cd0bf690863da962d3cc59e5613d996d2c7bd68ad97b5c2df66b59d812cd85472138273338fc749b55d0e49e5ba5d", 0x95}, {&(0x7f00000000c0)="18b4284bd8ac31869a61536f8310", 0xe}, {&(0x7f0000000100)="4c8a0648b3e76cb68bd9a015cdc5dbe3ec990858a5aca7b153d24bf0432f8371a46626c91e288f6386266a0cacf99f1be462351123d510707fe0ea76f17d93425eadcaba912a2476444061210f60e3f1dc96f0ac6679af1a456aa8de87b6726971fd035d0ad44b3f8b24d09356d1a677a1d6b16144a2800ba2d47a4aae1d9743935d564cf7fe5299d9df5dc58d7c7ba826fc4a30ee94c7", 0x97}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="94e6c7bb330f44f35be73d6fb2c10d07e13c1ac360ceda5d8fd5da27297301612059310cf293285c0bf97ca500f937022e76375b469c18662be498560344f3de9b5196277ee2ea220c10c545abd64901d94d353929b03f10bdf270c4588616b7e0d081aa0a8733cbc8167faef3813b404d38ab28c58cc4706154a8090d255e6e0511943c536fbc916a6df35a54e6fa8eede6ae7bda3c421df8c6297d1cf0909787f0ef4929ec8c358b6a0669e4de5a3112056760ca556a2d86d37f424248452cf5c83f283a8153", 0xc7}, {&(0x7f0000001340)="4e605d54931a27d071b48452f0fbba36869f9656a0b431640665b931cce1c68ecf8a503ac9cd14334c9da34476756a02a996be9cd365d0040450bec8a9761ed2eaedafb1cec6fc63632447345ca08e8598d140d7cc6d71ffbf89de17de100bf699accacc4fd2357f566205a28b5ef201eb9445", 0x73}, {&(0x7f00000013c0)="e63a3f19eaede4325a32f48355e60bd62092fe07597997ec467adacc4538bc0c304870de1132be9f9cd0ece342ca529e54f8d90f5bf9531c6bc17e6bc4cce8f8183c8715299c081101fe2cd144705ec399edcb2b5ec9486d2b55772979616ff54c56eff6829051120377128a66d474f6be26bd8390d7169c5f61d5ec7b2ae383af96afe0060bedcd93f537767743bae91c4654997422ef6bb43f91554e702c289c6b1e5061160e32784d681b59787b4f9f2ea0899bc4191f4679d8d5a125a7401e28439336b45104abd548270dc353ae4e7e03c73e8e0fa10fca1e28276f121929702e14c7a5974d2c2bd2b32345", 0xee}, {&(0x7f00000014c0)="8253e2f88500d17df5ea68e70d956127b2fb6bd9e84ce24cfe64f8aea277ebb757423f09af39868decae1df260ae9fbde84d32169d6cf3d383e98c8e523f9d494a0cd1acec8f4e7476f81556442c72f88604cba384565f15e7677e65fccf176e4f97ceb2420234f699543016384ef91530144a0d49eb557df19a23ffc2624942829019a6c1a10f04743b6b117d8b54c73fd1c70ac4a3dfb3df10c96db76a30bc5abf746dca7c4e223bff459bd6b1bffbb083a80931b359d9a89ae53c48fe", 0xbe}, {&(0x7f0000001580)="e7f98ca43306f9a1cb840bea0f023f8f77c97527faa58a4de2bcb4fb57b94585880ee9a1e1d8d82a188b7053f048768ea73d49910b2f145d2a7b7cba8a39ea9b24b266b7a05283b2ca68", 0x4a}, {&(0x7f0000001600)="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", 0xfa}], 0xa, &(0x7f00000017c0)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x2f, 0x0, [@remote, @private0]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x1d, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}], 0x58}, 0x80) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000001880), 0x400, 0x0) recvfrom$inet6(r2, &(0x7f00000018c0)=""/218, 0xda, 0x2000, &(0x7f00000019c0)={0xa, 0x4e21, 0xc4b, @mcast2, 0xc20}, 0x1c) 11:24:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r3 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2197.350345] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13556 comm=syz-executor.3 11:24:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:24:45 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2197.472860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13556 comm=syz-executor.3 11:25:00 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(0xffffffffffffffff, &(0x7f0000002e00)=""/4102) r1 = io_uring_setup(0xd58, &(0x7f0000000bc0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000100)=[r0, r0, r0, 0xffffffffffffffff]}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYRESDEC=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4801) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@orangefs_parent={0x28, 0x2, {{"b4e8046691730b5748aec6d01a81e69b", 0x3f}, {"a18dc8c87ff16350f01d264ad3fe199a", 0x6}}}, 0x4081) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 11:25:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r3 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:25:00 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:00 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:00 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 11:25:00 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:00 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'}) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 11:25:00 executing program 7: syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000900)="024344303031", 0x6, 0x3}], 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB="dd"]) 11:25:00 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:25:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000000380)="200000008000000006000000660000000f00000000000000010092000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000040dff4655f000000000000000001000000000000000b0000000001", 0x5b, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) umount2(&(0x7f00000001c0)='./file1\x00', 0x2) accept$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000080)=0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x4800}) 11:25:00 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) openat(r0, &(0x7f0000000180)='./file1\x00', 0x220200, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x78) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0xae640, 0x21) rename(&(0x7f00000000c0)='./file1\x00', 0x0) 11:25:00 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:25:00 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2227.944362] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:25:24 executing program 6: sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48880}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000007c0)=0x2, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x5}, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2a}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8f}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x11) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x1c}, @local, {[@generic={0x44, 0x4, '\r8'}]}}, @redirect={0x8, 0x0, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x93) 11:25:24 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:24 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x30c}, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) 11:25:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x269da016) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:25:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5af, &(0x7f0000000100)={0x0, 0x0, 0x21}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 11:25:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000004c0)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@random="07af43ba2470", @random="a62475dec4db", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @empty}, @remote}}}}}}, 0x0) syz_emit_ethernet(0x3ce, &(0x7f0000000080)={@random="3dd0b1dae02c", @empty, @void, {@ipv4={0x800, @gre={{0x29, 0x4, 0x3, 0x27, 0x3c0, 0x68, 0x0, 0x0, 0x2f, 0x0, @local, @loopback, {[@noop, @noop, @lsrr={0x83, 0x23, 0x74, [@loopback, @multicast2, @empty, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x27, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @rr={0x7, 0xb, 0xe2, [@broadcast, @private=0xa010100]}, @cipso={0x86, 0x8, 0x3, [{0x6, 0x2}]}, @cipso={0x86, 0x20, 0x2, [{0x0, 0xb, "34891ab5d17594d52b"}, {0x7, 0xf, "a219c7d97a58b0b6ddce72e0a1"}]}, @timestamp={0x44, 0x14, 0x15, 0x0, 0x2, [0x7, 0x4, 0x6, 0x3]}, @generic={0x83, 0xf, "82ffa321684d5c23dcf4687372"}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x22, 0x1, [0x9, 0xffff], "1b2ea2c2e2ab22702f87499df8e26d6e726b02d2fa8ffc3fa0f6d6ce73425b66d0ad"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x4], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0], "a04c8092aa40451e55aff9e3c077f256cc3025febf2bedd1125f27f4b07647ef0781ede734226990d8d2a0ca0a6bbe93e23d5a0547babb5ca774c8a82f6ad42c5165fbc13b318749158f53c1f86ae2da8ceaf5c3095a244f3f7bf02b745904b5c4156211f649e459a46fedf5d6c165712f26ba163d8cf12a4f4ad4142cd13fad28f015c9f72c02d8c793777c7615acfaf8133a6fc3fd560e6e01d1fac5825ad4450cacecc6cd6ab189375d879caf55b2bf0203ede4c95f27a61fece6967ce23d4717f76020a96639e5dd0eb986cacaec8933800bd4f3f880b46207a904fcf8e5f2e93e65"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x0, 0x3, 0x1, 0x3, 0x5, 0x74}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0xbd, 0x1, 0x0, 0x1, 0x4, 0x1f}, 0x2, {0x2cfcc000, 0x4, 0x2, 0x2, 0x1, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "1dcac31fd533cd50399c01c86a404c4edffc632669ad46def2c4b68a9c8670a8b6183b80cd2409b2e6708ede8b5a73dfba84b4dd5f29b9fd350fdaf791ef2c97005ad2177938be05f92b60fe12eaa4d579a7fa33a5cd486a091fb21d673630a716cdf25f863f8455a369dc4f0510db686a83fbcf4f284fc0691b36a509bead7e70a806f1d37b1ecb87fdf09a174280b6cf8c18ee1660207f7a94f336a7c91a828867055439811d155be77773a546ccfacf469d83fb6d429fafd0058527c04279c06f9382ef570b6fe7"}}}}}}, &(0x7f0000000480)={0x0, 0x3, [0xa51, 0xdb8, 0x5f, 0xb7b]}) 11:25:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x269da016) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:25:24 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x10000000000}, 0x0, 0x0, 0x2000003, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000840)=[{&(0x7f0000000100)="ce41cf126726a45ec09f24ecfb5b760eeb667a1fe852eae3898cfd0244e08f5a3e195fca99ebab0c13644a1fae16784edf133b167fd6dfdf592bed7dd2dfc70c4c58638070958ee6bf60e02eedd666070957775848e943c59015553ac900a435d964adc76afc4b2f9212df0126393e719e013a34f8316592b075c0c0e29c269be89e518971869ce2797be89c7457a2991b44554307c2c62ccbd90abe57b112e4382ce861061067f0", 0xa8}, {&(0x7f00000001c0)="893b5c5cd92c7d28ba902649882d559bddf94e4831ae47fe3cb2e29c312b6fbae5c01224a060bf8e63fd064f5c9be0cff0cb233e312f8188856f83fd8b56a10f0f17b3c3c93d7539768a2ced84bfeb44e372da18e5bb8572b725fabdb810f44e9eadb0559890929bda1c5b0676a3f8b0c9bdbbaebcbba6ad346e854ba71c4e45c1a86f433e38c40629b343e4f968a332946837759db347de20cd26f3c0b6b761020d5d1165f700fcd55225fc996963409951c972631dfb6d4ef56d9db349a867da9f48774be445e7e2aa33630e450a1fe805b4", 0xd3}, {&(0x7f00000002c0)="293e05e15c8c05f628a7bfb399e049d2d991c869437122b922d0b3d1cc3784a7527255a942b23fba61b70083735899dbf613b641e05a0e5ecc127290bf7e4cedcf9009604ee59680d6c485ca5636bf2766e1b5da8ac2e58405c916c4c3e4e66e2522702539c08ebb81ad7e5f5f4b5474a37d364ae8815de4e5b72d921867c0dae22d62407fa5d748ec5db1c1f2a24f6c1aba12b06b07babf0c088e5241b35f35c9c9dba7362b16315101d7c2dfe9319e2688d064525947660b6ee40937a3b39f7a65b63d7db0508475c6b346afe787f2a0ed442e6027669a42d738fd7106dfa7c71364fc", 0xe4}, {&(0x7f0000000440)="398d4f3bf4c7d85dc9981b56a0df51263f47ababba2fa2b565441080cd553f77739029cdff7e02c8fb1f40bddcc13ce531e3a5799e7ba52da13559025ef82a31839a51be8a38d440dc1eaabb3eec0843550f9c810127a831fd88bd7eb28c0fec213ece38acce311d4d2704883ac6e0950c4096a721f0f11e5e79ef533b776c3b606da13d6e675c002bc4682a32eb668b67c63f0430724483815c048447b1d89f7ab76ff289eff2943d029cbe888908d32de3ca57ff092451976b576c", 0xbc}, {&(0x7f0000000500)="322a79f2c9a077e2131ec42cc6e2f792c6f70042cdfb001019b326abf75361ddafe9761b8698cd00e029d9f1f0e22b02703cc858398d5e94a20d6557133feb19385ae9e085e95209977142a22fc0026d27b5e9560df7a383930477cc8adbeb876e758408541afe6ddb7a6b6ec3c4b24fa81aa6249204741bb50fd9400de4cf82f29c92e6b3d7b0e19d2d9e0aab275b919394c333a388fc9cf23c496d9f", 0x9d}, {&(0x7f00000005c0)="52ecbce93cc978738d76e56a68b2169b55f74026d4ed95b615468c2de5e5c6cbd7bdb3ff4a41023ac3f8f0425897ad9a265e3020730aa5eb04529e19126de52b20ed1fc7c277880c1f7994134665a1bf376c8c2affb2083bdf64cd0bfd0c6d2088a9f26894ad35c94cb7792032f6b6312237f390b68c855e503941345200a2854e47a47fa22d465585bc305df5dfd5bfc195a0a3ad9eff8ddac3573b316f8802", 0xa0}, {&(0x7f0000000680)="7a1a2b30ad01bdc777077f46a6d945637833c79cb13f603a1e4a66eb199e78b7c018ece1d522b98c4830dc3433ee79e469128bbeb10d56e022ac417402d41ee0596b42ecfc0e56fd1e6e6e0c361c3474cae324dd8f8864410207a2ab17ca20e4ff286a605a668a589f0d7f7a03df999768a46b6c2ed8d2876638bef18d0fe5200d2652ef5eb135874909a721abfdbb632d9ec6e72fdbf952f2", 0x99}, {&(0x7f0000000740)="de1ec0b0eeababdee6c722fd5a57ff7528802f89a0c9ea20b909a83713c6d3748ee1753ac5d7cee4268906685645c3ed022dc940998a859e5428c5a7cc5ca963f2918fd931fe1de9868a14a26b673e662ded1486a9af1471cad6e2c1b5a5a7b874397904932d9d9194cadd6015c4bb775b302d28f07a234f81446d14336b541c79d053372c18abaab0cf038d010141f8b1119ebb84bb18fdfb884965849c92bae41c64956a01df8c9fdae647d004d743e53e9d761ae7c9d78f0973ae105e5a8744", 0xc1}, {&(0x7f0000000040)}], 0x9, 0x4) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x10) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) 11:25:24 executing program 7: syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) 11:25:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x2}, {0x7}, 0x82, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)="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", 0x140, 0x0, &(0x7f0000000780)={0x2, 0x139, {0x1, 0xc, 0x31, "505d9674ba73906194fe430f4bb19ef49874925a993429df7880d00794391740d486930180edf2e38c8bc9d67441c189a6", 0xfb, "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"}, 0x1000, "e65d26151d0bee46d3347f9c4ed84d65a2075f5c8639fe088cbbb48c67df9dd6fdfed4f01db4fab8a5e99dfb58b8725e351aa121c2e6434ae8af1eaafb0149979c02c97614652f84be86b1f627dbb71b7b49fe9c49dc8e89d1c1762d0db1dfb530565fb97f372da965af4d382e0983ef8932458571bc2a8404fd5171b9a6997ae54b404af49f54766eb81a928fbc3bc9d70267d27d294918ed50601d709ca7a0ac4daa912d210f8ed035e0efd98e515166be3a0abb369a9f975a79df084c13fea693ab479c028d14113441754e1c70203a19b539873c84e21a6e99d390974bb3fcd488a724381ffada4b1270ebcd3f85a9d0ef8702ee124496e3a4b7a3511e7026ceb043e944b6ef8594b8598709ecdecce9b60d3da56315f2b3fe67570a319db72bca00e191d13cf53ba2f2beb611ee3393738f64ad168eb7e9f9e8adf6ac0bd2c8743b55ecc5bbcab9b6b3e313421e1e300349630649bc0f875c2637e8645db577789bb27ead686744f089553c6a4c069b72aa70c55324fb83d14df7f23f289280c4c90c6dfb806ee2dc0fb4a18ccaea256fbf26d49e1953b54f5d345bea45781fd29a97456a814b77d31c6a6d023889d2c7f1c23c29e214b82f351043f613393ea0e2c02d77608c8a708070c1977a61100ffbaf5f4abad9e6545027495a0b6306f8cf9b239cdfd87ab25e8356d596b21a689bf127572212b9b61a574d8dff7b60e6978d50149e5a69158306907bb57b3681bd7298ad704e31bc80924e2e718a901d444ade1fd8638e3308a74fbd41f215935ca6bb1c15c88ffdd208f12b3aebf6f60ea8a8b44665ec3183a5986db454158c2082c3f6ec325c536fa65a10297b44452055524c1df08e24abfe844e066415d4fed5b08739241bd05869f313674bda8c8f5e6a7ef90e987e2a056950754233a187af4fb7e42f8d8cd811fe3828ccb39c832556585c9f05ab7639eb77658e76bb1c7726cf3c42c1a4e1ce4a23328fe88b4629efe68e9162f15e3f933280467fc3119eebb17c5edefb29260a3b7cc6a25b049b04d5b872f479e40c6212310dcad976f9e53c8a2f399822fa2bf681e35cac96bd00b52858f3a890a8a89ef4bdb56ba1cd27f0acf8d3491ed0198f2248267d1ebf00acbfa590a60a9c036e688b3fc9a580cec13a46fc62c39ff303b9167abcb794c5b6f760dbffe99f4877d40ada7ef9fcbaec4b2a0aa4d4d5c30893820458766438b27c80ebb6da789239dc12315283c6b8673fd0eff67bb6302205322f15b590a7ec7c75c70e8f0e7ae146fabe6af03d75f936e207812c21b274233db76ef774750b829de64070eb531c5659d0fd008a6f1268e4fc2ce35f9d492cdd06126d9a258e3780334bfa1e38972ace0192fb0c7c13e11263afe8507fbcc5000b48d07e996c205e3bedb0cbb2d425a2366281d83a1d296dc151ae40f6a78b51e06470bc6467870203550290fc648053ab4d6ed3e6e2cae18729b8d39ebcd8325e982cce45887c376953badf6794f03258212d7e0aba86a5fae0ce54f60ed26f840f65c81dad9ab5f85ae61a7489b5d37f16addfece8c9b016f557362d48f235f0710b4a115846b5408eaa65507883ca04c2cb0e12a901ad3d6b4828a604c46d30769c61e590cace03f79ecb7371141bc58bbc71acbcb50c7399168139b4cc3cf1cc1298f1bb5f22138b26c48f66c939cad7f1ba6b613edef155e6cbfb7d989a9ff15252d78c02f609a82a67ada4ae41b104e71d215fb252518bb4ee319fe2055a91f1658a752279918db551a1f4fef8a293f71f367e9cadeb13feae03dba1d83eb987d73197bd2f19388a9ab75c35010cfddc968ca0a949a6e5234db42ef368def1775eb975742cd2e5694c061e0357f67036177fc1e65a32937ac41ae45b938e5cbd3254c22c7a1fdeec3067281c9c48fa094b05a8ddd34d1b551111f66d118015d3ae951440bd58a79dffd42106a7a0913e323abe511afe5e5fc4f472c1aa482282ccbbd14e915448074c970e8f0336d5f76a2220d6c731c79791ce2d878fd77c208128a31c900b5c395ff80ebfa6bbebc9cc843de669c7e861eacd22e9ce92403c296de7e22995cbcd7905d890caec22b70bb9165cf1ec845e5b8ab3d6dd5766948e0a9ed47a60e09a2fd0779aa16f4ace675fc1582afabdae67c6c431b6679a076d2bb81b82ee5cff52cb5a3472d63f43f6ea997bb95bfc9728e3e4393b1379980125c320dd94a1035ce4defdf5fbdafef4729a87d8dcba35e809cb1f0ea0c6eed083a0202148e25e2d993f8791f51035f74f7e30eecccd1fe3d8f279fc01b8b76db28caae12950ac51759149185feee9b99160f5c7e6117b3cbcad54643fcc6083bab7f5ba6db93dc659e5a51acc75a18c8641774971229cfe5a697d14139c9e1418bcd5cf2217e10c1b840106a5855c0c6af2533386639366a7ea44af18c635db25cbf226f8724eb16251eded905d4e4ed36e951f94def4747ec945c04089849d9c84e460e98a50d1cc9ece9b6913d8414bbfaa47137761d4e49cb48c6e81e3c023bee46bb521823dce90fdfb8e595473ce69970dd7d527facf63f4d36329911b83ed908561866445cc9225ea40fb97ba60d8167169498f34fcc6e35786ed40896994141865910cd6dc07c4c1a198e6254e1f4d0b35479162093a18c64b7de7678e0cad4a275668d63f0df486f9dd4f430d5cd651c64d9d607f69fa280ad74da22f058dc7ad4f5e825bbf044bd476e4e045a112284ee87d58abb479347689a8f54fb3bc96275e5204267605c60e1ce7a3bdf69023eb7729f2028996811c7833f220aaafacdb24626888ad92e44157f96f9a76e5f1845736432424fc351013290a1f22ffe9679b2a8b820dcd7c9637f4a6be734b1527801c1ffe542ea518899501e56850b6a44cd659e3a3436f77384e68fd0928ab53170b5060b75e8f3bca83c25ab1922cd8a54e2cd35f2de1f61b344a31e0df7d09bfe1eef8a26f7d51d589a1583552775204795fac976753a254559f4ac1be0fd614f9d39b0dbe2c5ba90511dd6aa23b6734995cbc3eadef058f74d2000ac60946bf7f4bbb7849080092df74072e396af2c9a9823f7d5ef60209cbbf3db6dd6982e337674e7bcda412c347688065c25a0bac16169832456e44ab80f7737fa1886447412af7a073077fc68a993067d7b97397c89f834ca2f6700532c452157296bd56601f15dd11d2b1a1dbb327903153aac11e8f28ca3ec8abb19fb04c966b710b049a85f50022e018354c0c6394426e2d098c38a3ff5bd32a7595fff3389bd61937b37d4427525c36ad137433f02f211da2c86ea14ea5efed8a195630efd1270acd19ccf519206d6a7ab9d1ce1540c8075a91ae8dc73ed8902916d561037c65eeb3d85dfc6023d6d58515785d2e2d74315852c86399094c86b01cd47b757779108f2f69c0b011101896aaf7bf918f288fab044bdde0638903974c3f4c1da0a3b482fea54822d4e4e34292355452cf43fb8eb9136f133c6f3df8e89687ce71f7a19c0e1f51b1f890ec2c130e0420c9c9dfcc1e8138eb276de4ce0997f506b89e0611f848087e75accdbda861cae0dd20e51cd8bcde1a28e6499582205539b87f3c2719c944a1feb55154a7ee63082d93d05e08c1fbfbc730fdffd90903f4b72ee556fb8fc13a81784c5e67b5aaa3e576fa7c9f3c2bd60c94b32f1caeea19e1b37854e5ed929d84b6021794387930d938c335589cdac395b6a55e2178441a2b6749247a9003bb6c5661262afb3db1ba20b2c50dbb0040d09b0e23ee138186d9818b3ca8b280c1294416097277850ea1501f5fbb02c8ed92082c4de1dbd79e0e99e8719afdee4d5eb45f8d39a4749f94f2a72de2aa3cb075773938e2dcf71361a557f56155212d3f9818420ac6002a09d92b3bf9ca5dfea0fd1f60fe1318cb2910885f18d9fa82f427ffc34311c62f71aa68b09337c5667478b5997de618a7495f031d832637acbf3baa90fd02861793c32b523eb2fb89104261d24b1a6e059192da118900616f0246f787990970dbad2bc5aef57fdc6330f17d7f22bacb1d39a3cd5b9bb4193da8bd358ee3433e1b6c8b7597e40db8d1663067a2c8e0cfe4a1e43d5dba4e9dfca3aeecf16b850c87885871d65c1e905e8f97cbf7261e34d888d358664351e3539c074822972203b0a7f72354aa4a0125b117cf2f60a3665635ac1d382cb11be95bfd82e61eaff1176716f3791f27c42c26eede75629ba8f10583a67f8bdf0b60864afd4eb1400a248792fdaabdc5ee2a79c5493517863b78a31a685ba4b97b6f0fb994c957bda5a8f3b9bb8daaf6ba5d0bf8be4b03902e66d2262d6655dc5a9a4b58bb47ced138e7eb45eebd30f33a741bfc33922785d0f70f35603a729063f419fc6e74e1503b38ce705ef893c2ec88dce714001f8f102879b43cbef7fdfd5110feae26e1ec9aa93d1ebfa6177ace4223f153b8ae387df79aa9b38f6028afb786b8840e912be9fd787243461eb549642da1aec5fb6e79c3b56eaf6c651d5811d6dcf533acd0c1194f8250f7a26e28efe74f3765d0823be564204c08423de885dbb32e6368d9d3408ff9e176d50774b1a0015ca35e62ca1c7fb03a6d0922e33183881408719f4c6212b748b43b8b1fdcfb956eeb6132c6e4a513cfa65c3d86176f90cfbcac9c94ddc9c37a245d6da70e773c0675a42f5cb341db2a558a994418116b85f8f0782fc35979530f10928dd01185919d24c5e49a8d433a50125220790d343e3e5928afdad13b705a05cf8e03f1385c6d88fa1b654856d077d28d44e0b0dbaa5812e5be82d3e164cff5bd6472c9c6972b0cf994e409413c43cd4f268d7dcd8251ba345010bac6fbf2415cb1bffae78acf29ff317a8f5284cc4680244bab242847cf6b4927ef7a1da4ec41818902545b18ed78eefabc1dddebacbcabd0ad1ddd1aa90f9da870dab73116fa0e4eb54356f74438be7524cd579bc47304185f8cf3c7286ae95375f186968b9a8173c94e7f3a27a678d4366a1d8b051edfbce344b7060d65e36edbc8687af05e63382e3ec02f5f13f3ca89e6fca7d67956030bf92225259647c3c935544a7d4fc66a07f0e1e893986a344600f9dfee1cf3141b0fd342dd2eea6c2d8aedf815007c9a3f566a55c595a053f43a961513803f9ebc8502b42a2da20e1e03e37a6e8ceb50d86f27aee8404c91a80148baac4f57b0ca840e66fd45e17f2af7fe6c3607c3428ab160a9d78a2c5f461b016d82a450cbbc685b6c206437ffebed4b178e32090132c02547d6df94c3db2b3815a2ea939187b17b3c0488222c197cc3f5657bfecfc200d58c532606385124691859c5b194063952e7232d3536e7681375510dd832b90d51ee36a12e9fc2245decb4e4ab584fbf812c0be8bfc8578662c0fa2d0ec60b1aa98788484a478e27d1aab7d8e33fec5da22808335383c46b5cd1ae4b2af604679d8188efb3c77303a25e6c608149f31cf85288e0fb7cec8fb4356a0ef8efa989fa3574a4128f7ffc314a359c18ec2a0f1216f2597269166f5ff482bb8eb6dac3faa7e487e0e3ea49596e14b2a4fcbb5e6717271704a60afc11594c392069355b22322be1df6ec2644710bf5681d077c8f0bad18765fd9bb675063d11a8420419d6e3663bca8056bb651da4d212b9dcdd18372d956168a53ffb2ed2075c5c571fdc8735996c2b6d55bf90448c097c9d455290c1a337c0ff4c16ab740b85ab7c91097be754a7c4896c3459f676598357e254215980c81d1adfc94a2e356dadadaad76fa5fae37ce535710e7ca6febbe4"}, 0x1145}) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000400002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x1009008, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="f00bb127ccb29068e03f5a67caa8e71a532a90eadd2bba992be6fcb40bd9a1e2f54055a1c25b004fb5d91dd38fe29b1c496c91ef02b77a5e493edd6c2b34401475281a848e0c93ebd695c29aefc3aa36a2b2451a70d7096e20d16dd55520b0a12a215f8a7e1b254351790e032470f575c829ecbdd0f80576a19183c8dd34ac16fcfcfbfcfe473271e66d3bfd18afa6e7583c133a26c3276cc819bad48c0774766500ba866b", @ANYRES32, @ANYRES16=r0]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x1, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r3, r4, r5], 0x3) 11:25:24 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x269da016) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2251.094153] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:25:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x1, 0x4, &(0x7f0000000480)=[{&(0x7f0000000200)="a2eb83a2d947a944404a2aea0d9aa7b50ab3129b6ea56e8b75942ed92913488fa116044ea7845d7a04fe1afce35572e1f45376a748d022118f9d83349fc8153c19c66a415dae30ef139fc5dc6fca85219b0eb26c84fa6c15334e3b0c8fc4c0e1c98bdb8c", 0x64, 0x401}, {&(0x7f0000000280)="8a51c2b04c3ba308edd9282db4d84c69871b0ddc4821372191436bf5081a4667efe0c6a4034636d970f898e85d2132db00052296bc9eb0ed9b38bd8d462a22853eb1c4e3", 0x44, 0x1f}, {&(0x7f0000000300)="02a3c746f8b61e5db1016d82b7b9a75b6471517c79bd084309016c66623222793f8dda8d42d81790451777d84cd0ebb590a400608af47d48c250e76ed53bea51d6ae23ad4b83748fddd7a111aeeb2587bfaf2cf5625dceb5774154e79d8966ed8c9fece1b8880e75f5ff977dfb6baae4023a0f4548bd5a853be1de30e99e7d0ba0c513ae7556e01cbdd701ae5a7ab19d1dfe377e62aca4be32d6703680b8554b5db7697eb0a62fc160a2cb362ff35f3df55db78c7f230e6751c3bb9b5c9f0aa95125e8624a01b05bf81a89d010d68285b34e75e9b7a5ada53242f12b3a7b7e", 0xdf, 0x3000000000}, {&(0x7f0000000400)="d12a5c637760ef2e210f3508c945bc20423d041561e08aeaf08e1417cd8af6e20aa125940e8b7c9e1d68d1b45b7f5fcd7223cb4364796f4c021de58bf67d5135e09a953644c347e634b7e80abb6ac891b49599bb456104560aac1ed1b4c22096f46c01b771633deb92cf5f354c06082fa7dbd22a5a1370c11a7994", 0x7b, 0x40}], 0x0, &(0x7f0000000500)={[{@dmode={'dmode', 0x3d, 0x81}}, {}, {@uid={'uid', 0x3d, r0}}, {@session={'session', 0x3d, 0x53}}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@obj_type={'obj_type', 0x3d, '.'}}, {@subj_role={'subj_role', 0x3d, '/('}}, {@measure}, {@uid_eq={'uid', 0x3d, r1}}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000028c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100038, &(0x7f00000001c0)=ANY=[@ANYBLOB='v']) 11:25:47 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) clone3(&(0x7f0000000240)={0x40000000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x25}, &(0x7f00000000c0)=""/133, 0x85, 0x0, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r1, 0x12) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000300)={{0x0, 0x0, 0x100000001, 0x100000000, 0x4, 0x0, 0x7, 0x80000000, 0x800, 0x860, 0xff, 0x1b, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001380)={'syztnl1\x00', 0x0}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001480), 0x800) r2 = io_uring_setup(0x776f, &(0x7f0000001540)={0x0, 0xf429, 0x0, 0x0, 0x50}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r2, 0x8000000) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000015c0)=""/226, &(0x7f00000016c0)=0xe2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000001700)={@private0}, &(0x7f0000001740)=0x14) socketpair(0x25, 0x6, 0xffffffff, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001800)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="0006aeacb5bea13b54a05ac192dcbd5a08ae5b323b589104db5d7ca2324e678bc7cdff9cab735c0eb2e554d235a38d8afdcd8ad7112f", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040006000000"], 0xd0}, 0x1, 0x0, 0x0, 0x2050}, 0x8000) 11:25:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x269da016) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:25:47 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x0, 0x0, {0x1, 0xf}}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x80) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2347e7e7feff00001e0040000010"], 0x14}}, 0x0) 11:25:47 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x20000, 0x90) execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) 11:25:47 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400000000001000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x14001, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@dev}, &(0x7f0000000080)=0x8) 11:25:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x269da016) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:25:47 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x20, 0x7f, 0x6, 0x4c6}, {0x36c, 0x0, 0x6, 0x7}, {0x5, 0x9, 0xb2, 0xfffff800}, {0x1f, 0x40, 0xf9, 0x7da0}]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r2, 0x6d956d27, 0x80000}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, r0, 0x2) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0x5, 0xe0, 0xff, 0xffffe288}, {0x4, 0x4, 0x2, 0x5}, {0x800, 0x4, 0x7, 0x7fffffff}, {0x3, 0x1, 0x3, 0x9}, {0xff00, 0x52, 0x20, 0x7}, {0xb4b, 0x9, 0x7, 0x200}, {0x7, 0x7, 0xa4, 0x3f}, {0x7fff, 0x1, 0x1, 0x7}]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xff}}, './file0\x00'}) r7 = signalfd(r6, &(0x7f0000000240)={[0x8]}, 0x8) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0', [{0x20, '#'}, {0x20, ':(#'}, {0x20, '\\)!$$'}, {0x20, '('}, {0x20, '%]{('}], 0xa, "4b8ad04b7218d0251efd4d6af76e378275943d644fbd7d3cdc35a8186f39b8b58b6fee67cbb34b7368d3e7f177783fc9fe6cc506ace043a45b091745c0c0e3f9f5fc9213b9ec903c1a83ad3349316a88b634c78fa8ce5e4fbf125575908379651e7ffd5c846d3d4142295c06205b8db1"}, 0x8e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)) fchdir(r6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000440)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c, &(0x7f0000000480)}}], 0x1, 0x4000) fallocate(r2, 0x40, 0x6, 0x2) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f0000000500)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7ad}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000540)="562c90a2d7c5bdedb44ae0c3596728deaa07939138f926e4f90c99239c0d600f58049dd69495f295ce1dfe98d1c1e4eeb11cd7851c868327e7eccfe4cda4bae76f3ba3a95fa31e56adbbc2d925c12ed71dede070213deca3d0b03ffecb2e944b3e5f1f15731e9a8a9dca7420c99891e089b1ae1bb056c156e0d3c50e5458b9d4ffaf639980427e84d8b31124bce8bce3b4469bdfff4e066daf6c0b55e261e3b80890c9afa2c8251231e3d754723dfc04f7345deaa7ef1a3bfc4585da5e1507311bb954de437be932349935a2167a7c47b6068d7104012a73957227fc737b78fe57ef60320a165dd8a10f0912a0e78fb46ecd5d3c56", 0xf5}, {&(0x7f0000000640)="53d038d364bd0f5fa1edf6d37e96305cd6d528d5b0d7ae0a0b027800879129db70612b82f2fbb971c1ab7b51067def2b46add34b87b94c38bfe1ae720dcf36714635e644f5661af7a0533cda", 0x4c}], 0x2, &(0x7f0000000700)}}], 0x1, 0xc0) openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x280080, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000840)) 11:25:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0xa2, 0x8, 0x40, 0x0, 0x8001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x5, 0x2c6}, 0x404, 0x100, 0xfffffff8, 0x8, 0xb24d, 0xffffffff, 0xffff, 0x0, 0x4800, 0x0, 0x2}, r1, 0x0, r2, 0x0) clone3(&(0x7f0000000200)={0x44004100, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x18}, &(0x7f0000000140)=""/49, 0x31, 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x2}, 0x58) 11:25:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x269da016) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:25:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:47 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:25:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) dup(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7517e0, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) pwrite64(r1, &(0x7f0000000140), 0x0, 0x10000) pwrite64(r1, &(0x7f00000000c0)='&', 0xfdef, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x66, 0x3, 0x3, 0xc6, 0x0, 0x1, 0x100, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9, 0x4}, 0xc905, 0x3ce2, 0xf16, 0x3, 0x1ff, 0x8, 0x200, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x4, r2, 0x8) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = mq_open(&(0x7f0000000600)='\x00', 0x40, 0x10, &(0x7f0000000640)={0x6201, 0x7c, 0x5}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000880)={0x1, 0x2, 0x1000, 0xf6, &(0x7f0000000780)="05d2b051e712c40e0a736da5aeaae87e3a4dcd0907bb374c34cce9cc97854a16f0ae104d02bea96776f62c48e9c9fdbfeca8ebc67b4ec45192da6311da5d5fe85f140ddae2f1c207adaf939af01bfec3a0b3329542fcd312346a9466f635c6f2699b9a13772e1edeea479f4ad31e6e7389a2ba23088a104b8780af32309533617d20eb5150285cb4d36ff4baf7f9d6bb06ef1454f90f7fe77520eef549402b49d0b2eb8fd72e0f1109cc7a67f3b299ec095539c8ba709e48c65bfc937fce1ce57c8b815bf81b7573025786f7b39b8b4a59f367d8518d6fed93785bdafa45c1789c470a9034e217f08291fdeacbac757cd77e18cf5699", 0x6c, 0x0, &(0x7f0000000680)="eed998346cbfd733c81d77637e9b0b601b9b4272b35de260420b1e23e5f12c41867211ee5bd5a7bea37a1bb5fc3b70cc7775157d85a4ba47e8c51d7f3cb9c27285223caa0589b899880c54698402f40790cf04984115d9af65a868f3be3eb9f315c51546ac8b35c2f5c028e2"}) openat(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x40000, 0x0) 11:25:47 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000007c0)=0x2, 0x4) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100044}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x300, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x2000c081}, 0x2004c880) 11:25:47 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2260.227384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1013 sclass=netlink_tcpdiag_socket pid=13788 comm=syz-executor.3 [ 2260.247835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1013 sclass=netlink_tcpdiag_socket pid=13790 comm=syz-executor.3 [ 2274.590228] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:26:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:10 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:10 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100003745000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) getpgrp(r1) tkill(r1, 0x30) timer_settime(r2, 0x0, &(0x7f00000000c0)={{r3, r4+10000000}}, &(0x7f0000000100)) r5 = epoll_create(0x9) epoll_pwait(r5, &(0x7f0000001500)=[{}], 0x1, 0xf7f, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) 11:26:10 executing program 6: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000380)='wg0\x00', 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 11:26:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="4a706f6c88c916b26a7de4f8770a2c006665cdd2d61e3c51a00d8e29d1df5fd2b132d7a5ae7d66cfec25744616ac8d0092ea822717be90889ee2d26e932e8173d28a1c3bec622bea4bc5a1e310e98e2dbed2121d01c9890ae8a7bcc5e053ccfeea38104cc289c89bfcada575dee89c23de68bceb3d30474f209d4f024806914652b2b87009"]) 11:26:10 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:26:10 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x14400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e842094dcf136a6604ebef5a780012be168ae61d98e910933f8b081ade03fbb6"]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 2283.206372] tmpfs: Unknown parameter 'JpolˆÉ²j}äøw [ 2283.206372] ' 11:26:10 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2283.223564] FAT-fs (loop7): Unrecognized mount option "èB MÏjfëïZx" or missing value 11:26:10 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:26:10 executing program 0: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0xd0, 0x0, 0x0, 0x6, 0x0, 0x33}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x6) r2 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) recvfrom$unix(r2, &(0x7f0000000780)=""/4096, 0x1000, 0x40012020, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r3, 0xffffffffffffffff, 0x0) getpeername(r3, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80) rmdir(&(0x7f0000000000)='./file0\x00') 11:26:10 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2283.290148] FAT-fs (loop7): Unrecognized mount option "èB MÏjfëïZx" or missing value 11:26:10 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/31) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4, 0x40) 11:26:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2283.327959] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2283.329580] ext4 filesystem being mounted at /syzkaller-testdir271657688/syzkaller.E6lVKo/82/file0 supports timestamps until 2038 (0x7fffffff) [ 2283.382385] mmap: syz-executor.3 (13836) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 11:26:10 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:10 executing program 7: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x0, 0x2000000}, 0x0, 0x40, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000200)) r2 = inotify_init1(0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) openat(r3, &(0x7f0000000180)='./file0\x00', 0x2000, 0x40) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0xa4000004) inotify_rm_watch(r2, r5) inotify_rm_watch(r1, r5) r6 = fcntl$dupfd(r0, 0x0, r0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40086607, &(0x7f0000000240)={0x5, 0x6, 0x0, 0x0, 0x0, 0x19e0}) fcntl$addseals(r6, 0x409, 0x1) fcntl$addseals(r7, 0x409, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x6) inotify_rm_watch(r1, 0x0) [ 2283.575309] EXT4-fs warning (device sda): ext4_group_extend:1789: can't shrink FS - resize aborted [ 2283.617884] EXT4-fs warning (device sda): ext4_group_extend:1789: can't shrink FS - resize aborted [ 2297.825500] kmemleak: 30 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:26:34 executing program 7: open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2800) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_setup(0x8001, &(0x7f00000190c0)=0x0) io_submit(r1, 0x3, &(0x7f0000019380)=[&(0x7f0000019140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000019100)='a', 0x1}, 0x0, 0x0]) io_submit(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(0xffffffffffffffff) 11:26:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:26:34 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:34 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10100, 0x104) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:26:34 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42000) r2 = fork() ptrace$setopts(0x4206, r2, 0x8, 0x2) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r3, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r2}) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14}, 0x14) 11:26:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000080)='D', 0x1}], 0x1, 0x80000, 0x0, 0x0) lseek(r0, 0x0, 0x4) lseek(r0, 0x400, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) 11:26:34 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:26:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./mnt\x00', 0x9, 0x9, &(0x7f0000001600)=[{&(0x7f0000000200)="e88bd3c66dfad3fd3a79ee9b119a2e1297cd4e8426fa12edbb32ce1e9984e996951302828053c9a7543d8a21", 0x2c, 0xffffffff}, {&(0x7f0000000240)="ed511d35265837cf1cadf7b439785c27437bf02f900ffb6e4f086185c5605cf64922b2713e5cc28da3ab9cb4d9c2d7280fd019b461f73d0b31624243b397c455c3ee5343481cef34e32c090171b29190b1e5d9692846525c53cb1a71a50dc75f1f39aca2e6a24778d1d9fb9d414254b7d9", 0x71, 0x6}, {&(0x7f00000002c0)="7ad0debe7d4d76f4a9ff60d325c2e041c3ad2cc602234e8bc2b11dc3803a32a80ae53edf690625df919dbd6aa81ed30d06639d5cfa8438499bf717f1d57454a765de9022a26d71f784364f45b4bb89bbaa74bbdc2cdf14748f86bc848dd079a20a74891a9da4502a336a067c8e95bb528ef8dd1977041218a86c59d794c0809947576a7e24274f89a2b81a076c2167c72016ec9e07ddeca3dc15b5f6a2b732508d54e9b930fbc53e7099970578ee05f36b6daa731ec4f7882ac6c3e298090f5b35a64d53067619fd24bcecf0f37a926fbb25d436a194c6090cdc63eb6288ef7f739062b6287bac14fa634c1d0a37da", 0xef, 0x6ea}, {&(0x7f00000003c0)="669f93a996c85cfc7d538a558a21948fac64f27c304f50897080e1260e543c6d7c8d47c81ec631dd99f5fb84d0cdc039f5e10b55572ee44c839d2af1a5f261924b639389b83e7104b102bfeecc433a071b6577d60c92a888fcefae5d8877a7708a20a3018e4eb4df903da7d00c5f4332e0dc6d0d6564ad10696b12f2964d1e85a31b59b6761fc7322055ec982f161817c340500c17c8c59c18db9706", 0x9c, 0x100000001}, {&(0x7f0000000480)="ffccf168d064e942e65a3f6e345cfc9f16d328ba3d758cf769c0116dd310f413ffa0217e0477c2a2eaf19b1881f5b1", 0x2f, 0x1ff}, {&(0x7f00000004c0)="f66dc6cc10297a14ba3e47aa87f53bc906b35a2a128a449a580c2c6a449b2f85a3f08feb93dc2c06a62acb1574a9f84da3da244ed8deef6c236b0798322c4d2cb23064a961c6eaba3c81b2ccb33479eb63172ac1c0d564b753a95de79b67ae16617ea5125f0a52a8b382af67f54338b904119a3eed4936d1310f4a004e440243841d2be099a4fbb3fc", 0x89, 0x40}, {&(0x7f0000000580)="a7d15d4565e1cf12620b5740cb1e9822f54fa45da7400d6f934e48d5181776de", 0x20, 0x100000000}, {&(0x7f00000005c0)="d07d4f70d078b1102eb516c561be2ea42c3a7d057818aa13e6a543f003eaaa41ac44fc43feb776e1fbf2", 0x2a, 0x8}, {&(0x7f0000000600)="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", 0x1000, 0x401}], 0x10000, &(0x7f0000001700)={[{@cruft}, {@unhide}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@dmode={'dmode', 0x3d, 0x7eab2b14}}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@nocompress}, {@check_relaxed}, {@mode={'mode', 0x3d, 0x80000001}}, {@nojoliet}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@subj_type={'subj_type', 0x3d, '.{'}}]}) openat(r0, &(0x7f0000001800)='./mnt/file0\x00', 0x40000, 0x2) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x0, 0x3a0c0a0, &(0x7f00000001c0)={[{@gid}]}) 11:26:34 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:34 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}]}, 0x68}, 0x1, 0x0, 0x0, 0x8804}, 0x20000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x50000005}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'ip6_vti0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x400c4}, 0x4c080) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xa2d}}, './file0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x1188, 0x3b, 0x400, 0x70bd29, 0x25dfdbfd, {0x20}, [@typed={0x4, 0x32}, @nested={0x116e, 0x82, 0x0, 0x1, [@generic="5500e0231ac54a50203ece6d703bb490f807cf128353ccef6be9ff58fa41bcb601adcfd795a2ab18040e70b471fa5e374e3de9cc6bde2a1496582e89b6a21a9b9edf744a4871dd216177b91858df131018cbceb17d9bc9e4b2db688983860156fe9c33fc843e807d13bae8d20bb8444089ed1240d1e09af10af5246d6ba396b78edd2c063ec538950547be69e05e9980bdde69480c328427aa42225bfabd9986c73feb90894e9efbcd52dbbd2403e7ffc8380af5a86607466db01f4b13378963f20315d669016417362967f7d390f214ab1fb9494600dbbaa180027ab6c42520d10b1440756056ffabdf52f9ec5ac536eaa7291e348ed5ee3005c1fadbc9203b54c3f7df1d8be0b001143989f2bf8eef81cbdec9bf3ea3b30c047bffb5bf5b52dffa50d5a3c9a57fa8dbf3601d00e695e10ea53878b3af93626008e8a7762a66998921aac52b52234277a6337bc057f687301973aeb29ccb3a4ee4894df2463b346f0deb8ffc0e67369e8868e0e7221f66b3c784d3b4a11cf4833c7ed15b0c5819d5217910f19f68fcb5af249bb6b1928ec396fe2656e821cd30616216d93f56d51eebe403856521cd7fe90179f802b5522b81bdab140caa0ff22549c861e47f82a245c190329d25200cb93ec5b969c0036de3d36c63311b53468f3cc323bfbef2db47b6ec8577650674512d13fbbbedc2d45ed33c345ee9b0f9875f3e32bc98630d7972e9295b787f52471a24e2baf178857f7bdd65d5e3a3b2d11cee06d8c326a3fa2114f14142e2182811a362bedc4ae4844d01b82ac030beb76496272cbbace2426b845cfb0d99985b7e3be4e0b54e2ce4033552d894502da1cac5bd9cadf667533338f902bd0a09bc54c501833f420481913e5bec795135f783aa9c9e23cd368b5d277fcca62b6437ae7830925b9503a18c573a0635c02a3e66c6b5525072030edf7004774a998748b94129ea5721a4d0697fcc6918fd36096c887a4e0052852706fc2c921f64f8c531010ca26d6c95e216a12b24a71a457a25e25c71f89d2f742298a4f9376212b0709a5da37d9d5c2354e870ac22a828cf4bebad82832cad64e822da2f2b3c8bb7ac62263285d16e0322d9f16fc9299e9e5b52ae45acf48d5ce87d417d0c0d0aa9a5ace11a84e2dfed4122f0ace3c3e593dfd5c98290e85f25faae58b8d6a082b7a4be5b5d1662d50176fa594a2c135a9336485c1f3579450c018e1503daa889b6948a54ad1e78d5311272dcac0fc1850871142053633993da255ae4db94544495158390317f32726e0410d7132f06334dde24a3962be4b7ad67b8aa5e49ad675eba271eabda818b77bc920cd0b2987d1196ac88641ec62f8f5f658d34a0b7859fe953ab99b5b41a0afbba9d4886a3a076968d0d64bb428e0ef2084193205cca6915db94ee00bc342d9a7881c6c668c374c64adab3799b894027d94e927aa2912a4843ed62d4aeae6b10fd2f843f1e62d57f0d47a5b528162f935576168fd5e2dd6415bb6e481ad861c84caf5cd0529d476cc96ca00d5f2995dac69a55b2571412a7da91b644644733612f0c4268cf27e1f6d77af4c124dc48ea9f56d2ca7f5b75b719034d98bbf8c1e96664f9a68c7aa6a59a6317d3c172f64604b31e8f28ea97acd3d3fd9e47bee1dbde84a50b520ca82c3cb04cdd6274def2600be5acc762b289c30559e458c9bae2ba913eae764f312378c3cba242d4bfb0b695c9dabb54d2d6982fc7a72248c0cebb510685d5ae084985f2cf66eb3f77327a864373ebda4fefc61f69fabee41b662d0e77534a9b3030ca2ee46004ca139d9ff0cc5f4db07db6f03431d41d6cf2c0f442668fb0abfdb2c392eeb559d5b4673c8f4fe937e493d68cafb4124a0a2dd1bf791e30d54f07bfc187b30c778efafa6d45e6bfe3030de2c96ce93d6a837e7e4b72bcfddb265ffd545c14e3f2c92f553c5f387ef486d3441c0900c63027ff21db0e1ffc681eb6c7665eb0412618e13f2be47006b135205286b5e7f9b3afb31936b097e274bcc96d755663e5fe6db88f34975b458d0ab066879ac6afb363ebd84cab38f8075a99fbe5e23bd32a65ca49f8bd6be6372ce3bc7726e1447873e7318c62a48b60c4c6e7f7ec93013afc6d1bb396e65bca6bc48cdab77101d9594387098eb54aa739b973925d4b4eb26c4cd4108b5725baa856574e760865ec7b87a5aa6fa264dc5e472a3e5452f804adcb574d28e21d155095515d5d47a2cf64d16e058416f28aad7b20e4f16bf7a158fd351352997afa3f65e353af877040a528737c330b4e8357ca58bc7de585c6abaa57ccddec5f8f056fa3eab730c3915dda2c84c19e57e0c906e18bc2be28dd5fbb5497f29ef5de4582cc83d4a7ca1987e02dee88b4c3a3f8a2e9bf26c3472348897ab38c62eef68763a3fe2c9ac82c31cee79b76ff2a6d6f0087e17c5cea8cfb4e8b2e1e75b7547c12b2ff337af7cbec4f31adf164f761ded27e208ff9a3b76eb9ebe5abf2cd75f7709abaf48bdabf1bd84ba058a139677297003d2695d476b84ca493ee3a7cad5ac27c79ec42a4176c4f07654e39cd74ecccce1b1a194a3aab2b3d3a73495eb9af34df5a06fc7540c47b86a954aeb8cc1e9a1b432cc333e246964cf449f802ccd99c42404dec2adcbcbf2b448aa6e4162b6f2f1238108c3a5443c763489259ff010eba8cee5103f1b86b9f9a336d9d0b8cb73235d86c8a9946c516bcd3aad53b74a0929040d409330a317acdb5227445e605435336e11f5814814e72d44898c6b1db6c55a8642dcba1c7d4ec70893e155684b7ff13108c925c870a46d3f4f4b140b31d91e2428c128b1d2a9a4e1addd50b437810af74a00fac2b7a151ef8152d813058340888ad526b88f09c7c8d66893e65e6f01eda894878ab0de2fb9d2e4418d91f9b03d649386290984fcbe741d74655a75eb4bf6d0ae1b547c4d03571fa58a944f4fd5e91be21ddb8a0dffea92280962bcced073772aedf2e1d90af782390aa74d2b52e9d8c25ce9fdaaa949f3b854d2f9f8c9b9e962990d0b69baf608d6c83bda61b9efd07c2f9ed3706ac6fb8462b4d0fdfe655b0bd10b8c77d5182eea0dd158f7d7b3cef6ab4cb9bd2c63583b6948583fb377561314044cc67301db3aaca58f3daa621c48187fe817e23cbef900997e93b2d2ad976f894b2d9d0184385f96f6f30d7a2ea6c890ccbe52ad5beb7213fdf500b1febcddfb41c3843f92358d7c64db87a8e28efda1903cae19c0ecf6af07ff74facf5dce53c7cfe6b83eeece264138be707ba16604683e2260a9d44a0bb9bf7ee624586edbeb7c5833bbde9f855dad9ac8a595912633929c8974fccd7c9d3eea01500780dc36392ac73a1931a512057c8c7534bfa7f87bec917eabb91e89b6889a555d9ca618e142641f9fe01c71ce230b30ae530f61ef069244d593b9ed7c065d8a833ff34618064661fed2686530b54271a2b43ba0d75351ea088bb214153b05d8285b7a91493d5920e20f8d4d36f251332215c84ce724b474922dadc910467e1760849eb4614d822cdfe4b96863b3e1fe3441593c81f77dba5fab82f48dbbb70e8b08245e076bb66495f49b27fb4593f2a1d47ad6a3fad88e0289c2afd2ed7d2a3aa3e4dee4b62a84de93bc098e4251b4ebdb0d2ac053d81da72a4e277231779634221a71a78d6d74b5162329dde8300ed62b1870dd2a35946016209044f7abb3785d42881313ff51880250bd15c9bf3808868a93ff1f936b206790b6ffbe0103ffe58dd7b25ed0d30c4da2ceb71b2c107e671192d7555fe874fa5607cdb4f3b94c02df5c65461637cf79e309b365124f986eba0145f2a87e6b519f3735b42c7d5fa5a614abded59af4bfc8ed670f13d8350259153a93311175c4f98616f0dbb3cc3f1121f7ed3d9b4cce080f82f016ea36ff680f2f3849069f94b5a756c91eedcf4fddd1019a2657b831048adc318aadb9d7b1e18a6ab3e1cdee4cdaeb729bb706a6114149b5d6032ab818f05a4509c532ba8bfcb11175239578125fcc60ffe91475162ab7d1e8006d3e214124fc502e5ec4eec8c454e958f6d904282a9fe6fcecd17cebf50cbc6b11dc8afc17edea2ab129ed7f262ce4dc48370a502210891cf66c4e4a8ab74e723946b8d9656029b26a045dbbfa1308a52d17f7624dad3f748f4a528dfb0b013e780a480392866a994a723661e8febb13053c0711e3c4b519c07494f32c1d3cc1a0006394a3b229512cf79e21f13d5d815413398f7601547164db2b3a57aea2d0f19236b7a922218a16db9100389a22133ef6bb8415d07a9a2a3a457005759a37d907f9f65ca94ac1a20ae0a52463842ed37a4519c5d219a30924790b1ed38ba5e15b2b73cd3ca5bdccdee308660e3a6830c8812936c86c6a59d17eed4a334e45084ed07613ae6f242a6da19822258c47bbe032af0cdbfadb268322e6347ab97f4d82010f6dce8288c157a820d6dd8acef4d48c6de9951814ce95f8d23540b1b3700440989273c564e7f3871eae52d4f5ac876e2b0aed066dd48475f5496787cdcb5031d55a7dbc15af97bb2fb8209f7154a89a9d0b3e39e2e69cfa5985d840432555f92cdba2fccda04b089402cf785d3940b76342b4b62946aadf4070c21059df06e1f09a9221c2d8867df29fb78717cb57a9f47cacdb7d8ce62806465ec1f18d11f06ee928201308d43b8b62bde3f599683f2faa8916aa67581f8c740a0e78eeac67bc18d9ba4eb55239b39e4ff5016aead14274a8f071ecedf0eae5a399772648d804194db29369b1d09e158349ddd9cde6274f229c2e64083eb332488d3488b07b0ee08789a4b2e864ad40e86c875d8a6cec71f975992ee2a8f1d6bce0b5771dc4e6a2e36a5adf4a82b9e3aa64473b92640d09826ce9da0e2e4ee086533223ddc893276b0b5532b34d4a5a22b07e96df785c75317a98f71c83b02c649bb14ddf94b28af568eb0cd40c10866ab4988a3fa61b3d64cfe339fe85835b5141b1a3e21a2cd37c77202d9466c96389774d61c6792fadda16a10d2b14690d90f60f12135b3c8ad74615efc34810f50161d73d8423e433ae41e0879dc76798af7f84060d0cd2e1d3ea33a2057a10c9d19b529c282bddcd7d4b2f19d09c91524110e6a3a1a28a649623174d8dee397517b6c86dd1ccede493e7dcddaf21e603afcb12d5d3b432c099e44e3944bd6316b67760becdda30e0fa2a82d92bf38380cc9e5dd2890e2a2927b7426811eb0ef01115217e08470baf1f4db42c4e37dced31ff7c861c1877ab68a697478b9640647cde1f22668cc57f123631e8559981c513a20e00a7ded61af7ca4bf09f3d6a8db7339085da3d8e57930a277105b64161382e34accac8389ef2d9a7e6b11d23d62046fe39021d2509d9ea4ba4a399a030eb47429d93abc3ad69ffb648b84acc99ad124aa7bca0667ab4ca3cb2ea1cdde93544972d26a10f97206bf23b8031ca37110cb8d4cd705f97980d20ee7155fad2ea2b6a697e28c67fef3013b587d33c58e958ec3e4da62f273003bffd75842488470933da6e40b61604a6e0b1093a8493e7a5648b04f36ecbe7345b9658d1317d253f560d1689f30aab38efe502df91d375de0938a3db72d31999a42068fcd0a289884b6a560c604961a2b765fcdc4d60270fd93a6c3357aa47971a9f863ed898f1a156cf9d656d4cf8c6f92a5d02ea6a219b0f986d8450df9090e92e999114176e6cbaae5ab0e061b1fdd97203bfa9ebd57f59c700d7d1bafbdcb3b614f00dba39626acbf1953480053f1d0ef1fde3d2f169ee1215f011051802e", @generic="87731255e602a4c7f3b5bd39fc710bf0a9338addddec6d331ee745713a5e0c1138d2b78c2a09afeea43dc0ec82ab5454ab9745a279d30d29dc6a086803d4ec9f0e0dd4ef87b0f997a20f66d55f37345867935fa1e46c80e52745457f53e8e7870d334137bbb7197e7d542a61ad65100699b030877cb8e38e4476055ca52c081a431d2f45c71aaeb2e3018f620e7221e9261e86951f62d3743f0f4313e805687e2effd3b49e5acfeaf03e19e85d06f4cf9459f0052602499de5667778b90152de083a6f87f7d9", @typed={0x9e, 0x5, 0x0, 0x0, @binary="881252c8feab2e5566fffbf661a27a9d0acdbeb41f565ef88834a6183243f4c65647a984884d148c70446c6471772a873b30774ff7a85f0ec1b18cf53f3860026f62e74b5e43a67dac6ce660b10ccc7006bcb66e27aa99f0bd0e15dff0a570df4f9ad62770bb2a813e41db64a7cde4ef57b94bb9cc530eca63b20903cd8f589968a8def99a037bffff4e5b0aa08dd90137fbe7a813b6d790de9a"}, @generic='*~C\f']}]}, 0x1188}, 0x1, 0x0, 0x0, 0x44010}, 0x4c880) 11:26:34 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:34 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:34 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:26:34 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:34 executing program 5: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2321.490227] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:26:57 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:57 executing program 0: r0 = syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x40, 0x81, 0x9, 0xda, 0x0, 0x1f, 0x4201, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x7fffffff, 0x101}, 0xb20, 0x7ff, 0x81, 0x2, 0x400, 0xfff, 0x66, 0x0, 0x2, 0x0, 0x10000}, 0x0, 0xf, r2, 0x3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4e, 0x4, "e9f4213b9b4c6b2d2567b8df6d91e304c1db4de3a1b637b0b5ab593dfe75c8e7445e2e19d732cffbff6952da74f22e6e8aa52184a19a22c3a6e92e99cf9f984e59bde7aaa79fc240b620"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81da}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&\'\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-*({:@+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\xc4[,&!@$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x895d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e07abdc}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-}-{-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',,^\'-&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')&:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ',+%*:\xe1+:(:^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '])\xbd:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xabe4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/$]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) 11:26:57 executing program 3: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'default', '=static'}}}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x805009, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000e7000000073e60cecea4c2e5b04a3f3b8377ed1f0018000000a4ea90eaa6a485f2ad1aeac0878ed661c47bd8fd2a48fc", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x100) [ 2330.234219] tmpfs: Bad value for 'mpol' [ 2330.247909] tmpfs: Bad value for 'mpol' 11:26:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:57 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:26:57 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x40}, {0x6, 0x0, 0x8}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sco\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fc00002}]}) fcntl$addseals(r0, 0x409, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0xc0182101, &(0x7f0000000440)={r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={r2, 0x0, r3, 0x300}) 11:26:57 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:26:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:58 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:26:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2345.974933] kmemleak: 10 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:27:22 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) sendfile(r2, r0, &(0x7f00000000c0)=0x5, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454c9, 0x0) r3 = accept4$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000180)) 11:27:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)={[{@nomblk_io_submit}]}) sendfile(r1, r0, 0x0, 0x2) syz_open_dev$vcsu(&(0x7f0000000240), 0x8, 0x82100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002e00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000004c0)={0x0, 0x0, "d6eb21268c2b921f31775436a9edbaf120534ef6aebe0184fea05a54cbf237f00c0b12bf7b1d5a1b9d739cd2457c5df6a4fd91e2d3b8bd31c63d77e401750f2319ee7cca5ad7d9f3d445ae1d8419520b1e1ee967986324b3075fd8dd25e349c0dd129422ad788f0076532f2b18e72c42081e885069f944881eb256fdf78cff038cb20f6a7c0039453843d799abe050bfa00259963c7dde360a293d3da6f2e63c3d6907373bdc52aeeb0615b05c26123f044e17de9623a6dac343860a199d4c6fbb9c25fe89c2c3defc269efa20092d4bb24969dabafbda032abbc1017018ba555c4c64d51940b9f92b8412a33cc5ce256b396fbdc532ed6dbba10354ef10a23c", "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"}) 11:27:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:27:22 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0xfffff90b) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x8, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd_index=0x4, 0x7, &(0x7f00000001c0)=""/65, 0x41, 0x12, 0x0, {0x0, r6}}, 0xfff) 11:27:22 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:22 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000040)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f0000000100)={0x3508a300, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x9a, 0x0, 0x0}, 0x58) 11:27:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2354.815265] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option 11:27:22 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffc, @private1, 0x2}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0xffffffffffffff05, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x0) splice(r1, 0x0, r0, 0x0, 0x44459cda, 0x0) [ 2354.937421] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,,errors=continue 11:27:22 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:27:22 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:22 executing program 3: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000180)) rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x24, &(0x7f0000000000)={0x9, 0x4, 0x401}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x2, 0x10) r2 = gettid() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000180)) r3 = getpid() rt_sigqueueinfo(r3, 0x13, &(0x7f0000000240)={0x17, 0x10000, 0x6}) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x0, 0xb5, 0x4, 0x0, 0x7, 0x20000, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4}, 0x44080, 0x8, 0x36, 0x1, 0xffffffffffffff1f, 0x1, 0x7, 0x0, 0x73b, 0x0, 0x4}, r2, 0xc, r4, 0x1) r5 = fcntl$getown(0xffffffffffffffff, 0x9) r6 = gettid() r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x15}}) creat(&(0x7f0000000200)='./file0\x00', 0x1) rt_tgsigqueueinfo(r5, r6, 0x2b, &(0x7f0000000080)={0x28, 0x5, 0x100}) [ 2369.258540] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:27:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/236) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file1\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000380)='cpuset\x00', 0x800, &(0x7f00000003c0)='/\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) recvfrom$unix(r0, &(0x7f0000000040)=""/43, 0x2b, 0x1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 11:27:45 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:45 executing program 6: ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) finit_module(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7) 11:27:45 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:27:45 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:45 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r0 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002e2fe6696c653100"]) bind$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x20}, {r3, 0x1000}], 0x2, &(0x7f00000001c0)={r4, r5+10000000}, &(0x7f0000000200)={[0x6]}, 0x8) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2ced3c092c7574a7, 0xffffffffffffffff) 11:27:45 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2378.063590] audit: type=1400 audit(1657193265.659:142): avc: denied { module_load } for pid=14085 comm="syz-executor.6" path="/sys/kernel/vmcoreinfo" dev="sysfs" ino=95 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=system permissive=1 11:27:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:27:45 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x269da016) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:27:45 executing program 0: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x10, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x450c}, 0x0, 0x0, 0xffffffffffffffff, 0x13) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x25) unshare(0x42000000) unshare(0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) lseek(r2, 0x8, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="04feb68333000000e8ff00", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000780)={{r3}, "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"}) 11:27:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1}]) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mount$cgroup(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB="78617474722c6370757365745f76325f6d6f64652c726f6f74636f6e746578743d73746166665f752c7375626a5f747970653d002c6d61736b3d5e4d41595f57524954452c0078a0f5134116c9ec"]) syz_io_uring_setup(0x446a, &(0x7f0000000000)={0x0, 0xc64c, 0x1, 0x2, 0x196, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_complete(r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffffff9) 11:27:45 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:27:45 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2378.268876] cgroup: Unknown subsys name 'subj_type' [ 2378.385410] cgroup: Unknown subsys name 'subj_type' 11:28:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r0, 0x7) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) 11:28:01 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x200005) r1 = fork() r2 = mq_open(&(0x7f00000000c0), 0x2, 0x20, &(0x7f0000000100)={0x5, 0xfff, 0x10000, 0x7f}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001180)) pidfd_open(r1, 0x0) fork() r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000180)) syz_open_procfs(r3, &(0x7f00000000c0)='net/dev_mcast\x00') perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x6, 0x8, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x1, 0x1, 0x8001, 0x4, 0x5, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 11:28:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:28:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x10009fe}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee2, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 11:28:01 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:01 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:01 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:28:01 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x44040, 0x0) execveat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000340)='[-#[#\x00', &(0x7f0000000380)='%$:)$\x00', &(0x7f00000003c0)='msdos\x00', &(0x7f0000000400)='msdos\x00', &(0x7f0000000440)='msdos\x00', &(0x7f0000000480)='+^\x00', &(0x7f00000004c0)='msdos\x00'], &(0x7f0000000680)=[&(0x7f0000000540)='/+\x00', &(0x7f0000000580)='msdos\x00', &(0x7f00000005c0)='msdos\x00', &(0x7f0000000600)='msdos\x00', &(0x7f0000000640)='msdos\x00'], 0x400) r2 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x1f, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="6ca3c3d79879840bf47c7ea097367e74a58619910c09eecd3cba5b0645893e7086c239d913598e45f6b73ac66e6c07e4e5f558cc7687ce300ee9d0ca5eb1af72fddb3d2f82e5d46571c6606e5a43ce98e8dcb157a5e3afcb335345f6a1f6e057b11befbfce89bb5e7c4531d15046a3eb5236ccb1a42cb17a0948adca8e808134505b565ea0599acc863ad25fc37353729e9f46851085cc5cef535b7b8678c76602c546af1276e6c003cbc797f0835dcac499d14dc9f1e72b21f57e225f5a6cc0feb7bdc1364bb852c0d89d37e67876689b5a5ee8123c6ff881e58b8ee2ff8e9a16231ed12b378d9b", 0xe8, 0x6}], 0x3088, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b3d7374726963742c6673636f6e746578743d73746162665f752c6480006561737572653c00000000"]) openat(r2, &(0x7f00000002c0)='./file0\x00', 0x4000, 0x90) faccessat(r0, &(0x7f0000000040)='./file1\x00', 0x197) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 11:28:01 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:01 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:01 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:01 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2408.399146] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:28:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:28:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001380)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4400, 0x85) 11:28:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xfffffe01}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f00000000c0), 0x2, 0x2) 11:28:24 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:24 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:24 executing program 0: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/246) msgget(0x3, 0x9d293c3571fddc47) msgget(0x2, 0x0) msgget$private(0x0, 0xa0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)) r0 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r0, 0x0) msgget$private(0x0, 0x280) msgget$private(0x0, 0x1d1) syz_io_uring_setup(0xfa2, &(0x7f0000000300)={0x0, 0x6861, 0x18, 0x1, 0x1b8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) msgget(0x0, 0x182) msgctl$IPC_INFO(0x0, 0x3, 0x0) add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="147fd8ced45266b529599eefb1c4b22df7ab53b93f", 0x15, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, &(0x7f0000000440)='id_resolver\x00', 0x0, r0) 11:28:24 executing program 3: r0 = creat(0x0, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syncfs(r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40400001}, 0xc, &(0x7f0000000140)={0x0}}, 0x4000080) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') close_range(r2, r1, 0x0) 11:28:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:28:24 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xbc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 11:28:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000100)="f1073dec7695085c5ba837c7422bebde556fd8b8e1648dfd7115cf815656dc8f6927785653f4fba3613325aee643cd5101f6674f44f7327a5d95def014143d480964164f7325bd6e318e54868a94c11ff2fabd0e4fbc5ea7fc470b4d9e1a8542c5935e212882a7edcfbc3ba58f49c2b39ab8d72b054ff4380ee613f45601c28c11b2a6a439326250bd65885ddb189a9c598ef8fb53649e6a114410172f2917e0945964a9691d8f5a83bb0bd9") 11:28:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:24 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2433.100579] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:28:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:28:49 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:49 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffff, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) ioctl$TCSETSW2(r0, 0x5412, &(0x7f0000000000)={0x180, 0x0, 0x0, 0x0, 0x0, "21cc7e9395185374e965b622486900beaaec28"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x500, 0xe0, 0x197e, 0x2, 0x3}}) 11:28:49 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, "77fe496e3b6d00001dcdc5f8d75c35ce6b00"}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x0, 0x3, 0x9e, &(0x7f00000000c0)}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) 11:28:49 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:49 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x2, 0x0, 0x6, 0x0, 0x9, 0x8040, 0x18, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x6}, 0x4000, 0x9, 0x400, 0xe, 0x0, 0x3, 0x7d, 0x0, 0x8001, 0x0, 0x580a}, 0x0, 0x7, r1, 0x0) r2 = pidfd_open(0x0, 0x0) fallocate(r2, 0x0, 0x2, 0xffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r3, 0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x1a, 0xd, 0x9a, &(0x7f00000002c0)="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"}) write(r3, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) ftruncate(r0, 0x1000003) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x48020200) 11:28:49 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:49 executing program 4: syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:28:49 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:49 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 11:28:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:28:49 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2456.488941] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:29:12 executing program 4: syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:29:12 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:12 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:12 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:12 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8182, 0x0) read(r1, &(0x7f00000000c0)=""/136, 0x88) r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0xfffffffffffff00e, 0x648800) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x8001) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'veth1\x00', 0x1}, 0x18) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000200)={'wg2\x00', {0x2, 0x0, @loopback}}) r4 = getuid() fchown(r3, r4, 0xee00) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)="4648f991ce6b", 0x6}, {&(0x7f0000000280)="8a13d98b02f41db95fd2a9dab670c53a52afee54d45a16a91b74c9a2b6025fd9a063a6bbf15ca195600b3831c390360dd109206afe93eca6ccee17870f6f195ee0d1a85b5911a9155fe3c666670e659519d4abb62be57dc81612b62c67201ca5deaae7dac2e95addf6fb3978312edbfa64df884065472cc1c30d0b6b2bde", 0x7e}, {&(0x7f0000000300)="ec25f0901438646329c1ef3a64ac1fc7f6a0bb23dc6b3ffdaaea9346c2012988badd48ebd497", 0x26}], 0x3) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000380)='./file0\x00', 0x0) r7 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x40000) sendmsg(r7, &(0x7f00000006c0)={&(0x7f0000000400)=@in6={0xa, 0x4e22, 0xc813, @loopback, 0x6}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)="66892a8c463a3b2e0d5a7aadd04026c92b38c4c5bfd7acab8e9117f62d2025459d62281d16813cc79e29c1b13680003a75a60f9342a3533b511d9fac664985e612785b563c812fc715f6426340f38685c380d446ca6e3aaef22f92feeffb3af21152c2b562954999ac9ffbf955ea665399197bd37ca21545050cdebc790b8b6313d677de63fa645e57e628fb2e4dd62ede9972c5000a0959550b9803e347aa5994e6e902f3c749edfc3a78a2", 0xac}, {&(0x7f0000000540)="da87a52c1c0a6ab870253b5da5465eb3ce79fe6102960d0b98fdb0197270a06fa717c8349b302c28cd2eb9f58aeff1e96f233b982a62", 0x36}, {&(0x7f0000000580)="354e631800cad6951621de34b6ec7dceda97031593c2772396001e53a59165bce42b02b983dc03483f2ebb79c7b97270344cf65ef620c7a716c4145c3ed2e0fc", 0x40}], 0x3, &(0x7f0000000600)=[{0x60, 0x101, 0xffffffff, "bf9f68316ca2dd6b0ba67ed0595cfc104723aeb2859f858257fa24c0a957ac2c422ebf9af76ba4e8eb0a010dbe51ce4a0816e128a59199a5e8760732c8fcaa8fda671833fb78dffe3fde9b0e988cdb75"}, {0x40, 0x113, 0xff, "8d877e6e2d010de887d5cfb07de9cff6135a6016418a199cce11b550cbc39379d5a8c0b661740ca99201e30ede36e0b7"}], 0xa0}, 0x40) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000700)={[0x1000]}, 0x8, 0x80000) inotify_rm_watch(r8, r6) ioctl$TIOCMGET(r2, 0x5415, 0xfffffffffffffffe) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x4000010) 11:29:12 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:12 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) 11:29:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r1, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000180)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) r6 = openat$cgroup_pressure(r1, &(0x7f0000000480)='memory.pressure\x00', 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) r8 = getegid() setgroups(0x2, &(0x7f0000000140)=[r8, 0x0]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="9a65e6e8f3b45568afc2914432b4efe452cb802857cd125b23c300d46b7b4e429d8b86f8db48290fdf49949aede4c94c72637e1644f6f72ec2a6173f76572c688dd41defc3f0a567b1fdbe5c15379cf2bb293be5e8139de239bb7c5e0ac360b8cd08edb853261205b4db26bba80627d9d1c2478139b898609b54402552ee5e0d71c44e41d1f44224860082ff1318d5301293860edb2b4f3e812b2002f83d3d8b33a71972b329494735a35b1f14a776827d3b16d020e3a407be3e1d03", 0xbc}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="f2ff5afb432ee3bb4f04000000000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x10805}, 0x24000000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x9, 0x7, 0x20, 0xffffffffffff6316, 0x7, 0x401}, {0x3, 0x7, 0x4, 0x906, 0xffff, 0x8001}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 11:29:12 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x24}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.kill\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6c}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r9, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendto$inet(r0, &(0x7f0000000100)='M', 0x1, 0x8080, 0x0, 0x0) dup2(r10, r0) 11:29:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0x5, 0x7}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x33e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x8, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x80, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) 11:29:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1fa0, &(0x7f0000000380), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pnp', 0xac02, 0x98) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:12 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:12 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:12 executing program 4: syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2465.346738] udc-core: couldn't find an available UDC or it's busy [ 2465.347838] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 11:29:12 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:12 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2479.610749] kmemleak: 12 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:29:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:35 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x0, 0xff, 0x8000, 0x2, 0x6, 0x10001, 0x49, 0x38, 0x285, 0x400, 0x9, 0x20, 0x2, 0x3, 0x7, 0x1}, [{0x60000000, 0x0, 0x8, 0x1, 0x6, 0x70, 0x7fffffff, 0x3}, {0x7, 0x7f, 0x1, 0x7, 0x3, 0x77ff, 0x6, 0xb6}], "b0109fb36b5124025d08e6102f0f47f7225bb6b34eb0b8e9a7e09408932df5c4201c8a23f5fd50f7e53fa3dfa663dc1acf68b46158af7e62aadf79d71df2a695e48ebbdc439ea54fce07b6815b07534b1718c7e332b6b5cc1da8593ed1994560aa21fc192b752ab6a0dbb46024da8b6ebd8e9bb76450f5a1707544e24e0e10e805bb3edb02605e02e4452aa226d1820af5cbb11c51d75750ecb36b67b864b2a457", ['\x00', '\x00', '\x00']}, 0x419) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 11:29:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:29:35 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:35 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x480600, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/210, 0xd2}], 0x1, 0x8, 0x0) lseek(r1, 0x368, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) pidfd_getfd(r1, r0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000100)) 11:29:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1830c1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r5, &(0x7f0000000100)=0x1, 0xfffffffffffffff8) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) pwrite64(r6, &(0x7f0000000200)="fd4ac884c16d9cac329131e9e124b007e493da3a9ca86d6b37916d1324cfc7cc95fd7ad89a2ed756c5b6df424a9e25494a39722d0429c9697b791a73e6ee2f513ce016c7ddbe68e3ee7cb1cdf2133f6c0eb74684234371297a5b5474fdbe15c181950e08701d178bca4ba7611e8649dc6bf25a63017005fe7d6837a7f8b1b4337947af538bb54ac2cdc7c44635fc8347d92f0b77a9ec60ff82ee7c28f0f39fb29a82807e6dde64cc182fad6558998b768c3612777d23", 0xb6, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0}) 11:29:35 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:35 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x109a80, 0x0) dup3(r1, r2, 0x80000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0x0, r0, 0x0) 11:29:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:29:35 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendto(r0, &(0x7f0000000100)="c18f8272eba06d17b3edef0e191a8257421f06abbccbe5e3354346eafb5417c548396e57f621b61a59193095bae5138e639f84163c099a5e5559", 0x3a, 0x24008081, &(0x7f0000000280)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) r1 = syz_io_uring_setup(0x25, &(0x7f0000000080), &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)=""/110, 0x6e}], 0x1, &(0x7f00000001c0)=""/26, 0x1a}, 0x3}, {{&(0x7f0000000400)=@phonet, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000540)=""/37, 0x25}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000800)=""/249, 0xf9}], 0x6, &(0x7f0000000980)=""/49, 0x31}, 0x5}, {{&(0x7f00000009c0)=@phonet, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/253, 0xfd}, {&(0x7f0000000c00)=""/80, 0x50}, {&(0x7f0000000c80)=""/42, 0x2a}, {&(0x7f0000000cc0)=""/42, 0x2a}], 0x5}, 0x7}, {{&(0x7f0000000d80)=@x25={0x9, @remote}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e00)=""/253, 0xfd}, {&(0x7f0000000f00)=""/173, 0xad}, {&(0x7f0000000fc0)=""/113, 0x71}, {&(0x7f0000001040)=""/72, 0x48}, {&(0x7f00000010c0)=""/155, 0x9b}, {&(0x7f0000001180)=""/108, 0x6c}], 0x6, &(0x7f0000001280)=""/129, 0x81}, 0x3}, {{&(0x7f0000001340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000013c0)=""/78, 0x4e}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/157, 0x9d}, {&(0x7f0000002500)=""/39, 0x27}, {&(0x7f0000002540)=""/70, 0x46}], 0x5, &(0x7f0000002640)=""/236, 0xec}, 0x8}, {{&(0x7f0000002740)=@ax25={{0x3, @null}, [@bcast, @bcast, @default, @netrom, @rose, @bcast, @default, @bcast]}, 0x80, &(0x7f0000002840)=[{&(0x7f00000027c0)=""/106, 0x6a}], 0x1}, 0x7}], 0x6, 0x40000100, &(0x7f0000002a00)={0x77359400}) r4 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x64010100}}, 0x0) signalfd4(r0, &(0x7f0000002a40)={[0x3]}, 0x8, 0x80000) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) io_uring_enter(r1, 0x27a2, 0x0, 0x0, 0x0, 0x0) 11:29:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) [ 2502.745399] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:29:59 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed41000000080000dff4655fe0f4655fe0f4655f0000000000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="00000000000000002e2f233dcf7fd663"]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1) dup2(r2, r1) 11:29:59 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:59 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000100)="1b", 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xa, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [{@smackfsroot={'smackfsroot', 0x3d, ',_\\!{'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_role}, {@smackfstransmute={'smackfstransmute', 0x3d, '*}{}}&^(@'}}, {@uid_eq={'uid', 0x3d, r3}}, {@fowner_lt}, {@uid_lt={'uid<', r4}}]}}) pipe(&(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x1ff, 0x0) 11:29:59 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:59 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:29:59 executing program 0: perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000040)={0x0, 0x100, 0x0, [0x6, 0xffffffff00000000, 0x8, 0x200, 0xffff], [0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0x8, 0xf26c, 0x1ff, 0xd3, 0xffffffff, 0x3, 0x244, 0x1, 0x6, 0xfffffffffffff800, 0x9, 0x273, 0xfc4d, 0xfff, 0x48d8, 0x2, 0x8, 0xb368, 0x8, 0x5, 0x80008000, 0x4, 0x3c8a, 0x0, 0xff, 0x86e6, 0xffffffff00000000, 0x7fffffff, 0xbd0, 0x0, 0x6, 0x5, 0x80000001, 0x6, 0x800, 0x8, 0x4, 0xfa, 0xffffffff00000001, 0x107, 0x5f, 0x88e, 0x7ff, 0x5, 0xd4, 0x7, 0x9, 0x4, 0x6, 0x3ff, 0x0, 0x3ff, 0x20, 0x8000, 0x3ff, 0x9, 0x0, 0x8a, 0x7, 0x5237, 0xfffffffffffffff7, 0x400, 0x6, 0x0, 0x101, 0xfffffffffffffa90, 0x33, 0x8, 0xbd, 0xfff, 0x9, 0x7, 0xffffffffffffff00, 0x50bb, 0x5, 0x7, 0x202, 0x6, 0x5, 0x3ff0, 0x8, 0x7, 0x9, 0x2, 0x6, 0x4, 0x1c, 0x0, 0x401, 0x2, 0xfffffffffffffffb, 0xd842, 0x7, 0x8, 0xffff, 0x4f2fcf44, 0x773, 0x2, 0x6, 0x3, 0x2, 0x25, 0x0, 0x6ac0, 0x81, 0x2, 0x1ff, 0x80, 0x5, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x2]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000a80)={r2, "2d118da7d5d0f852d5575281aa9b347e"}) 11:29:59 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2511.480424] hpet: Lost 2 RTC interrupts 11:29:59 executing program 7: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2511.503594] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 11:29:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 11:29:59 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:59 executing program 0: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @phonet={0x23, 0x2, 0x2, 0x9e}, @nfc={0x27, 0x1, 0x0, 0x3}, @ax25={0x3, @bcast, 0x4}, 0x7f, 0x0, 0x0, 0x0, 0xc93c, &(0x7f0000000200)='ip6tnl0\x00', 0x9, 0x10000005260, 0x6}) connect$inet6(r0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000340)=0x1c) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) lseek(r1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x0, 0xb88, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x100}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:29:59 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:59 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:29:59 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x108) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0xf, 0x3, 0x6}) 11:29:59 executing program 7: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2526.730927] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:30:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, 0x0, 0x0) 11:30:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:22 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 11:30:22 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="03000000090000feffff00006c653100efdbdb4efcf4bccaa3476206acafc427208836da71179c9d78c156030f869307648cff3984d8382b069f75f928eff52299a5f8a01975c8eed5519af8129635956b47e684c0f1b6478c4d4c2739759043076970d4abf1b3bd96183af97444be3adcce63475e750a7c6790cc9d25ea99c2a82570341e69504e4586fbcdc17b346b7ede7ba71543064a410eee06ce0f0859418e88417c2f668a0bc6485c0d84927436cf336b66f7e706fa12"]) inotify_add_watch(r1, &(0x7f0000000180)='./file1\x00', 0x2) symlinkat(&(0x7f00000000c0)='./file0/file0\x00', r0, &(0x7f0000000100)='./file1\x00') mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x1) lseek(r0, 0x3, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 11:30:22 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x442ca3, 0x21) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) lseek(r1, 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="5429ac7b7d53009ce60a0a1e0cf8e282010000000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000200)={0x5, "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"}) pwrite64(r2, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r2, r1, 0x0, 0xffffffff000) openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x20000, 0x8, 0xa}, 0x18) statx(r1, &(0x7f0000000140)='./file0\x00', 0x800, 0x2, &(0x7f0000000440)) 11:30:22 executing program 7: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:23 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:23 executing program 0: r0 = getpid() r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000180)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x5, 0xff, 0x2, 0x0, 0x401, 0x20140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x80, 0xffff, 0xfffffffc, 0x2, 0x6, 0x0, 0x0, 0x0, 0xa11, 0x0, 0x7}, r1, 0xf, r2, 0x2) r3 = getpid() r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp(r0, r3, 0x0, r4, 0xffffffffffffffff) getpeername(r4, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000200)=0x80) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000240), 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x136c, 0x11, 0x1, 0x70bd25, 0x25dfdbff, {0x1}, [@nested={0x111a, 0xa, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @u32=0x7}, @generic="c53b5fd725408a4fc1fa5e76c7f9afc9002ac8e0437bff8f0318727ac0f18a8a01c8ec993269da930a463b3eb491ffa7185446f605c51bab848a2b2b5979649e893c09e6143561a46a56c25b3ba25827b82a5ec7cb7947130c91371635d2b9a14cd5c749f324ddaed9329f38994785b697676a33a05d276d5003f9dfd3ef9dbb151043a1eb71c3e4efd791", @typed={0x8, 0x74, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="194dbe93e45784fb8cf371d3b80e5ddbff705eebafa03e6c5ec50190b1bc2fc17ee1e51a304541f0ad959064ef6ead5a488b859bd93fcf475259bc9c2379fd361183450e736f20c1efff77bdac50ad19c8a7640ec429f1904756fb4f9e074f2f77384378f192358fa5", @generic="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", @typed={0x8, 0x43, 0x0, 0x0, @u32=0x6}, @generic="c3cbec6eac1d849d2b78"]}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x2}, @nested={0x12d, 0x2, 0x0, 0x1, [@typed={0x40, 0x4f, 0x0, 0x0, @binary="327368d4a0196a3dc0cfc2fad371285fb3aab475e3a2e8bec870347b35c33699289b81cafca338165a7a659b0b868282b2fb730102be75683d02024a"}, @generic="2876d269663f4710c6e00f68564c95", @generic="f066934f37bc2334c33af8f4ba2ea9aae65c53c82a9b70a03aab9e97df63b762cd0a6433665aaf359de69e86f9bcaf2319a8aad03daf33a4b3448e62233c8240d6a4ccf7f39f", @generic="49e5b38d5afdb43620ad2957d664f7184b62b326520bb83977e6d434a9b9b6bc699df79d58179fff618e8efb9cf7460c8a37f386a6f7f8aaf90a7c05ccf6ed4e17b78411c7a133e07c518232cbe745c431cd56a9da5fc22d09cd219b444dc821f88a27f0d8a696712baa9725066c13a56da41db3fa6d189ea043321e044ac289d78a9ada739c3f00e46bd558fad90f0f400971d8"]}, @generic="7f0d604080468f11adad0b75d8a08bfb7f4e513863ee973784d3d9b1809e8b94c507138a0df41bf98d62cb1074e73d3c5b992ae101e39d6c972d54762e607dc3befccbf9970d8bae9776b352541ee21aa8d552cb73198cbd2fe31e3304bc390abf3bccc5883ebde025288c56d0ff6989247cef2cfc216802f31068596e1321d04d68c43429f8a8fd1fe3e8d1ec9d54a72b1525574e4621580ba4f8a0a3249b3acd5d43ee5102a8adb1f0bdb77b3db96d799dc7bbf5650cc408312b904897ef417a74c3123e4114cfd4a6d9529705a6fa60572ae98532caadc2656f8d2f0b2bab4f38c225f0a2d68b210b8433635edef1e390b63dd30680c7", @typed={0x8, 0x4d, 0x0, 0x0, @u32=0x1}]}, 0x136c}, 0x1, 0x0, 0x0, 0x10008014}, 0x44) 11:30:23 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:23 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = dup3(r0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfc, 0x30, 0x1f, 0x80, 0x0, 0x38, 0x4000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x60, 0x5, 0xac1, 0x0, 0x4, 0xf0, 0x8, 0x0, 0x6, 0x0, 0xffffffffffff8000}, 0x0, 0x10, r1, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0xe1, 0x0, 0x0, 0x0, 0xb96, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x100, 0x6, 0x2, 0x9, 0x0, 0x2, 0xc3d6, 0x0, 0xe9, 0x0, 0x3}, 0x0, 0xb, r0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) dup2(r3, r2) 11:30:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, 0x0, 0x0) 11:30:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000040)="80c10000001800000100000000000062c2ac24d58cbf10572f562d00d4d4655f000000000000010080", 0x29, 0x4800}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f847c1b292575b7bfa225437a9542"]) 11:30:23 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2535.625751] udc-core: couldn't find an available UDC or it's busy [ 2535.626895] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 11:30:23 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:23 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2535.732435] 9pnet_virtio: no channels available for device ./file0 [ 2550.610442] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:30:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, 0x0, 0x0) 11:30:46 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x51040, 0x0, 0x7, 0x0, 0x0, 0xa1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r4}) socketpair(0x5, 0xde96fb0227c7b19f, 0x1f, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0}, 0xfffffffffffffffd, 0x80800) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r7, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="0269ace30e42a61524dfa8d7998917f4", 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xd576f88ed35b3bc4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r9, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="d0b290d5bba432063db14618ef1249bce9a1ee2ede48539fc268fd41c5ca45b05b4ab4d943f9659a66bd73b6bf9b7404c404df062efec53d676b4afffb9ea3651fe7b935bfa627b4a850b6145589317325b5cf2a150f9389aa5852c7c3fd77b61d2bb6b2425bbb116db65457b9e86194aebc66662a0baf9fdb8eebcd5ac2dee8aaa3061a2e86d91daef70b278569b2cdfb4788b091c56872595481cdd272a03b802c7565863dc0432ba6f22298a21f37e3e6fedd77a6050a0e25df0dbae262ce995469768e40293df32af3989f87d381d2e6045d5cf40af40f1ae2353cb3850e0bdab02b93b743a8d6ab29b4776d3760", 0xf0}, {&(0x7f0000000300)="ca6630adc6104fcd6c2c2c4b7f32b47c5a68ceeb0f7e93814e2e3c797ef3636837b27e25e0d46f76f38bfb849b2a041ce65ce1447dc4d81f6fea851be9099fbf3d37768e9310c251f3b6ddc3bcaf28f0137e3abdcdbd1851187ab47fe8b11e8d8c7f1ed29c8527a56ea741d018c02aa0a3e79721d2157de3a5a1461aea5892640be0890088fcc4713c4c011dcbda35f13c5a7d2d7d02e3919ae2bc6f6e1cbe3ef65d56b63e8c030d3f2569209403634fcbc3ca7905d48ff4d7dc6382226aa34e16ec6efbe01fc1370f6b350e", 0xcc}, {&(0x7f0000000040)="8064f51ff86fc26f343762b9b979d27728cef497da989d5e48d6cec126d80fcc4b9abb", 0x23}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x10c0}, 0xc10) fcntl$dupfd(r6, 0x406, r8) socket$inet6_icmp(0xa, 0x2, 0x3a) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffff9) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000)) 11:30:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:inetd_child_exec_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000800) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0, 0x1c}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/drm', 0x400740, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) io_submit(r2, 0x3, &(0x7f0000000540)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x6, r4, &(0x7f0000000a80)="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", 0x1000, 0x5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x200, r5, &(0x7f0000000340)="41ea453509dc547b7c995a5453a9b3401e1cb34a4628c6e0d780d1f1545a9514b36da017671e6c20a89504bf7e0296e2dc04d951274c13500e97316139a61db6e946ebe2bfea3e9313cbc8207d9ab86c7568704511c880a41634b21a7c764690e85da9ab1a603f7a124f16cc9c6d689906133efc69f038b4b78ef45ae57206942777a7377466f50a1466a534d4517520960150d1fde2da885a5ff6e3f159d633ad3c8a0a0f035614f30d160a4a8263de5fbe3f4cdc5831ddb2f689f75e8975dacc9b5aa08208518140b328930bae1be0d2", 0xd1, 0x1, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x3, r6, &(0x7f0000000600)="517865b9192ea39ca5d48b3cbfa7d001bbc0898756de8af41ad99a7a09b259c3a17a2aac3ab4ff625244fc3ce0235edff5f2590a05d20b3b851957c5256520af9dd3013a64d5fa5fcc11d07aca5fc97024b5a309390f1b34b60c5d6bc44af9616c118f4a5df32659847c37ce47c8d58e5ef7116db7c3c50000000000004ff001b87b12c4ac464b6a374f0f7c721df73a9211da8ec0eee9aa5bd6f48810929a1e42bd8c78df391351784ee2b43fbbd46918e0", 0xb2, 0x9, 0x0, 0x1, r4}]) 11:30:46 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:46 executing program 0: syz_io_uring_setup(0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, r5+60000000}}, 0x0) setresuid(0x0, 0x0, 0x0) syz_io_uring_submit(r0, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r1}}, 0x0) r6 = dup2(r2, r2) io_uring_enter(r6, 0x5d9d, 0x0, 0x0, 0x0, 0x0) 11:30:46 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:46 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:46 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2559.320694] serio: Serial port tty26 11:30:46 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140), 0x0) 11:30:47 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:30:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="c14d16e60f8d6300444f8a44ff4a4f2ceb65b8a2ea337982a85a81fa042f3c111f5b4a656e07f613faaf0d6b13117fd718bef0fa94a4e09a5fbf1f4eb77f48e0cd8b2c702f5ff11e3c8ab4ec65d1b79ad37b05f96f1b3ea931fe242361dd04d5ee10d696cc0fc668998144d3273d64074f12585c7fdd573845fd333a1858f2a4707d5763d6aca01d3060e051ed200e4f05cb7d382df5fde2075b2ae72c", 0x9d, 0x5}, {&(0x7f0000000240)="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", 0xff, 0x3}, {&(0x7f0000000340), 0x0, 0x81}], 0x8c0400, &(0x7f0000000780)=ANY=[@ANYBLOB='session=0x000000000000005e,gid=', @ANYRESHEX=r0, @ANYBLOB="2c6d61703d6f8bba0000736e616d653d2c6f626a5f747970653d2c666f776e65723c", @ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC=0xee00, @ANYBLOB=',dont_hash,defcontext=user_u,fowner=', @ANYRESDEC, @ANYBLOB="eba928cbaafcf61e89a780ccbe7920d54ba7a23bbf575b568cce", @ANYRESDEC, @ANYBLOB="670e75bb10526a5789fdd675295498165b3c9936bae1140539ff5ee8e4e2ad9ded65ecf9c2b12edb16d657c158dd88049e004ad4cf00000000b7ede5ca5cc7cf5cf51971017df7998c98231e8a1cf89264f0419ebf50353ab142c0e8b120f6e69a246496ea1a9bb0b8deec1a9ec605062d60debaa4f7d5773562be88"]) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x59c382, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file1\x00'}) bind$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) openat(r2, &(0x7f0000000040)='./file1\x00', 0x200080, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendfile(r5, r2, 0x0, 0x7ffffffc) truncate(&(0x7f0000000340)='./file0\x00', 0x0) 11:30:47 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2573.908825] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:31:09 executing program 3: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x4, 0xffffffe1, 0x0, 0x5, "77004a6efdff00", 0xffffffff}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x22003, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x2) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fallocate(r1, 0x11, 0x30000, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) dup3(r2, r3, 0x80000) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) 11:31:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140), 0x0) 11:31:09 executing program 6: r0 = dup(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000040)="ccaa04b85b1de479", 0x8, 0x2000000000000) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x800, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x125063, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2001020, 0x0) 11:31:09 executing program 0: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x10, 0x0, 0x7}}, 0x14) fork() 11:31:09 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:09 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:09 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:09 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:09 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2582.449402] hpet: Lost 1 RTC interrupts 11:31:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1830c1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1001000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f00000002c0)={"1ff134ffd3e8680d38f004a1", &(0x7f0000000200)="e8cc5920c578734555b566c587058da1d686a9dc4179fa2b55248c6b", 0x1c, 0x5f, &(0x7f0000000240)={0x6, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, "db610289", 0x20, "27aebd05", 0x8, 0x0, 0x5, "e99336", "7353f78fecd04b0801e30e8eeccbf8561e5c64727b44150e97451e2a7cb52d6cf66e8073ae14fcf55119c43749a4"}, 0x3, 0x0, 0x7, &(0x7f0000000280)}) copy_file_range(r6, &(0x7f0000000100)=0x7ff, r1, &(0x7f0000000180), 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0}) 11:31:10 executing program 0: rt_sigprocmask(0x1, &(0x7f0000000040), 0x0, 0x8) pselect6(0x40, &(0x7f0000000000)={0xc58, 0x4, 0x3ff, 0xffffffffffffff7f, 0x6, 0x1, 0x7, 0x6}, &(0x7f0000000080)={0x9, 0x0, 0x81, 0x3, 0x6, 0x9f6, 0x7fff, 0x8}, &(0x7f00000000c0)={0x8, 0x8, 0x6, 0x1000008, 0x6, 0x0, 0x4, 0x8000}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x200]}, 0x8}) 11:31:10 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140), 0x0) 11:31:10 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:10 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:10 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000080)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) quotactl(0x2, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000240)="d822fbc1bf8109df6f05fb7a52b2c4d0aa067bd8cd1d0c2955281a58f9f9b5627d5c399c44324801f006d94d6143b513dc8f1ed9f051a8b6fbb01db1ef7d6e9bcb6d1ac8a2a67aa2b43775bf4275b9adfcdc071b4539df030174dc90d2f0ef9f07f5e982e3e67c5ae9d83a3ab384586198fe1ab257231a2364b6383f09fea9883aefa5e97deea2a05a25af782b16465d9fa589aad4bf4b91ea9a25d61f0d06bcd368db7c46ce58e0c68cec7b8d2a0bf539a58950d2054d9b688b9bc7b115a1a91ed47755d32bf84db31745d3fbfc961e4cde6ad2d64ebda94daf45") name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@isofs_parent={0x14, 0x2, {0x9, 0x8, 0xfffc, 0x7, 0x1, 0xfffffffa}}, &(0x7f0000000180), 0x1000) 11:31:10 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) [ 2582.787715] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2582.905183] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2599.869809] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:31:43 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:43 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:43 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) 11:31:43 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 11:31:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000140)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531", 0x85, 0x4800}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) renameat2(r0, &(0x7f00000000c0)='./file1\x00', r1, &(0x7f00000001c0)='./file1\x00', 0x2) utime(&(0x7f0000000180)='./file1\x00', 0x0) 11:31:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r4, 0xffffffffffffffff, 0x0) r5 = accept$inet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000004680)={0x1488, 0x2c, 0x100, 0x70bd26, 0x25dfdbfd, {0xc}, [@nested={0x1a8, 0x67, 0x0, 0x1, [@generic="79de247d0e82659faf40261cc2aaa646d64539ef783459a8b274abb7af24d922fd8b1299c4d9a03685a359148ea482937d0c065ede9279cfbaa94376e276dcff487ccc163bc836afb3383a7322998904668f41efad5ff62b30719f353a2f0c25e726a0239e8fe54b73d9eca1f7133e3ae56d9d5b47cae6f53e95a122fe13152a55803c8542634c4c5167", @generic, @generic="dd6e8131a5f81f817305c8bd", @generic="d52da83d4de5c687f3f285b48ea3992ad53d2933b50bd385d5912c04468089945e64624d5a7353a890a2d772c6d9eaeee8f658149c", @typed={0x12, 0x1b, 0x0, 0x0, @str='/dev/snapshot\x00'}, @generic="d2fb4ad4affcfb19c40bba815c57522ed5ffde0cd12af7d4db12e81b0d10ba6628088ffb074de663caf8d430f41d65bc2fe5adb11b78a296cbbc50494035a5d169eb031f69ba465c2b5933c986de5fce8598fc12174387b91ccbde42f93ed7a2a20475db07baad6daf9aeb35b618e91144e73a4436a8309fb2951f1d93224594869b81d3133d0a1c4e75588d07662a7443dd83c1393509e30345aa56c766fe2835213cb0198fe62dfd5bb53af27b1cc08169f4429a7019c1eb1a22f8f58f0e705ed1e9e520"]}, @generic="fd54e251d2f18ad37e7a2d1853ebb663d4fb4338835989438c42d90a23f3f043a548ca5f4c3de2805bd8e288a181efde6c659d8269d7c15e81a7daf6f213b3e7c4a3d425ec3b308bfff2623f3560a02da543dd7c75e319c92b540e7644ce4c9163b016d2140e5fec904c79b8c6f21a86c024aa3249253a07ff2b5751f5a95db0a09d75f769e4e7edbf58162c576b9ab156e28eb17b85f2d2dce6c2b31fed47079f7f123aedb4c1bef955507dd76e35d9d9d6a0b51a83a1276c6a1b28859a420724d8cbd0bff8e941873e880c9b7113b25df3f483c821438b00606df2ae", @nested={0x14, 0x7d, 0x0, 0x1, [@typed={0xf, 0x40, 0x0, 0x0, @str='net/psched\x00'}]}, @nested={0x1129, 0x22, 0x0, 0x1, [@typed={0x1004, 0x2f, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x17, 0x0, 0x0, @pid}, @generic="0fec21d4ac63929a54da8830ce6a74edffc81075a96b8b6a393248fea673fa956b4687d14f23bdf061c6be91362618240e9aa558debfaca36e412687e32b60e59cd5740db01183ecc18cc079a2828208b35a6968f2a3dcb400fdc1e94054396046d25a323c3a74f74aa2c3446a1db5a25b4a39b1a8a21475b47ca0aa8f8d357465bccb4ece5c838034608914a3dcb744ee3b802ed8d395c467cfcd801af400c4fe4258a327f54751fd77f22a818378065b854a943e7dc34f33c91c28c2ebe401454871ebc49b0c226c7daf7e0143f5f806db841e58bf72b9507e879753d44a366479de3a3d09842194", @typed={0x8, 0x8e, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x74, 0x0, 0x0, @fd=r6}, @typed={0x8, 0xe, 0x0, 0x0, @fd=r5}, @typed={0xf, 0x2a, 0x0, 0x0, @str='net/psched\x00'}]}, @generic="0c23706052cc4a36628b2bf2722e749dacb49020111a126015fff41ea205f7025eb34c01acabd4605396079cc22b1615d83065d480edf58d7a515103be96e45ca9e7c3f8ff2b1bfd6b997e2e4f6300745a0c1fa2b43fbea2ed61413188b215661cf5ee06ed0f54d17462296859228adad6c40d35580a78227688fdd4535a88580098577038170636e97535dbc1ff6ebbc3f596743965fdad583a3cc6e0aa300a5a0e0e1079b8342cdca612869a775f"]}, 0x1488}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000700)=[{&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f0000000080)=""/171, 0xab}, {&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f00000007c0)=""/196, 0xc4}, {&(0x7f00000004c0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/16, 0x10}, {&(0x7f0000000600)=""/201, 0xc9}], 0x9, 0x200, 0x80000000) dup(0xffffffffffffffff) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3302) [ 2616.388647] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2616.412557] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2616.414025] FAT-fs (loop6): Filesystem has been set read-only 11:31:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) 11:31:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000), 0x0) 11:31:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2616.469166] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2616.484493] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) 11:31:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:44 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:31:44 executing program 0: r0 = perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000340)=""/238, 0xee, 0x2000, &(0x7f0000000000)={0xa, 0x4e21, 0xff, @remote, 0xfffffff7}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x1, 0x2}) r1 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x4, 0x5, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffb9, 0x1, @perf_config_ext={0xffffffff, 0x1}, 0x8028, 0x1, 0x8, 0x4, 0xc70, 0x4, 0x40, 0x0, 0x7, 0x0, 0xf7}, 0x0, 0x0, r0, 0x1) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000005240)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11:31:44 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000002180)={{0x1, 0x1, 0x18}, './file0\x00'}) setxattr$system_posix_acl(&(0x7f0000002280)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x10180, 0x8) syz_mount_image$iso9660(&(0x7f0000002740), &(0x7f0000002780)='./file0\x00', 0x0, 0x4, &(0x7f0000002bc0)=[{0x0}, {&(0x7f0000002980)}, {&(0x7f0000002a40)}, {&(0x7f0000002ac0)="a5", 0x1}], 0x80, &(0x7f0000002c40)={[{@nojoliet}], [{@fsmagic={'fsmagic', 0x3d, 0x1ff}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$}..$'}}]}) 11:31:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2630.938378] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:32:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000001c0)={{r0}, "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"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:32:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)}], 0x1) 11:32:07 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:07 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:07 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed41000000080000dff4655fe0f4655fe0f4655f0000000000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000528017a0dca36f318c9422e2ed9fabce026d2124c0309e641ac13681c321a4534bf6592f8e3a69fffb06852129498436dd38ceb9839bc9c574c93eea920dd693525050f0ce4439f61138ba6ab889ed558cb19ceb4a757f61746332e2c988a9299c56fa442b14bf9ae930d10912fc4bdd70b6be3ff9ffffffbe7e0c000000d214d36e89afc2a5d8533a8c142b4c62ceb9660517710cf9384932fae0e0f2ab97307f94dfb0e6ea4d1264c5733f61b5a9d37cd2b5e9262ea38f64bcc9fc0000000000000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clone3(&(0x7f0000000780)={0x200000, &(0x7f0000000380), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {0x1c}, &(0x7f0000000540)=""/202, 0xca, &(0x7f0000000640)=""/252, &(0x7f0000000740)=[0x0, 0x0], 0x2, {r2}}, 0x58) perf_event_open(0x0, r3, 0x87, 0xffffffffffffffff, 0x0) open_tree(r0, &(0x7f00000001c0)='./file0\x00', 0x80001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) mount$9p_unix(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x40008, &(0x7f0000000980)={'trans=unix,', {[{@noextend}, {@uname={'uname', 0x3d, ']K,'}}, {@afid={'afid', 0x3d, 0x6}}, {@access_any}, {@loose}, {@posixacl}, {}, {@version_L}, {@debug={'debug', 0x3d, 0x3}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@seclabel}]}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000800)={0x0, {}, 0x0, {}, 0x7, 0x4, 0x3, 0x18, "6621dbce8c69832db97c1cf74783e5de89f88c52d6768f01f9c0073ee57e99b5b0d6cbf65a3c61ccff00ef04e9a4b864c604e855b095060f47f80f21a520e832", "41905bea46c142ea8594c25f66c24f34d08bf71ebb56e62525e84a686cfd4157", [0x8, 0x2]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xa, 0x2, 0x80, 0x7, 0x0, 0x1, 0x45000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x200, 0x593, 0x509, 0x4, 0xc62, 0xfffffe01, 0x30, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x2, r4, 0xeb22763bf5be25ce) 11:32:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:07 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r1, 0x0, 0x6, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1b1000, 0x0) ftruncate(r0, 0x1000003) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x7ff}, {0x5}]}, 0x14, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x1a038, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, ')'}, {}, {}, {}, {0x20, 'security.capability\x00'}, {0x20, 'security.capability\x00'}, {0x20, '\x00'}], 0xa, "f30e802bb56bccc83b2f1213bddd697670b6950e605d4ca4ec9d485c494644395a20b08f890e424aef565efc3d1a47b325367d3e03d909f73c017acb71a66d310f93d72de55fd18a808c63b28bc17ae2d2196a8ae6724dd448937d22d650f3c781ae6b71ffd8d2c44f1864a2f3009fc893ff1ffd3fd663b791c3eb5b718fdf9cf44c6d22b1b17f6268805522f16175e10eb21a9b202bf62b96269af454"}, 0xd9) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) 11:32:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)}], 0x1) 11:32:07 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2639.610585] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 11:32:07 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)}], 0x1) [ 2640.277803] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2654.485781] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:32:30 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x21, 0x9, 0x3) copy_file_range(r0, &(0x7f0000000340)=0x6, 0xffffffffffffffff, &(0x7f0000000780)=0x8, 0x3ff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x181000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x4, 0x12, 0x6, 0x9, 0x0, 0x58, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x8, 0x12, 0x9, 0x6, 0x2343, 0x2, 0x7, 0x0, 0x401, 0x0, 0xfffffffffffffffb}, 0x0, 0x4, r1, 0x2) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0xfc, 0x2c, 0x6, 0x1, 0x0, 0x3ff, 0x20102, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7f, 0x1}, 0x1d042, 0x27, 0x7fff, 0x3, 0x7fff, 0xb92, 0x6, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0xc, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000001c80)={0x7, 0x80, 0xffffffff, 0x3, 0xe7}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000007c0)=0x2, 0x4) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001bc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000000800)={0x135c, 0x38, 0x0, 0x70bd2c, 0x25dfdbfb, {0xb}, [@generic="56ba1597d41cae21ec9591f31fec5366d5d73b14d7ff9e239603ddb176e5309ab2e9f8d590b88a04c43c1ac237b3ea3a0f38a370397e116bf0948e0a94727de48441bdd814d986ecfaf9affab3c153b7c4eaf04f829236406708dc2e5febc1c8702ab62034bd9328c3bd100cec220a63a968b32fa57adc845994646d79658b01cad347f9bd6297242900c02829084c1b62bc244c954dcc9714491a8e290c45e91be37bc36923d4fb77cc4aa398b2b0699c6e5d800b4feea9f0efd3599aab49637882f4a1ad277f4f8ab0346b544d20aa5e7abd26d31f09a7c588ac57e7f53d0962e0798b6afc81b6073f7574951b9553df0209240b3b18", @typed={0x4, 0x8}, @nested={0x174, 0x28, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid=r4}, @typed={0xc, 0x8f, 0x0, 0x0, @u64}, @typed={0x8, 0x6, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="61d590053cc24000a10cb3b01871756928dc057c92aee878019c49cf0aef27dd6c5843e8eccb6e8e2a7b4986f6a5610a8e188dfd7abcb0e5a5", @generic="2f539c1e1e0a57907e90b7244fb8a901a04e2abd5e04aa624f84234b47670a02599fdf505d1579efee5d721f59860fe849da3c8789c72832e80d1ed45f5f26efd12652fda981e3ef44dafc1c150221a8303c2d2097d922573a5bc95effe2bc93b5de29e005b6b85f3473124cca5e8d2196", @generic="202ff5c9c99a63bfe303d54c7c2f11a1ae4ed9973540e9d8c1cc0508612c8dde18cd589dd61d93082159d06205c63fadd2896846c312d9d45f0c7a067572658bcd55bb8155fe63e122a9c940bd72e25df0bb5a123532ed5d82aae2894d0f3c75043cf6df22bdd69c4ecb1734b3a66852010d49228cae04f0cf95b2dd96b6fccba84ee4c90010638e10fe585ada0c92ab1cf2b1afd2c93965a446e4824202d7071efa"]}, @typed={0x1004, 0x5e, 0x0, 0x0, @binary="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"}, @nested={0xd1, 0x84, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x15, 0x0, 0x0, @uid=0xee00}, @generic="ae", @typed={0x8, 0x8e, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="38981502f1b35fd5d90da5088365d4052a4b25e8814ad521509771d2ac2f3db0462b170efdee73cd1125e9a0205d8daba7cc043f498be0b4e19b99dd88c2a31222b3f26a849f2c100cde2b1b85a79c57f8a313e3d4b8e486ce752e7fc90ce3cc26675cf5d8d3810b3e4d0c95c2bc2f731acb765b0b3a88ea3835df95222fd149bef28f4678374e946eed610914bc1c6e1cc91c0a3ff539640c7dba863f9af0c4bf136a0d548d84d671a8431fefd07f0ca7fe0112"]}]}, 0x135c}}, 0x4000800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de633978e406768", 0x9d, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}, {&(0x7f0000000280)="936a669b1d372a04c183fbffe460a179979c79bb76239a5b2076d985d2660dbec22a0689b9f51d0630adbd66119bf2c17468725b995fd1943dfd7dac63079b813ee90f0f98f7f08bbb38852d8f7a393ef34c79a33fb3b3fcaac68ffc24caa32774ac0da285fafbf9b06b64eca8ca92789b69edfe964ddd7285609032ba373cf214c81100edc1afaa24c94c05d67ad400c0865a56f9af28a3cf87", 0x9a}], 0x400, &(0x7f0000000180)) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000380)={'lo\x00', 0x8}) 11:32:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda", 0xc}], 0x1) 11:32:30 executing program 0: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x0, 0x3, 0x8, 0x7, 0x64, "e43b0bea01b7153900c4e6b956032d7f76f8ce773267b634718ce9a7087bfc78d98137c56d34b65f045974839a905414e452c1d74b3a5947d81909b8d7902f3ccd273733ee4ebb6545bccad67070b296931ace18f6b2cd3aefe9c853c3b526b850c397fd"}, 0x6d, 0x2) clone3(&(0x7f0000001e40)={0x100000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:32:30 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda", 0xc}], 0x1) 11:32:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f00000001c0)=""/100, &(0x7f0000000140)=0x64) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x3f) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="601c6d6b647f73662a7b3b00088101000240000004f8", 0x16}, {0x0, 0x0, 0x1800}], 0x8080, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f615bb34a0031c661cf664a377870adb440a027"]) 11:32:30 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:30 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2677.559279] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:32:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda", 0xc}], 0x1) 11:32:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001200010100000000000000000000000008000002000000001800008014001d00fe8000"/52], 0x34}}, 0x0) 11:32:53 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:53 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xffff]}, 0x8) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'veth1_to_hsr\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004040)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x20000000) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) 11:32:53 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:53 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2686.247390] netlink: 'syz-executor.6': attribute type 29 has an invalid length. [ 2686.248751] netlink: 'syz-executor.6': attribute type 29 has an invalid length. 11:32:53 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:32:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:53 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:32:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89a", 0x12}], 0x1) 11:32:53 executing program 0: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x100) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) io_uring_enter(r3, 0x7068, 0xe526, 0x1, &(0x7f0000000180)={[0x7]}, 0x8) dup3(r4, r0, 0x80000) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@orangefs_parent={0x28, 0x2, {{"b4e8046691730b5748aec6d01a81e69b", 0x3f}, {"a18dc8c87ff16350f01d264ad3fe199a"}}}, 0x0) 11:32:53 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = gettid() r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000180)) clone3(&(0x7f0000000400)={0x4122000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200), {0xa}, &(0x7f0000000240)=""/204, 0xcc, &(0x7f0000000340)=""/80, &(0x7f00000003c0)=[r3, r2], 0x2}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) rt_sigqueueinfo(r4, 0x2c, &(0x7f0000000500)={0x3e, 0x4000, 0x1}) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x21, 0x1f, 0x80, 0x3, 0x0, 0xd6, 0x40040, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x1}, 0x10, 0xff, 0x835, 0x6, 0x1, 0x100, 0xdf4, 0x0, 0x13d, 0x0, 0x7fff}, r2, 0x5, r0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2, 0x10001, 0xfffffff9, 0x6, 0x6, r1}) 11:32:54 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2700.875376] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:33:16 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:16 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x400000005e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 11:33:16 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) close(r1) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='/dev/urandom\x00', &(0x7f0000000100)='\\.^#/\x00', &(0x7f0000000140)='\x02^-\x00'], &(0x7f00000003c0)=[&(0x7f00000001c0)='/dev/urandom\x00', &(0x7f0000000200)='/dev/urandom\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='/dev/urandom\x00', &(0x7f0000000300)='\'*.\x00', &(0x7f0000000340)=']\x02)(\x00', &(0x7f0000000380)='*\x00'], 0x1100) 11:33:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89a", 0x12}], 0x1) 11:33:16 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:16 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:16 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 11:33:17 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:17 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2709.440087] FAULT_INJECTION: forcing a failure. [ 2709.440087] name failslab, interval 1, probability 0, space 0, times 1 [ 2709.442054] CPU: 0 PID: 15107 Comm: syz-executor.2 Not tainted 5.10.123 #1 [ 2709.443075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2709.444734] Call Trace: [ 2709.445123] dump_stack+0x107/0x163 [ 2709.445645] should_fail.cold+0x5/0xa [ 2709.446199] should_failslab+0x5/0x10 [ 2709.446776] kmem_cache_alloc_bulk+0x4b/0x320 [ 2709.447433] io_submit_sqes+0x11c2/0x2310 [ 2709.448055] ? __lockdep_reset_lock+0x180/0x180 [ 2709.448809] ? perf_trace_lock+0xac/0x490 [ 2709.449450] ? io_queue_sqe+0x1020/0x1020 [ 2709.450155] ? __do_sys_io_uring_enter+0x107b/0x1900 [ 2709.451019] ? mutex_lock_io_nested+0x1110/0x1110 [ 2709.451726] ? percpu_ref_tryget_many+0x167/0x290 [ 2709.452528] __do_sys_io_uring_enter+0x1086/0x1900 [ 2709.453210] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2709.453915] ? io_sq_thread+0x1640/0x1640 [ 2709.454536] ? wait_for_completion+0x270/0x270 [ 2709.455278] ? rcu_read_lock_any_held+0x69/0x90 [ 2709.455958] ? vfs_write+0x354/0xa20 [ 2709.456496] ? fput_many+0x2f/0x1a0 [ 2709.457020] ? ksys_write+0x1a5/0x250 [ 2709.457580] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2709.458307] do_syscall_64+0x33/0x40 [ 2709.458879] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2709.459671] RIP: 0033:0x7f73f91d6b19 [ 2709.460208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.462886] RSP: 002b:00007f73f674c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2709.463968] RAX: ffffffffffffffda RBX: 00007f73f92e9f60 RCX: 00007f73f91d6b19 [ 2709.464998] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2709.466019] RBP: 00007f73f674c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2709.467147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2709.468176] R13: 00007ffcaebdc7ef R14: 00007f73f674c300 R15: 0000000000022000 [ 2709.469461] hpet: Lost 1 RTC interrupts 11:33:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89a", 0x12}], 0x1) 11:33:17 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:17 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:17 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000000100)="0200000003000100040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESOCT, @ANYBLOB="fe6794db9be34c54b616745b4b1500265e40bed7b5d9b8d2ea3e119e982eb7cf1bc331512d26a2e6bbed5bed677fcd4c9c6f95702b141f7b6e458435b007c116976c07aea47b7112629e", @ANYBLOB="6415cb67595d99c497a753b8a1a7428208c19500000000000000"]) chdir(&(0x7f00000000c0)='./file0\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r1, 0x9, 0xbbe, 0x2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='e1\x00'/16]) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40082, 0x13e) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="c6d268820e29fac114d11d572fcd29074e02001e52a43cbc113ee87b363ff3bf32c8634370f653e5570cd93828c5c2acbec1058e26638271d77cfec347070c4ab2b59a8f842deebcf9c4debdcf78ff0f4b44934cbdd5433e29bb4d462dae71336a1d07c1abc30349dd9c68c342623f0a489003d5f229d4b5d998a0a479f455b9e04982d4070000000000000066538665949ad8f702201429c0f1f72ea382ab634d9a01b6bbea1001000000000000d618e17928d3"]) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x86) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fsetxattr$security_capability(r3, &(0x7f0000000340), &(0x7f0000000380)=@v2, 0x14, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000000)={0x7}, 0x7) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000140)) fallocate(r3, 0x0, 0x0, 0x2) 11:33:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2709.673785] EXT4-fs (loop6): Unrecognized mount option "0000000000000000000000300000000000000000003000000000000000000000030000000000000000000000301777777777777777777777þg”Û›ãLT¶t[K" or missing value [ 2724.001273] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:33:41 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a", 0x15}], 0x1) 11:33:41 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 11:33:41 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100000, 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0x0) 11:33:41 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$notify(r0, 0x402, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1480, 0x4000000000000000, 0x1, 0x7, 0xd0c}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 'X_;', 0x7f, 0x9}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000100)="82d2d3516b08152e65514e7ac05053f9204bc17209e9386b3644a7df0cbd7c1c2b9d14995a16727be21815b236cc8e9bce13424e3c6d2edbbccedebc2d7d466db4d1e7bd1f0bbd260153150c640a496e19e2784e45df7d6723174c8694a7bccbc8e40ab6badf91590ed0b1e0f524953458b4ac924e6ed08f5911637b2938355b8780ce2398b90ea1") close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x1c}}, 0x20008850) [ 2733.922441] FAULT_INJECTION: forcing a failure. [ 2733.922441] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2733.924745] CPU: 1 PID: 15185 Comm: syz-executor.2 Not tainted 5.10.123 #1 [ 2733.925720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2733.927409] Call Trace: [ 2733.927831] dump_stack+0x107/0x163 [ 2733.928399] should_fail.cold+0x5/0xa [ 2733.928966] _copy_from_user+0x2e/0x1b0 [ 2733.929534] kstrtouint_from_user+0xbd/0x220 [ 2733.930163] ? kstrtou8_from_user+0x200/0x200 [ 2733.930863] ? lock_acquire+0x197/0x490 [ 2733.931495] ? ksys_write+0x12d/0x250 [ 2733.932052] proc_fail_nth_write+0x78/0x220 [ 2733.932677] ? proc_task_getattr+0x1e0/0x1e0 [ 2733.933393] ? __fget_files+0x296/0x480 [ 2733.933966] ? proc_task_getattr+0x1e0/0x1e0 [ 2733.934766] vfs_write+0x29a/0xa20 [ 2733.935289] ksys_write+0x12d/0x250 [ 2733.935813] ? __ia32_sys_read+0xb0/0xb0 [ 2733.936407] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2733.937091] do_syscall_64+0x33/0x40 [ 2733.937670] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2733.938449] RIP: 0033:0x7f73f91895ff [ 2733.938968] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2733.941810] RSP: 002b:00007f73f672b170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2733.942864] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f73f91895ff [ 2733.943930] RDX: 0000000000000001 RSI: 00007f73f672b1e0 RDI: 0000000000000004 [ 2733.944974] RBP: 00007f73f672b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2733.945973] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2733.946994] R13: 00007ffcaebdc7ef R14: 00007f73f672b300 R15: 0000000000022000 11:33:41 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a", 0x15}], 0x1) 11:33:41 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {0x0}, {0x0, 0x0, 0x1000000000c00}], 0x0, &(0x7f0000012b00)=ANY=[]) 11:33:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000280)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53efdfff00000000e1f4655f000000000100000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000180)) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='incremental-fs\x00', 0x1008, 0x0) 11:33:41 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a", 0x15}], 0x1) 11:33:41 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2734.208073] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 11:33:41 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2734.226060] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended 11:33:41 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2734.265473] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 11:33:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:56 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x0) ftruncate(r1, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x111000, 0xb8) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x50f, 0x1000, 0x1, 0xeb6, 0x8000}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x28020600) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @unused=[0xae34, 0x100, 0x6, 0xc2], @name="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"}) unshare(0x48020200) 11:33:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}], 0x1) 11:33:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000007c0)=0x2, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2b4, r1, 0x104, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1e66607, 0x67}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_KEYS={0x184, 0x51, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x11, 0x4, "92fb588a77b765a8f769fa4896"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xa, 0x4, "05ff9daef722"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0253d233b2"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "a5f305982d32d34486"}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0x7, 0x4, "c0453c"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9c0809975a40b12c2adf29e3d9"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "85f5b626ab"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '#KSXa'}, @NL80211_KEY_SEQ={0x9, 0x4, "d9ee0509fd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0x10f403}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d4f2c5fc9f"}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7bc534d58e7f06853092e2ea70"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_IE={0xf5, 0x2a, [@preq={0x82, 0x36, @ext={{0x1, 0x0, 0x1}, 0x3f, 0x1, 0x7, @device_b, 0x0, @device_b, 0x7f, 0x400, 0x2, [{{0x1, 0x0, 0x1}, @device_b, 0x6}, {{}, @device_b, 0xfffffffd}]}}, @fast_bss_trans={0x37, 0xae, {0x8, 0x7, "f51ece104db75514424f94d41a118ba6", "8f085d894191d6e2d7c885b9761510bc86fc430c6269fb2c3a4ad643c218acf8", "911b85d2eff96e9351b742d8bf5a31e2d1c235d8c6865fdee30cce435dcd22fd", [{0x2, 0x10, "f8f53a615382f5309ba5f371aff6f664"}, {0x4, 0x5, "1c9b8ea623"}, {0x2, 0x5, "5b1f1fd1d7"}, {0x3, 0x13, "3783c8c0fb296e750e81a3a67366842960ae4f"}, {0x2, 0x3, "86ec2f"}, {0x4, 0x1, '\\'}, {0x2, 0x1d, "e516e4da105f672fd7f650f85d03d3c16401a0cf3aec8965696ebdf5c4"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x81, 0x81}}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x1) 11:33:56 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:56 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:33:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}], 0x1) 11:33:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2749.285403] Process accounting resumed [ 2749.387365] Process accounting resumed [ 2763.218507] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:34:19 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf255700000006009500010400000600950004000000"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000c1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6f66732e66617400020820000400008000f8000020004000030000f94d00000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000180)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r7, 0x4) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) 11:34:19 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14e1, 0x6000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) syz_io_uring_setup(0x1d31, &(0x7f0000000080)={0x0, 0xcf96, 0x8, 0x2, 0x3d8, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 11:34:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}], 0x1) 11:34:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 11:34:19 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:19 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:19 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:19 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:19 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 1) 11:34:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:19 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2771.695851] FAULT_INJECTION: forcing a failure. [ 2771.695851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2771.697709] CPU: 1 PID: 15360 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2771.698689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2771.700288] Call Trace: [ 2771.700745] dump_stack+0x107/0x163 [ 2771.701250] should_fail.cold+0x5/0xa [ 2771.701837] _copy_from_user+0x2e/0x1b0 [ 2771.702403] iovec_from_user+0x139/0x3f0 [ 2771.702989] __import_iovec+0x67/0x590 [ 2771.703546] ? SOFTIRQ_verbose+0x10/0x10 [ 2771.704162] ? __lockdep_reset_lock+0x180/0x180 [ 2771.704844] import_iovec+0x83/0xb0 [ 2771.705461] vfs_writev+0xc1/0x5e0 [ 2771.706000] ? vfs_iter_write+0xa0/0xa0 [ 2771.706558] ? __fget_files+0x26d/0x480 [ 2771.707103] ? lock_downgrade+0x6d0/0x6d0 [ 2771.707708] ? find_held_lock+0x2c/0x110 [ 2771.708315] ? __fget_files+0x296/0x480 [ 2771.708972] ? __fget_light+0xea/0x280 [ 2771.709530] do_writev+0x27f/0x300 [ 2771.710045] ? vfs_writev+0x5e0/0x5e0 [ 2771.710666] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2771.711384] do_syscall_64+0x33/0x40 [ 2771.711957] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2771.712761] RIP: 0033:0x7f2bfaa5ab19 [ 2771.713306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2771.716053] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2771.717255] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2771.718289] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2771.719339] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.720420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2771.721478] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:34:19 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:19 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 11:34:19 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2771.814830] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2772.022745] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 11:34:34 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:34:34 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:34 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0xffffffffffffffdd}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) [ 2786.500469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 11:34:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="0100ff0700000000e6ffffff9096095c6845ca08b5a4deda9fffb3205222ae499cf79f2dd10f1a834a25e067fd7ec0fd6cd43fce980cbe3bcc56d9f000bef48fd7aef7e57c2264dee5501c41428ba94199631e3321263f5ee28bfe11d4ce6b31ac44cfcb0184bb19af0fe48cd6f5877a8a4170d961772da7d4da4dc58e2516dd78ac1ff125a8a73fe44d680563099ae14391856f8e190814f34178a57e4ffd609601148b8a493a906439071caa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) execveat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='*..\xdb.\x00'], &(0x7f0000000100), 0x400) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 11:34:34 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:34 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x40000000, 0x0, 0x0, 0x0) 11:34:34 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 2) [ 2786.516652] FAULT_INJECTION: forcing a failure. [ 2786.516652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2786.518854] CPU: 0 PID: 15415 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2786.519882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2786.521540] Call Trace: [ 2786.521937] dump_stack+0x107/0x163 [ 2786.522482] should_fail.cold+0x5/0xa [ 2786.523051] _copy_from_user+0x2e/0x1b0 [ 2786.523636] input_event_from_user+0x1dd/0x280 [ 2786.524337] ? input_devices_seq_show+0xfd0/0xfd0 [ 2786.525078] evdev_write+0x257/0x410 [ 2786.525615] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2786.526374] ? security_file_permission+0x24e/0x570 [ 2786.527105] do_iter_write+0x47e/0x670 [ 2786.527685] ? import_iovec+0x83/0xb0 [ 2786.528264] vfs_writev+0x1aa/0x5e0 [ 2786.528803] ? vfs_iter_write+0xa0/0xa0 [ 2786.529483] ? __fget_files+0x26d/0x480 [ 2786.530053] ? lock_downgrade+0x6d0/0x6d0 [ 2786.530650] ? find_held_lock+0x2c/0x110 [ 2786.531261] ? __fget_files+0x296/0x480 [ 2786.531897] ? __fget_light+0xea/0x280 [ 2786.532450] do_writev+0x27f/0x300 [ 2786.532960] ? vfs_writev+0x5e0/0x5e0 [ 2786.533449] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2786.534125] do_syscall_64+0x33/0x40 [ 2786.534669] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2786.535399] RIP: 0033:0x7f2bfaa5ab19 [ 2786.535976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2786.538593] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2786.539704] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2786.540797] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2786.541870] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2786.542937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2786.544008] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2786.545250] hpet: Lost 1 RTC interrupts 11:34:34 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:34 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2786.566441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 11:34:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000080)) 11:34:34 executing program 6: unshare(0x24000200) unshare(0x28000000) unshare(0x2000800) [ 2786.631519] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 11:34:34 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) [ 2786.667503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 11:34:34 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2801.177676] FAULT_INJECTION: forcing a failure. [ 2801.177676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2801.179482] CPU: 0 PID: 15461 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2801.180512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2801.182260] Call Trace: [ 2801.182670] dump_stack+0x107/0x163 [ 2801.183305] should_fail.cold+0x5/0xa [ 2801.183878] _copy_from_user+0x2e/0x1b0 [ 2801.184490] input_event_from_user+0x1dd/0x280 [ 2801.185166] ? input_devices_seq_show+0xfd0/0xfd0 [ 2801.185927] evdev_write+0x257/0x410 [ 2801.186485] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2801.187267] ? security_file_permission+0x24e/0x570 [ 2801.188055] do_iter_write+0x47e/0x670 [ 2801.188643] ? import_iovec+0x83/0xb0 [ 2801.189222] vfs_writev+0x1aa/0x5e0 [ 2801.189767] ? vfs_iter_write+0xa0/0xa0 [ 2801.190338] ? __fget_files+0x26d/0x480 [ 2801.190899] ? lock_downgrade+0x6d0/0x6d0 [ 2801.191499] ? find_held_lock+0x2c/0x110 [ 2801.192125] ? __fget_files+0x296/0x480 [ 2801.192735] ? __fget_light+0xea/0x280 [ 2801.193320] do_writev+0x27f/0x300 [ 2801.193849] ? vfs_writev+0x5e0/0x5e0 [ 2801.194433] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2801.195151] do_syscall_64+0x33/0x40 [ 2801.195703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2801.196483] RIP: 0033:0x7f2bfaa5ab19 [ 2801.197007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2801.199738] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2801.200921] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2801.201968] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2801.202982] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2801.204049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2801.205093] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2801.206425] hpet: Lost 1 RTC interrupts 11:34:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 3) 11:34:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:48 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:48 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:48 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 11:34:48 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 11:34:48 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 11:34:48 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:48 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2801.273510] FAULT_INJECTION: forcing a failure. [ 2801.273510] name failslab, interval 1, probability 0, space 0, times 0 [ 2801.275315] CPU: 1 PID: 15477 Comm: syz-executor.1 Not tainted 5.10.123 #1 [ 2801.276355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2801.278052] Call Trace: [ 2801.278466] dump_stack+0x107/0x163 [ 2801.279010] should_fail.cold+0x5/0xa [ 2801.279711] should_failslab+0x5/0x10 [ 2801.280297] kmem_cache_alloc_bulk+0x4b/0x320 [ 2801.280975] io_submit_sqes+0x11c2/0x2310 [ 2801.281590] ? __lockdep_reset_lock+0x180/0x180 [ 2801.282271] ? perf_trace_lock+0xac/0x490 [ 2801.282902] ? io_queue_sqe+0x1020/0x1020 [ 2801.283566] ? __do_sys_io_uring_enter+0x107b/0x1900 [ 2801.284369] ? mutex_lock_io_nested+0x1110/0x1110 [ 2801.285082] ? percpu_ref_tryget_many+0x167/0x290 [ 2801.285825] __do_sys_io_uring_enter+0x1086/0x1900 [ 2801.286562] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2801.287322] ? io_sq_thread+0x1640/0x1640 [ 2801.287931] ? wait_for_completion+0x270/0x270 [ 2801.288698] ? rcu_read_lock_any_held+0x69/0x90 [ 2801.289384] ? vfs_write+0x354/0xa20 [ 2801.289923] ? fput_many+0x2f/0x1a0 [ 2801.290436] ? ksys_write+0x1a5/0x250 [ 2801.290960] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2801.291669] do_syscall_64+0x33/0x40 [ 2801.292241] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2801.292994] RIP: 0033:0x7f7f64477b19 [ 2801.293567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2801.296467] RSP: 002b:00007f7f619ed188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2801.297590] RAX: ffffffffffffffda RBX: 00007f7f6458af60 RCX: 00007f7f64477b19 [ 2801.298644] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2801.300747] RBP: 00007f7f619ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2801.301807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2801.302858] R13: 00007ffff882212f R14: 00007f7f619ed300 R15: 0000000000022000 11:34:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:48 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0) 11:34:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) listen(0xffffffffffffffff, 0x100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) dup2(r1, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000002c0)="44bba53f47f408116653680158e9d27e", 0xfffffffffffffc9b) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f0000000000)=0x6, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x100000000, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x5, @empty, 0x9}}, 0x0, 0x0, 0xa, 0x0, "7a960683a0a005eba1efde10bfa205b93d328a96a63751329d712aab2d2cdc08f2fef6ebc9ebc731dbcac875a1e22960dbf9e33d60df773afca4381b6e7d9a298969a8930865e82d636b31dd6933e386"}, 0xd8) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000080)) 11:34:48 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:49 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 11:34:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:34:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 4) 11:34:49 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2801.490175] FAULT_INJECTION: forcing a failure. [ 2801.490175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2801.492601] CPU: 0 PID: 15525 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2801.493649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2801.495347] Call Trace: [ 2801.495755] dump_stack+0x107/0x163 [ 2801.496353] should_fail.cold+0x5/0xa [ 2801.496931] _copy_from_user+0x2e/0x1b0 [ 2801.497529] input_event_from_user+0x1dd/0x280 [ 2801.498269] ? input_devices_seq_show+0xfd0/0xfd0 [ 2801.499005] evdev_write+0x257/0x410 [ 2801.499566] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2801.500378] ? security_file_permission+0x24e/0x570 [ 2801.501136] do_iter_write+0x47e/0x670 [ 2801.501731] ? import_iovec+0x83/0xb0 [ 2801.502292] vfs_writev+0x1aa/0x5e0 [ 2801.502849] ? vfs_iter_write+0xa0/0xa0 [ 2801.503450] ? __fget_files+0x26d/0x480 [ 2801.504072] ? lock_downgrade+0x6d0/0x6d0 [ 2801.504694] ? find_held_lock+0x2c/0x110 [ 2801.505331] ? __fget_files+0x296/0x480 [ 2801.505943] ? __fget_light+0xea/0x280 [ 2801.506539] do_writev+0x27f/0x300 [ 2801.507079] ? vfs_writev+0x5e0/0x5e0 [ 2801.507658] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2801.508434] do_syscall_64+0x33/0x40 [ 2801.509002] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2801.509784] RIP: 0033:0x7f2bfaa5ab19 [ 2801.510351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2801.513138] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2801.514287] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2801.515356] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2801.516445] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2801.517513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2801.518585] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:34:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2801.519893] hpet: Lost 1 RTC interrupts [ 2801.526733] FAULT_INJECTION: forcing a failure. [ 2801.526733] name failslab, interval 1, probability 0, space 0, times 0 [ 2801.528518] CPU: 0 PID: 15517 Comm: syz-executor.1 Not tainted 5.10.123 #1 [ 2801.529580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2801.531263] Call Trace: [ 2801.531671] dump_stack+0x107/0x163 [ 2801.532230] should_fail.cold+0x5/0xa [ 2801.532784] ? create_object.isra.0+0x3a/0xa20 [ 2801.533450] should_failslab+0x5/0x10 [ 2801.534018] kmem_cache_alloc+0x5b/0x350 [ 2801.534604] create_object.isra.0+0x3a/0xa20 [ 2801.535261] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2801.536073] kmem_cache_alloc_bulk+0x168/0x320 [ 2801.536753] io_submit_sqes+0x11c2/0x2310 [ 2801.537388] ? __lockdep_reset_lock+0x180/0x180 [ 2801.538088] ? perf_trace_lock+0xac/0x490 [ 2801.538715] ? io_queue_sqe+0x1020/0x1020 [ 2801.539301] ? __do_sys_io_uring_enter+0x107b/0x1900 [ 2801.540086] __do_sys_io_uring_enter+0x1086/0x1900 [ 2801.540811] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2801.541544] ? io_sq_thread+0x1640/0x1640 [ 2801.542162] ? wait_for_completion+0x270/0x270 [ 2801.542845] ? rcu_read_lock_any_held+0x69/0x90 [ 2801.543507] ? vfs_write+0x354/0xa20 [ 2801.544071] ? fput_many+0x2f/0x1a0 [ 2801.544600] ? ksys_write+0x1a5/0x250 [ 2801.545158] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2801.545867] do_syscall_64+0x33/0x40 [ 2801.546432] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2801.547153] RIP: 0033:0x7f7f64477b19 [ 2801.547698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2801.550428] RSP: 002b:00007f7f619ed188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2801.551504] RAX: ffffffffffffffda RBX: 00007f7f6458af60 RCX: 00007f7f64477b19 [ 2801.552547] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2801.553617] RBP: 00007f7f619ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2801.554675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2801.555723] R13: 00007ffff882212f R14: 00007f7f619ed300 R15: 0000000000022000 [ 2801.557002] hpet: Lost 1 RTC interrupts 11:34:49 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 11:34:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000140)=""/254, 0x7fffefc8}], 0x2) 11:35:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:03 executing program 6: r0 = syz_io_uring_setup(0x1ec8, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0xb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000002c0), 0x0) r1 = syz_io_uring_setup(0x7a5c, &(0x7f0000000100)={0x0, 0x3f16, 0x1, 0x0, 0x2af, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00'/16]) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) r5 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$cgroup_ro(r2, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) io_uring_enter(r6, 0x6705, 0x706a, 0x1, &(0x7f0000000400)={[0xfffffffffffffffc]}, 0x8) execveat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x1000) setxattr$incfs_size(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000380)=0x6, 0x8, 0x3) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r7, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000006c0)={0x880, &(0x7f0000000440)=0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0), {0x21}, &(0x7f0000000580)=""/244, 0xf4, &(0x7f0000000500)=""/44, &(0x7f0000000680)=[r5, r5, r5], 0x3, {r3}}, 0x58) ppoll(&(0x7f0000000740)=[{0xffffffffffffffff, 0x20}, {r4}, {r1, 0x1090}, {r4, 0x10}, {r6, 0x1000}, {r7, 0x8}, {r3, 0x42}, {r3, 0xa480}, {r1, 0xa0}, {r8, 0x404}], 0xa, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800), 0x8) 11:35:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 5) 11:35:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 11:35:03 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0) [ 2815.883451] FAULT_INJECTION: forcing a failure. [ 2815.883451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2815.885396] CPU: 1 PID: 15582 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2815.886423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2815.888111] Call Trace: [ 2815.888536] dump_stack+0x107/0x163 [ 2815.889219] should_fail.cold+0x5/0xa [ 2815.889789] _copy_from_user+0x2e/0x1b0 [ 2815.890385] input_event_from_user+0x1dd/0x280 [ 2815.891060] ? input_devices_seq_show+0xfd0/0xfd0 [ 2815.891775] evdev_write+0x257/0x410 [ 2815.892361] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2815.893126] ? security_file_permission+0x24e/0x570 [ 2815.893870] do_iter_write+0x47e/0x670 [ 2815.894451] ? import_iovec+0x83/0xb0 [ 2815.895017] vfs_writev+0x1aa/0x5e0 [ 2815.895549] ? vfs_iter_write+0xa0/0xa0 [ 2815.896132] ? __fget_files+0x26d/0x480 [ 2815.896726] ? lock_downgrade+0x6d0/0x6d0 [ 2815.897334] ? find_held_lock+0x2c/0x110 [ 2815.897948] ? __fget_files+0x296/0x480 [ 2815.898540] ? __fget_light+0xea/0x280 [ 2815.899116] do_writev+0x27f/0x300 [ 2815.899642] ? vfs_writev+0x5e0/0x5e0 [ 2815.900214] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2815.900932] do_syscall_64+0x33/0x40 [ 2815.901490] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2815.902251] RIP: 0033:0x7f2bfaa5ab19 [ 2815.902795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.905622] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2815.906741] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2815.907786] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2815.908855] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2815.909905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2815.910962] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:35:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001280)='gid_map\x00') readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/35, 0x23}, {&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000200)=""/169, 0xa9}], 0x5) 11:35:03 executing program 6: r0 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=']$+[\'%.-{\x00', 0xfffffffffffffff9) request_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='\xeb\x00', 0x0) r1 = add_key(0x0, 0x0, 0x0, 0x0, r0) r2 = request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\xeb\x00', r1) keyctl$get_persistent(0x16, 0xffffffffffffffff, r2) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:35:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:17 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x196) io_uring_setup(0x38dc, &(0x7f0000000100)={0x0, 0x6c2a, 0x4, 0x1, 0x308}) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xfdef) fallocate(r0, 0x10, 0xe3ff, 0x8000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="1e12000000dbdb72973e094585040800"]) write$cgroup_pressure(r1, &(0x7f0000000000)={'some', 0x20, 0x1, 0x20, 0x200}, 0x2f) 11:35:17 executing program 0: mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x4, 0x5, &(0x7f0000000440)=[{&(0x7f0000000540)="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", 0x1000, 0x200}, {&(0x7f0000001540)="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", 0x1000, 0x5}, {&(0x7f0000000240)="6f0d2d0da23a3450e40ed9580580685aa0326a6418730fd41ef346d2d1b281a9275c0c2156caf92733d3dc9486cdb81328b00933e8e5bfbdbbdb6fc65996a0add2d75d0d4a0867ced2e9c23ca53a78925e1d060ec99e3a14a70a55f0f044f38b1f49f1e4b1ebc17e0e69bc60006a1db5865ebfdd8f82cfeb6e24bc43ffaf7638cf85871dd88a286e26720b3960645af61d0a4c0d58dae8d5e9b9e4140a4bf551db428f0ce0ade9fd850a337d94dc06fd419a7bec92841bb7ab3a51d4fba22f9e3f790adfcd86828a5efb829d57a435bea96d5cea8168b1a76594ea", 0xdb, 0x4}, {&(0x7f0000000340)="507eafaf040a4c1d72f776ca0461b5d36fd846dad9a8f438cb894cb4ca82468f0549087da378d1016db8f5fe19a0edb0b061d22878a2ff3f790c6f56ac9ffdbbb151f2d56b297942e97ae1a2c400aa261aeccbf484cd879b214e2505ee2f45fe5fa15bfbdcf6337b02df8130a2a2dc456d75f5dc0a87f21484cb9f5c77f56efef91b0f4486b3c33c210a9ab9353689a50feb9765a35b099dc984c152e6166aca6c04ba25a24000ad07e4c672371c9a2a5dc0bcc2d90b07fe119f3069252dbb40ea4a9f9156b8e45beeeb303d6ad2f31aab1cee6dc454c9c5bbcac589", 0xdc, 0x5f3f}, {&(0x7f0000000140)="42ce501323d3734ac23cf1e3c05cbc5facc6c443fcfafa3a812086fbb98767ebd499220a920144bcf1dbe589506f2888e232d762fba44b6892958d58669abedeee741e11b8c1da7b897ad280e1b36d46e628f7cd968ef62e8119f0c3db4e93", 0x5f, 0x3f}], 0x220000, &(0x7f0000002540)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}'}}]}) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x125063, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0xc5) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2001020, 0x0) 11:35:17 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:17 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 11:35:17 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 6) [ 2830.210685] FAULT_INJECTION: forcing a failure. [ 2830.210685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2830.213664] CPU: 1 PID: 15647 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2830.215220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2830.217931] Call Trace: [ 2830.218538] dump_stack+0x107/0x163 [ 2830.219367] should_fail.cold+0x5/0xa [ 2830.220234] _copy_from_user+0x2e/0x1b0 [ 2830.221153] input_event_from_user+0x1dd/0x280 [ 2830.222185] ? input_devices_seq_show+0xfd0/0xfd0 [ 2830.223286] evdev_write+0x257/0x410 [ 2830.224137] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2830.225331] ? security_file_permission+0x24e/0x570 [ 2830.226476] do_iter_write+0x47e/0x670 [ 2830.227350] ? import_iovec+0x83/0xb0 [ 2830.228181] vfs_writev+0x1aa/0x5e0 [ 2830.228993] ? vfs_iter_write+0xa0/0xa0 [ 2830.229864] ? __fget_files+0x26d/0x480 [ 2830.230743] ? lock_downgrade+0x6d0/0x6d0 [ 2830.231811] ? find_held_lock+0x2c/0x110 [ 2830.232796] ? __fget_files+0x296/0x480 [ 2830.233699] ? __fget_light+0xea/0x280 [ 2830.234594] do_writev+0x27f/0x300 [ 2830.235415] ? vfs_writev+0x5e0/0x5e0 [ 2830.236268] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2830.237338] do_syscall_64+0x33/0x40 [ 2830.238145] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2830.239255] RIP: 0033:0x7f2bfaa5ab19 [ 2830.240063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2830.244042] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2830.245714] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2830.247259] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2830.248880] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2830.250419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2830.251984] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:35:17 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:17 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:17 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:17 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 11:35:17 executing program 0: prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x50100, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x2080, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r4 = eventfd2(0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000740)="44bbc04347370911665305000000d2fe", 0x10) close_range(r5, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001440)=""/106, 0x6a}, {&(0x7f00000014c0)=""/71, 0x47}], 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000004"], 0x90}, 0x142) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000016c0), 0x410000, 0x0) io_submit(r0, 0x6, &(0x7f0000001840)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x1f, r1, &(0x7f0000000080)="38a8c92491acf4c93ab7daa9fb834ac24eb4e8d9a6fdc3394cdf3024c8891ce4fe5d08afebd3be8526bc35e23fe33f7574c192240f6d951c86cdff895ca2f8d1e0157b0c2e832e6be626299ef21705878f7860e38f7120cfe8a46effe3dc864cfdbb93734df533bc5fc7b369f9e5e5e37e2811731d46f830c270c14157005485684858036c1269c883809c025537638a6b9a597482b428fd07804cb3db869cd6b5932953fae449c41d3b3a616dfd0a5a447853036f6cf4f92df104bf7d940b60e4d0933e44701fb54f79c615f3f9c1606c253928cc2c2d0ed8dce1f9a7b4d3da2a55e7f94891e79184f095811b0c83ad81935a3a5e1473", 0xf7, 0x81, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5a0, r3, &(0x7f0000000200)="27d517ab4929325fef1d8a09e267dc094b97e91d8abdcbd6df9c44c1004052fd9ef0424d96a5e5", 0x27, 0x5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000280)="97fa0729abf85ede84debb2c40b5bed30f822ccc53e469ab5fa5dbb0a434ae2b2b288f5233654c940dd4e764061db5b746f5303ae17455f472ef6cf0a012bc34c332cff0fa2a6cc83af30d16d92582e2d6095b0c5eafee41f570c3cb0207e17c59b13d", 0x63, 0x0, 0x0, 0x4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x200, 0xffffffffffffffff, &(0x7f0000000340)="edaeb186cf47658ffb1168cf2b6a5b3d", 0x10, 0x7f, 0x0, 0x3, r4}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x80, r5, &(0x7f00000003c0)="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", 0x1000, 0x4, 0x0, 0x3, r6}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x2, 0x3, r7, &(0x7f0000001700)="b56cb0ba1678db31c528b7b0347f6249bdf027c0436c4b857c2eca972c621312f50ec32c59be9d54c50ff136b6cdc6c7b755352b283750ccef6d2a5f193661ea753c5b7b139d226b65b975f2b33ca2841b4657608b2849eb56cf50f6a4205ce193bfdb2a3788e0688c320c2f1ce470077572fec66c3d925e838048b41ce48a5c4b644fbe8063a1b3f8fe38f65dc6922fb1847b828df9f4ece5ca246edacdb7d27ebf2528744e8aad550c", 0xaa, 0x3, 0x0, 0x1}]) 11:35:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:18 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x10000400) rmdir(&(0x7f0000000180)='./file0\x00') 11:35:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 7) 11:35:18 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x2}, 0x2) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2830.486526] FAULT_INJECTION: forcing a failure. [ 2830.486526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2830.489632] CPU: 1 PID: 15686 Comm: syz-executor.4 Not tainted 5.10.123 #1 11:35:18 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2830.491395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2830.494425] Call Trace: [ 2830.495103] dump_stack+0x107/0x163 [ 2830.496042] should_fail.cold+0x5/0xa [ 2830.497043] _copy_from_user+0x2e/0x1b0 [ 2830.498058] input_event_from_user+0x1dd/0x280 [ 2830.499507] ? input_devices_seq_show+0xfd0/0xfd0 [ 2830.500904] evdev_write+0x257/0x410 [ 2830.502051] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2830.503775] ? security_file_permission+0x24e/0x570 [ 2830.505430] do_iter_write+0x47e/0x670 [ 2830.506871] ? import_iovec+0x83/0xb0 [ 2830.508099] vfs_writev+0x1aa/0x5e0 [ 2830.509225] ? vfs_iter_write+0xa0/0xa0 [ 2830.510447] ? __fget_files+0x26d/0x480 11:35:18 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2830.511751] ? lock_downgrade+0x6d0/0x6d0 [ 2830.513296] ? find_held_lock+0x2c/0x110 [ 2830.514633] ? __fget_files+0x296/0x480 [ 2830.515950] ? __fget_light+0xea/0x280 [ 2830.517206] do_writev+0x27f/0x300 [ 2830.518327] ? vfs_writev+0x5e0/0x5e0 [ 2830.519563] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2830.521163] do_syscall_64+0x33/0x40 [ 2830.522386] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2830.523860] RIP: 0033:0x7f2bfaa5ab19 [ 2830.524903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2830.529957] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2830.531957] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2830.533885] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2830.535767] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2830.537659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2830.539498] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2845.051108] kmemleak: 10 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:35:40 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:40 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:40 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 11:35:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 8) [ 2853.358704] FAULT_INJECTION: forcing a failure. [ 2853.358704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2853.360587] CPU: 0 PID: 15743 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2853.361677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2853.363282] Call Trace: [ 2853.363696] dump_stack+0x107/0x163 [ 2853.364257] should_fail.cold+0x5/0xa [ 2853.364859] _copy_from_user+0x2e/0x1b0 [ 2853.365462] input_event_from_user+0x1dd/0x280 [ 2853.366170] ? input_devices_seq_show+0xfd0/0xfd0 [ 2853.366860] evdev_write+0x257/0x410 [ 2853.367389] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2853.368122] ? security_file_permission+0x24e/0x570 [ 2853.368931] do_iter_write+0x47e/0x670 [ 2853.369559] ? import_iovec+0x83/0xb0 [ 2853.370121] vfs_writev+0x1aa/0x5e0 [ 2853.370677] ? vfs_iter_write+0xa0/0xa0 [ 2853.371271] ? __fget_files+0x26d/0x480 [ 2853.371851] ? lock_downgrade+0x6d0/0x6d0 [ 2853.372467] ? find_held_lock+0x2c/0x110 [ 2853.373172] ? __fget_files+0x296/0x480 [ 2853.373893] ? __fget_light+0xea/0x280 [ 2853.374512] do_writev+0x27f/0x300 [ 2853.375049] ? vfs_writev+0x5e0/0x5e0 [ 2853.375642] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2853.376360] do_syscall_64+0x33/0x40 [ 2853.376954] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2853.377751] RIP: 0033:0x7f2bfaa5ab19 [ 2853.378306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2853.381052] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2853.382150] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2853.383243] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2853.384318] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2853.385380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2853.386431] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:35:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 11:35:40 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:40 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, 0x1, {0x0, r6}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r10, 0xffffffffffffffff, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000340)=@gcm_256={{0x303}, "3a8ee07d2d7d40bf", "f552a8648e953b19746f7ce5c3ad361b4a57a8827ba8fc752480759fda4e5773", "588708c2", "291be27ed396b06d"}, 0x38) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x3, 0x4007, @fd=r10, 0x9b, &(0x7f0000000240)="4c3d60724fd7445a28127f66a8afcbea88992725c7ba72b8da153bef862c84699f855ba86084a46dd3813eba0378c8d89c230fa2394c710cffb5bec11d10f350375f1459b68847cedcc5f08ba725ddb5f49195eb37333254993277f2a6", 0x5d, 0x4, 0x0, {0x0, r11}}, 0x7ff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:40 executing program 6: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x101000, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r3 = openat$cgroup_subtree(r2, &(0x7f0000003540), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r4, 0xffffffffffffffff, 0x0) r5 = eventfd(0x3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) io_submit(0x0, 0x5, &(0x7f0000009d00)=[&(0x7f0000004f00)={0x0, 0x0, 0x0, 0x6, 0x2, r3, &(0x7f0000003980)="356dce48734860dd66a2043d0e858081af1faa133c81fcf2d8592300a7cbe6086453a29a0de75c8984593b5c86d2058f529280af9d526e06171e2fcdf84bbc713ca0daf9313f36145a", 0x49, 0xab}, &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x2, 0x7a, r4, &(0x7f00000052c0)="c40593e7e1ef7edd5074f7b5b5134ff786aa167ca2639ee351701a211e9472d73c894d23993a2ef17fb81657256bd26e12f87c2e8d962eaa0b0ac20369621e397359ec260d27ebc1726abb5cf199c5d3a6f7f5b439e98e760d53c90985cfe625ed7c8ddf3d9143a0ba18aa1c03779b2665bdc4fdc40a6ed706c0fdcf6f6001c5e65393cf855335973c4afbfbdc821d15644c1a56b1ba1f36013a59259096ca71bc2cd2e0b73660a8320c0c9fcd0231eecb36ac49b2f9ad63129ee56b59ef28eb7662b9abe86d8da7949426de6943b9e1526c79a65876", 0xd6, 0x10000, 0x0, 0x0, r5}, &(0x7f0000005440)={0x0, 0x0, 0x0, 0x5, 0x8, r1, &(0x7f0000005400), 0x0, 0x8, 0x0, 0x3, r6}, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x8, 0xc4, 0xffffffffffffffff, &(0x7f0000008bc0)="1b63608eea324adebd99ce29057161daa71bd80896644a7ebad7d4bfac476aa2903cc5e887ec7808c1af147b6be10d1c8aa3c61029a9e204c1f7477ed9cc4a278ed7bf65eff897c7a3cc60d9ce71ff1111f5ada73d2e356acdf91720875364a4b9a615652bad16fe9b914f06ec59817ff4420455a0c8dc26ddf9970694f5ef7b22d42b91ae09fdfc8b4984ce0405998afc2b75e759c7c58e56d45ba1a0664ea86578870262bfcaf6023fad7585700d5abb", 0xb1, 0x80000000, 0x0, 0x4}, &(0x7f0000009cc0)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f0000008cc0)="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", 0x1000, 0x1, 0x0, 0x2}]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)) ioctl$FS_IOC_SETFLAGS(r0, 0x6609, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) recvmmsg$unix(r7, &(0x7f0000005040)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/4, 0x4}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000001380)=""/230, 0xe6}, {&(0x7f0000001480)=""/177, 0xb1}], 0x5, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001580)=@abs, 0x6e, &(0x7f0000002840)=[{&(0x7f0000001600)=""/147, 0x93}, {&(0x7f00000016c0)=""/143, 0x8f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/168, 0xa8}], 0x4}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002880)=""/165, 0xa5}, {&(0x7f0000002940)=""/109, 0x6d}, {&(0x7f00000029c0)=""/185, 0xb9}, {&(0x7f0000002a80)=""/216, 0xd8}, {&(0x7f0000002b80)=""/147, 0x93}, {&(0x7f0000002c40)=""/177, 0xb1}, {&(0x7f0000002d00)=""/179, 0xb3}, {&(0x7f0000002dc0)=""/178, 0xb2}], 0x8, &(0x7f0000002f00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002f40)=""/92, 0x5c}, {&(0x7f0000002fc0)=""/168, 0xa8}, {&(0x7f0000003080)=""/4, 0x4}, {&(0x7f00000030c0)=""/25, 0x19}, {&(0x7f0000003100)=""/83, 0x53}, {&(0x7f0000003180)=""/8, 0x8}], 0x6, &(0x7f0000003240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000033c0)=""/43, 0x2b}, {&(0x7f0000003400)=""/78, 0x4e}, {&(0x7f0000003480)=""/173, 0xad}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/12, 0xc}], 0x5, &(0x7f0000003640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000036c0)=@abs, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003740)=""/109, 0x6d}, {&(0x7f00000037c0)=""/12, 0xc}], 0x2, &(0x7f0000003840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000038c0), 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000003940)=""/8, 0x8}, {&(0x7f0000003980)}, {&(0x7f00000039c0)}, {&(0x7f0000003a00)=""/72, 0x48}, {&(0x7f0000003a80)=""/64, 0x40}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/197, 0xc5}, {&(0x7f0000004bc0)=""/205, 0xcd}], 0x8, &(0x7f0000004d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000004e80), 0x6e, &(0x7f0000004f00), 0x0, &(0x7f0000004f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x8, 0x40010120, &(0x7f0000005240)) openat$cgroup_procs(r8, &(0x7f0000005280)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8, 0x4, 0x1, 0x3, 0x0, 0x8, 0x20040, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x500, 0xfffffffffffffff9, 0x8, 0x1, 0x185adf60, 0x1, 0x5, 0x0, 0x350, 0x0, 0x3b}, 0xffffffffffffffff, 0xe, r7, 0x0) 11:35:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 11:35:41 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:41 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) 11:35:41 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:35:41 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) [ 2867.239153] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:36:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 9) 11:36:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000000000002000000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b000000000100"/90, 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000040)="ed41000000100020e0f4655fe5f4654f562b675fe1fccbcbe8a6527636c6a5b9e922f4", 0x23, 0x4100}], 0x40804, &(0x7f0000000180)=ANY=[@ANYBLOB="1d4c6254189798af810bce3f897e3200"]) setresuid(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0\x00') stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setresuid(r1, r2, r0) [ 2875.582929] FAULT_INJECTION: forcing a failure. [ 2875.582929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2875.585057] CPU: 0 PID: 15829 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2875.586090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2875.587795] Call Trace: [ 2875.588226] dump_stack+0x107/0x163 [ 2875.588797] should_fail.cold+0x5/0xa [ 2875.589382] _copy_from_user+0x2e/0x1b0 [ 2875.589972] input_event_from_user+0x1dd/0x280 [ 2875.590649] ? input_devices_seq_show+0xfd0/0xfd0 [ 2875.591360] evdev_write+0x257/0x410 [ 2875.591932] ? evdev_handle_set_keycode_v2+0x120/0x120 11:36:03 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) [ 2875.592794] ? security_file_permission+0x24e/0x570 [ 2875.593742] do_iter_write+0x47e/0x670 [ 2875.594327] ? import_iovec+0x83/0xb0 11:36:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2875.594907] vfs_writev+0x1aa/0x5e0 [ 2875.595553] ? vfs_iter_write+0xa0/0xa0 [ 2875.596143] ? __fget_files+0x26d/0x480 [ 2875.596749] ? lock_downgrade+0x6d0/0x6d0 [ 2875.597388] ? find_held_lock+0x2c/0x110 [ 2875.598011] ? __fget_files+0x296/0x480 [ 2875.598612] ? __fget_light+0xea/0x280 [ 2875.599189] do_writev+0x27f/0x300 [ 2875.599762] ? vfs_writev+0x5e0/0x5e0 [ 2875.600368] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2875.601120] do_syscall_64+0x33/0x40 [ 2875.601720] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2875.602491] RIP: 0033:0x7f2bfaa5ab19 [ 2875.603044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.605833] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2875.607021] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2875.608098] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2875.609263] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2875.610364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2875.611485] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2875.612834] hpet: Lost 1 RTC interrupts 11:36:03 executing program 1: r0 = syz_io_uring_setup(0x4d4e, &(0x7f0000000080)={0x0, 0xffffffff, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000240)={0x9ca, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 11:36:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r1, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x5, 0x3, 0xb, 0x0, 0xd5, "69fdedfd6caf2d1e8f57c3e34d4afb236f0acf094ae2aaf72c1e6fe2d196be1afdfef55ee5bcca684962aa301d823326a3036bbc9dc812a6ce4960fbaa956c47499ae9c9fbc1e0f6ddab40218aa2549957e373dcebee47b050237efc8834898b9a14013c898b3089e80d63861aaaba53749a8a533be07365ac9e516770161ac1bbf0637388595413da2ac57d9b756092bcda6a5d4d1d7ee7000133c16e5052ffade51a9ea7e619984352ff91a51a7c029dc8237052e9ec6ca1998d6287a2c8bccf8497b044dd6ab218ffbeb2c0c4bea89d834f6e68"}, 0xde, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r3, 0x0) r5 = io_uring_setup(0xd58, &(0x7f0000000bc0)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4c800) open_by_handle_at(r4, 0x0, 0x4081) 11:36:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000) 11:36:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 10) 11:36:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x25, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x3, 0xffff, 0x0, 0x3f, 0x1, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x3, &(0x7f0000000240)="1c50bab54267d6f505754a42fc93652059bbc33be794c90f5020f8ee9e890dcab3d8edc1fb48650985054bcc5164381d2ad8bdd0c0bec6ec0f24c83ce13e08c3da14ab9d7f32044c1fcba64e37996659a0b9e32ccbfe8a9999c342eb838fa089f751e11e603b310a1a8503d11cf710e019461faebb581543faaca81db29e879c54", 0xffffffff, 0x0, 0x1}, 0x27) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2875.915306] FAULT_INJECTION: forcing a failure. [ 2875.915306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2875.917171] CPU: 0 PID: 15900 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2875.918224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2875.919981] Call Trace: [ 2875.920389] dump_stack+0x107/0x163 [ 2875.921022] should_fail.cold+0x5/0xa [ 2875.921624] _copy_from_user+0x2e/0x1b0 11:36:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2875.922348] input_event_from_user+0x1dd/0x280 [ 2875.923061] ? input_devices_seq_show+0xfd0/0xfd0 [ 2875.923824] evdev_write+0x257/0x410 [ 2875.924427] ? evdev_handle_set_keycode_v2+0x120/0x120 11:36:03 executing program 6: r0 = syz_io_uring_setup(0x4d4e, &(0x7f0000000080)={0x0, 0xffffffff, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) [ 2875.925380] ? security_file_permission+0x24e/0x570 [ 2875.926141] do_iter_write+0x47e/0x670 [ 2875.926763] ? import_iovec+0x83/0xb0 [ 2875.927353] vfs_writev+0x1aa/0x5e0 [ 2875.927937] ? vfs_iter_write+0xa0/0xa0 [ 2875.928555] ? __fget_files+0x26d/0x480 [ 2875.929210] ? lock_downgrade+0x6d0/0x6d0 [ 2875.929817] ? find_held_lock+0x2c/0x110 [ 2875.930480] ? __fget_files+0x296/0x480 [ 2875.931140] ? __fget_light+0xea/0x280 [ 2875.931749] do_writev+0x27f/0x300 [ 2875.932313] ? vfs_writev+0x5e0/0x5e0 [ 2875.932853] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2875.933669] do_syscall_64+0x33/0x40 [ 2875.934238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2875.935056] RIP: 0033:0x7f2bfaa5ab19 [ 2875.935601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.938550] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2875.939746] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2875.940894] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2875.942064] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2875.943194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2875.944362] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2875.945758] hpet: Lost 1 RTC interrupts ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000240)={0x9ca, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 11:36:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 11) 11:36:03 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 2876.093951] FAULT_INJECTION: forcing a failure. [ 2876.093951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2876.095692] CPU: 1 PID: 15926 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2876.096721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2876.098353] Call Trace: [ 2876.098728] dump_stack+0x107/0x163 [ 2876.099233] should_fail.cold+0x5/0xa [ 2876.099784] _copy_from_user+0x2e/0x1b0 [ 2876.100377] input_event_from_user+0x1dd/0x280 [ 2876.101046] ? input_devices_seq_show+0xfd0/0xfd0 [ 2876.101792] evdev_write+0x257/0x410 [ 2876.102348] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2876.103123] ? security_file_permission+0x24e/0x570 [ 2876.103850] do_iter_write+0x47e/0x670 [ 2876.104417] ? import_iovec+0x83/0xb0 [ 2876.105010] vfs_writev+0x1aa/0x5e0 [ 2876.105535] ? vfs_iter_write+0xa0/0xa0 [ 2876.106109] ? __fget_files+0x26d/0x480 [ 2876.106723] ? lock_downgrade+0x6d0/0x6d0 [ 2876.107338] ? find_held_lock+0x2c/0x110 [ 2876.107973] ? __fget_files+0x296/0x480 [ 2876.108668] ? __fget_light+0xea/0x280 [ 2876.109255] do_writev+0x27f/0x300 [ 2876.109778] ? vfs_writev+0x5e0/0x5e0 [ 2876.110353] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2876.111032] do_syscall_64+0x33/0x40 [ 2876.111550] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2876.112238] RIP: 0033:0x7f2bfaa5ab19 [ 2876.112750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2876.115303] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2876.116381] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2876.117518] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2876.118569] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2876.119634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2876.120775] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:36:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x1}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 2876.383458] FAULT_INJECTION: forcing a failure. [ 2876.383458] name failslab, interval 1, probability 0, space 0, times 0 [ 2876.386543] CPU: 0 PID: 15968 Comm: syz-executor.5 Not tainted 5.10.123 #1 [ 2876.387557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2876.389404] Call Trace: [ 2876.389916] dump_stack+0x107/0x163 [ 2876.390484] should_fail.cold+0x5/0xa [ 2876.391063] should_failslab+0x5/0x10 [ 2876.391609] kmem_cache_alloc_bulk+0x4b/0x320 [ 2876.392248] io_submit_sqes+0x11c2/0x2310 [ 2876.392844] ? __lockdep_reset_lock+0x180/0x180 [ 2876.393538] ? perf_trace_lock+0xac/0x490 [ 2876.394156] ? io_queue_sqe+0x1020/0x1020 [ 2876.394774] ? __do_sys_io_uring_enter+0x107b/0x1900 [ 2876.395479] ? mutex_lock_io_nested+0x1110/0x1110 [ 2876.396145] ? percpu_ref_tryget_many+0x167/0x290 [ 2876.396838] __do_sys_io_uring_enter+0x1086/0x1900 [ 2876.397539] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2876.398245] ? io_sq_thread+0x1640/0x1640 [ 2876.398865] ? wait_for_completion+0x270/0x270 [ 2876.399487] ? rcu_read_lock_any_held+0x69/0x90 [ 2876.400197] ? vfs_write+0x354/0xa20 [ 2876.400756] ? fput_many+0x2f/0x1a0 [ 2876.401345] ? ksys_write+0x1a5/0x250 [ 2876.401937] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2876.402724] do_syscall_64+0x33/0x40 [ 2876.403301] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2876.404084] RIP: 0033:0x7f42e309cb19 [ 2876.404714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2876.407602] RSP: 002b:00007f42e0612188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2876.408777] RAX: ffffffffffffffda RBX: 00007f42e31aff60 RCX: 00007f42e309cb19 [ 2876.409929] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2876.411015] RBP: 00007f42e06121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2876.412110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2876.413219] R13: 00007ffe8ec7df6f R14: 00007f42e0612300 R15: 0000000000022000 [ 2876.414570] hpet: Lost 1 RTC interrupts [ 2890.457970] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:36:25 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000010000001800000650756d10717f70be880a1bc7", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x3, 0x5}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x13c8, 0x12, 0x300, 0x70bd27, 0x25dfdbff, {0x6, 0x80, 0x3, 0x4, {0x4e22, 0x4e24, [0x4, 0x800, 0x101, 0xff], [0x9, 0x7fff, 0xfffffffa, 0x9], r11, [0x0, 0xb6]}, 0x3, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "b30ff0e28012c57753364c59b86bc3ec46b6616c71320e71c3d9ac6b42d095bce045c1563e37200083ae72b4fb7db0f41f8322876006ba6e15d34beb17562c5c46bea50ad53c3629e217ede27e317e42f614b4ef97a1bdd9d181850e4914e27c808b9c31aadc96728a845539afd74b0b7be2c4881daf6b036295fff9c7f4a9d5c6180a1819942c45c8a9db5a3acc89edf8001179dde48c95c3c1ddb8a03a15fbab51ce2bbd88be6c10d516e7d2af71ce2f70316225afe5b580098a32695e61c32a36d7c8043c490e38720b9a1331b9e0842f041ad87a8abc334532dadbba2ccbb9"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "43f1f1c66860103c937d2abd9d53853039026728a09ef1b476d63a5da1a6e35f081b5753fc1223e47857dab455f35f62c34407ce6af2c4d8de68fd2cba0a365194be8483de0baf0e66e943bbab035a5a564e187539d48ebc841706c4ca4eeddc8e18f858bfb5a1fd2b9c3fbd721af283733a8f7eb0bb72b167a18341272598a31ef007cdcf05b28a82893f8676c7122b2b68b61c24069bbb6d79be9a59d203c16571da352e45fc1e3cd5e350afe3cb0d83d7361c4621b4761d17eb0dff19ae6bf5a7c71d6e63a750fdb2bdeae159fd8875ae5506fa0208567cd90e927f2f"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "1f4d03fab866577373b36651cd227851e9c9aebeae331a898a7a23994f18da0660036ecaf512087d2de3812797e32c06c114b1df675106e82aad289b180cb2d9f7cf0e22169b86201322af6e92717ab9172749fbad7c9324c28e656afdd776c1aeef22c9f3b7e388e9ed4f682c6f78b14f97e0e29737a040e71485bf49d996a80992fbaf9657549ced0dcbc0cab88e38c620a55b9f4206bb92d15c2e61a3e4517f7b"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "0cfa7fbb114aace683f77671578831b4c6109d0ae22d1e29bb0014a91440012c91afbf9a1414a9889454a2764758fea8977b3c0f5ac5a63e7e07a6d5e799c7bd6f56dee507ff89861a9779bf5d75b7c1236018226efc167c5df41a44dcf6325ee7cee02be14b212f1b1b0279d74da7256a354b2631bc0c5348baddf16d8509511f088d4c2fee454799fc1089e7221a90f9304be668bb61ae847c5fe111635eaa19593a60ce701f84fa2eff58ca1e0bd6f066f60af23a867d4fcbbd63800ac2459e808343787a4a812f676a56ede44e034832cb93591d35e1125fd47460c1f43d946c45bfc2b0023646fb467186d1b5f542d06dd3db220b8b4bea051db379f65caef133207269714f4344546edc86e001a6424b137996cd8af23205dd5b9b44ddb7216af459faa357fd49bd98c01a04cb7b7f8c4db20c6c683d3551ce12871671c289ffb049ea4457faf0b90d766adaefe207f9fcd60ecc588bcc21fb489dfc2e88358b448b25183b83f8b088be9a918b30eb90459dbc804f74183a3e4fba9d57083642cefe68d95374fd31fb085893096acd7482f3f60cb4ab414d0d3ca40dfbe9f6b8c194bec25bb18cd2dcbb1ff5ded9cede0047d8133ed2fe28b7be21917e8a57b7c42c6b8b7047fe8a6c969b934cc0c119d35c5381aa849d325f69f6617be7ca5963768524f7f5c33e3cc566aa1eebbd085ecb7489f906551d5d0d0cf1c918f23fff4455db22b294e5b29a469eb9eb145b30f8e82a1f3e660d4726bf0ec9eef6aa7882f1481c22d3159c14fbdc2cf23de0b3cef0a3ade9f9f953f015b7f1d9463f560541443389e291f0101942a8421fb761532e3cc3d38a6442c0bd07e7e961c20b4683f5504f023e79847a51c33e25406d71a94ed43b98a2c4c8bfc7223bf085a45a474415a4178e81974d6235d345459d94a5a6575b1ad31894d016026048b37b827c7c264b2401ab83f466305c021927bdab3b1f50cbd1afd2ee7dddadbafac04b68072f5ad47700056646fcb3d57de98039bed42b24eff8f2a0ecb2544d0e48c1a29b1ba79427198283865bab32b0c21ed834a87354a54f9f2411c378261dd7ceebf9832705ade77b18e3e22f0efc313acbd32bee70f766bc5c8c3c396f58d4ab426a5987a8bcfb2c74c257fcba890495b8d35a7cf747755e0939709938fca364d026eaa8306a7f25a50bfac246191a7811cc901d8e00446a0675f19a763f2acac57d800728f940c8a0bfad2935743ca2140de78254df9914c85808e4a9199a6815004c1df93062dfcc8b42a1c73d38b0c6af814bf5e5a109aebf25bed3f58f88d8fda048142849836fbff90a59448a8a4fd408f26d1f49487f22ee66e746a44cd6e6be180154904a6379aec83dff977cccb77b479413c6bba3bd4e32f6a47c515a8c33d25c20f85185aa5680c9d0013fcd56465cf5a263be8f7f705264f44580e034e5354530606f9502eb91562664afe22acb8250bd6c090c966d39e7d2299cc63b1a2a78dd8e014fa94cfe5342b4282dedeef7b90826f18ef0a921561dff89b9afc81ebb330ddc0828252da197c817edca2c3fc58e788c166e23ec01465e7054347e2403409a8b08c06106f6a73813f5e4bbe615701f00d76aada4d4adf72dea3130ba98f1f394f0f54a45c55de88a0cc2ea45174c207897bd6489e11d4379f5fa3964dce6f5ba4b560244763448bdc49cd02bac56e8078a56a95acd648b0d7f9f230a31e7a3c399436114a655b84e9aaa2257bac51c501186b49e4ee15adfc1e25c93d616aa141ed8919378943821f8b2e74ea575b5c967870a9f3445527dbcf3a16b5da0265724c0dc726c8bb1f0bc0084b107f5034eec72afa58b1672ccb61185a0fa51c2d24f084a42b7d053625b9a663f1a70cf2fee02fe990c9c0456c34894831ed38baa78e99cdcd1193bd8be62231dc30bd231edcba04b4a7965b41171f232edad09906ff89e32e9338029438022ee1c69fdf71844fad05eca527a7d4f6c64a3109c94c22e67672dd842af0044ad27020e4ffdce618e834268c1b8b0f66a1aaf9772c6839180aaa2fb9655458518c7642150fc303df17884a1ff0d3b44a4f924ed1f89c63880decf09079f1b672278e9cafb6c1ca1270b2e41becd4ee6c71b871da5e9db54277cdc8691218f432d5178771f58d343976488081c111e99fafc76eef82489609263e4becfa152c4e60f8aa7e8a57a1327c3b910d887d67b188505973f66c89b3aeda523933f8432581ab3c10c66909e3b40e63422aeee8e6dc35f13c154d94583c76a0ddcd2ad0aa5892582921a29e83b01d017991c0ca397684d247a6734d95df771af2847deddf342f059b61627dd32850512d047655eaa9bcbaa6a4da064424d1313f27f676b47266dc9022a846c4fbd842d62fc5ec963695a0fea5725f38f301a0a80af82dd3530a827238834a67e81f1016ceb89c4aa1b08ffad58bd9143e71fbcb4f5f2f72bba6943edf6f473dc548bc736f1d14b22ba69dd5fec6167e7ec6916cbca8f382bdf68a8953da63fdd089920ff871bc8a70a376e326bafd6880d99d1c6e1aeefc4a7525ff6827b32bb5fc86fcb4f4176cf18f62e6b81e9dc27cd19715e7231f9d2d34b22e750ed7d3a89ceff025521e0c52f305dd52b3e2132b4d41f551a60d6dd123814dc29dce3e4b70cbc8b98c64f7503294bd9b7db055aa78d8207561c91559e5d517367dae47ee80ee47bde58647ded94b32b061e7120ea5559752be1cc9dc50c9bd959509efe4fe91769b6c8fcee65f9f8737a14204921d6c005205e81e626742d41d823c63ed9a980bf9220751023ddb2b89381d2d968b4722bb06bacb3c68506f7c59db762a2b2723632445f5bceca06d8b0255bdb092dce7637367f7324c8b9da2d4ef0ea2a552ace7cc0fa53db76da6e18ce26ea80043075450d34900c2b886b62a9a14e0cae98df012653e8e89572e8bcbafb108b68d00fe6b663eeb8e2f29b872310e8560ed73fad58f91459f1f10bc3a414f9170f602091994e323ea650b6a96ed586bbbcf13174b35bd25301303966896f47c875dc5ede5dad5e00aa12f154ca02c913b86509ded135175a369db83c0315d1230ca223ff10b17e30aea019bca45ab2061e770763ba4f8ffdd8cef0b39ed366685cc5ea17c06d8614e88c139d6250221a3970dc12c4f5ea344bef9576b180bdaf89d1c89e6f14b7017c93c8df70b457de7a84b9910e16477f71f053972ae00475b5a4f29e9e8b85c998cc305c1d751960368fcad50199e8cd34b310ff20dd200535d5d95159f62afc039a63a3bf4da8dc81711bff0ab750980bd9e028f4ed886ec9638dd2f8510d522c8269dd3096509c529fc1e031d91d589542dffdee0bfc516cdaa2cfe684d97c02862eb103821d93380fe73c5a405869add9bc667ff7e21f8c82d3df64770225b2f7b3b49844ce1037412b9f542dc5552f1694da31f2d0e38517d73bd7a309637c1eeda5b93d9ea0220ff744e0d6e0af8e84cb57ded70e87267491683a9761c812b5f7cd96828b7325e85eb0663670b060c243efa3bdf8af9c40c6f9a419944885be576f5b2f69cc9304b02102ec024cb4a89ae751909ead37f0b09b5dacdc531a4b49a336282fee8d1f5bba9a8df17fc10b46457d6797ef213caf2957e7c05dfb758b34c55eb7ca85f467fac66a1907afbc2de47698b55d4ead2187abbd7ed59f029e7edf568f3ae00096d2315420d85805338e380c9f7d6ac8d7f760a5fde6116f6f2dedd935527b3b5663c93a5f4f57709ffdd8ee0222c4ad55f570ea4d84f1183c6508ce0491b76c84f9324d6097979bb46db0a9cf36e04727e20242e5a848ca9db7eb1948dfbbc5c53035ecfcfa5487e192bab355ad0043a19093121487ff452e3a2d6492ca7957e845c30ceb62f94b1b803cde4a014f83c6bc5ec4361bc251160df16cd0b114a61f972fbb74cae53dfa5a842c53756eb604c1d2801cb0ecce643f410397bc243f546aeaedaab4210afee7779d908cb477361b2821a1d90bd5a9a995a081d060fd4e741f411c0b4d90ec3db4830e409b4d92d60e7e6b969b779c9e98cd7730e1073e309ef23cf0c5f29ac85ee4cc44dfd39e345db61db8a589615104516cd60d359dd89148733199226f900a0ede6b27558db05af33663eaba135f4a81ca8494e0ad5fadc083585dd2413152903ccdf5453e7c4b409f8d1a0178e403014522d5a22859bb209b7aea27c78cc3e76ab5b95d94abb50e68fe818339e514d8478dbde87ffbd1ec7cc261bbabad320f831e4d4c374dbcc5329d5aac00b4c50aef82427b221ae9231a6531562c4700c15056c8ece2f73a381ef1e8d3e2b49822cd768566fbe597b330ab35b82542164f8abe31b6a78e024bb6bc6a18d8956a0210b67412289c5298d1029b4ec44c668e4f1e1127f7f28db38aa1caa400476d1d4fa2454c6e95c310ca203e355fed2f377baf2092a29cdc7a46573b0e96d1f18ed259643a8d39c14f36dfc4eccedfb89b418d12bd5ef5c051a66ea7255634eec1d8635f8e4f541b73fbe51f189e89f800de1831b567581c2b96225bfc502187e2cb1dcd8b176fd16b18f7924e8fb1f1a37eb0eaac9a88feb907acea5a54b565f939e5f110c15ee5155ec06f208012d317fa0b3a12ddefe61e706edb9d21b37b36a13b8ad1466a9a1d5dca390e19b15d9541cfca6a5e255dcfcc6230cf0e176048a10b1b8e1d17e337327379c9669c68edd0cdb926f78ef7ac3b2ff063f352a7a81a04151afb6a9bedaeaf0785991473b4035f393bcf866188b39353b25cb6b9373f63c430be26ae027d70dfc4ff8573c093bd594a0d4116e0c1b7eea375a0f1c6f4a0ef74fc8c89872e68623af60e6e821a86d19a56b65a632841b56d95647f3a6ba28b60317e37dc5cf4ff93620ab8fd0174b0f2655dd3860a965dbbb637576f30c02070e5054b591c5b15f5c5af055427aaf06cc07526ef24bd80f49f93035d798ce688852bd172eaa0ce59ea5fc34364613a7fc01b511c78487a8380cb939e9b8eebe8728bb06a77ce401cce7444b8039781c94e92aa39aa78cbb1f31db2a3b71771f2c41a46f849b789f75bd1ffcafe5b69b039d2254c36b3f7b3af7b74af7a8eb63821c87b736e9deb9c1125622bc767504c67b830cd8a085c083a5f1f623746db5c55b9aa7beee5ea80fa5c78098d0850a627f95fccf36643c27998a741361823542fa4f5468bf67014e68bf07c8425569602fed8404399813acf60107e388f99f936a84e2b65c4907ab9fbf2cf587cc98353bf31c17e269900dacf28079f47c01f87286e9ea748ccbca8e56fd21f5052c30cc27f92b1586aacc6b63ed8ad8be57ea582c45ccfe8a94fd3582f44eb8b49457d457c78e092c5258dd9219ca6c3f08ad3db8f4d019861190c78cb72b7cd4453408eb7478cd2cb913e56560fd5d022993820fdc3313cc65b63e4c13154a2c30b7bc3d34da53412deadc0ca39b0f06b2a0e1ee8830ca6d478c682926fbbb5a0942808e7ece14a3a0c508d5c0467523997b701d58d97c41675b997f4603201b03982b38877dd1eb4f8975aa51914a9966dbe0a3191406d2faa5fe185780ff03e1ae3275130757c5a64668d340a809a3f52019dec86ef4b1f1a4f431514de71ca6980973102bfb977ec30723332331dad88aa01c1af325eeb98854e90bcc5f891cd609d092f5695eb415d9aac63730ec54e509649aefa139261ba3538595e7e253b3400e6ed9e84553fb453939ae677ec7ac3b422d96ce025282f45d6231057b655e7a76299e45f53175164e8fb32"}]}, 0x13c8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_io_uring_submit(r5, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x8, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r4, &(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x2, 0x2000, 0x1, {0x0, r6}}, 0x5) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x1000005) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8c160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = dup2(r0, r1) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000010c0), 0x10100, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000001100)={0x130d, 0x800, 0x8000}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/slabinfo\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001900)={0x10c, 0x0, &(0x7f0000001780)=[@acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001600)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000001400)=""/232, 0xe8, 0x2, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000001500)=""/244, 0xf4, 0x1, 0x29}}, &(0x7f0000001680)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000000008561646600000000070000000000000000000000000000003300000000000000"], &(0x7f0000001740)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x1}, @decrefs, @acquire_done={0x40106309, 0x1}], 0x39, 0x0, &(0x7f00000018c0)="fe4cace6c9dec8ef32a194aa9b82f38efa5c7e1dbbea4878914436b9529e57245c5c25a79a5d3d0ec2337115a698a255017e6225a09c6b091a"}) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c) accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) sendmsg$nl_generic(r4, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"/431], 0x144}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 11:36:25 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 12) 11:36:25 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:25 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 11:36:25 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x8000000) syz_io_uring_setup(0x3a0c, &(0x7f0000000240)={0x0, 0x41bf, 0x8, 0x2, 0x1e2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r11, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r11, 0xffffffffffffffff, 0x0) r12 = signalfd(r6, &(0x7f0000000380)={[0x4]}, 0x8) dup2(r11, r12) syz_io_uring_submit(r4, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x8, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x1, {0x0, r5}}, 0x7) syz_io_uring_setup(0x2e05, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_io_uring_submit(r3, r14, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x40, 0x8, 0x6, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x0, @perf_config_ext={0x2b7dfc37}, 0x3, 0x8, 0x2, 0x5, 0xf09c, 0x71db842, 0xfc34, 0x0, 0x2, 0x0, 0x7}, r2, 0x4, r3, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x7, 0x1, 0x0, 0x8001, 0x1ff}) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0xa, &(0x7f0000000080)=[{0x7, 0x3}, {0x595, 0x6}, {0x7, 0x7f}, {0x5, 0x80}, {0x3, 0xd6}, {0x100, 0x9}, {0x7, 0x7}, {0x8000, 0x1}, {0x6, 0x6}, {0x400, 0x8}]}) write(r4, &(0x7f00000002c0)="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", 0x1000) dup2(r4, 0xffffffffffffffff) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x220400, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xca) flistxattr(r6, &(0x7f0000000040)=""/31, 0x1f) readv(0xffffffffffffffff, 0x0, 0x0) write(r4, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) ftruncate(r0, 0x1000003) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2898.358523] FAULT_INJECTION: forcing a failure. [ 2898.358523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2898.360584] CPU: 0 PID: 16009 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2898.361655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2898.363401] Call Trace: [ 2898.363803] dump_stack+0x107/0x163 [ 2898.364332] should_fail.cold+0x5/0xa [ 2898.364886] _copy_from_user+0x2e/0x1b0 [ 2898.365547] input_event_from_user+0x1dd/0x280 [ 2898.366212] ? input_devices_seq_show+0xfd0/0xfd0 [ 2898.366911] evdev_write+0x257/0x410 [ 2898.367511] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2898.368325] ? security_file_permission+0x24e/0x570 [ 2898.368692] FAULT_INJECTION: forcing a failure. [ 2898.368692] name failslab, interval 1, probability 0, space 0, times 0 [ 2898.369073] do_iter_write+0x47e/0x670 [ 2898.371358] ? import_iovec+0x83/0xb0 [ 2898.371923] vfs_writev+0x1aa/0x5e0 [ 2898.372494] ? vfs_iter_write+0xa0/0xa0 [ 2898.373072] ? __fget_files+0x26d/0x480 [ 2898.373709] ? lock_downgrade+0x6d0/0x6d0 [ 2898.374404] ? find_held_lock+0x2c/0x110 [ 2898.374994] ? __fget_files+0x296/0x480 [ 2898.375609] ? __fget_light+0xea/0x280 [ 2898.376221] do_writev+0x27f/0x300 [ 2898.376769] ? vfs_writev+0x5e0/0x5e0 [ 2898.377404] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2898.378092] do_syscall_64+0x33/0x40 [ 2898.378651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2898.379456] RIP: 0033:0x7f2bfaa5ab19 [ 2898.380002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2898.382724] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2898.383859] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2898.384921] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2898.385995] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2898.387104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2898.388168] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2898.389307] CPU: 1 PID: 16008 Comm: syz-executor.5 Not tainted 5.10.123 #1 [ 2898.390655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2898.392430] Call Trace: [ 2898.392842] dump_stack+0x107/0x163 [ 2898.393429] should_fail.cold+0x5/0xa [ 2898.394040] ? create_object.isra.0+0x3a/0xa20 [ 2898.394744] should_failslab+0x5/0x10 [ 2898.395342] kmem_cache_alloc+0x5b/0x350 [ 2898.395953] create_object.isra.0+0x3a/0xa20 [ 2898.396638] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2898.397515] kmem_cache_alloc_bulk+0x168/0x320 [ 2898.398199] io_submit_sqes+0x11c2/0x2310 [ 2898.398888] ? __lockdep_reset_lock+0x180/0x180 [ 2898.399598] ? perf_trace_lock+0xac/0x490 [ 2898.400268] ? io_queue_sqe+0x1020/0x1020 [ 2898.400911] ? __do_sys_io_uring_enter+0x107b/0x1900 [ 2898.401759] __do_sys_io_uring_enter+0x1086/0x1900 [ 2898.402574] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2898.403328] ? io_sq_thread+0x1640/0x1640 [ 2898.403993] ? wait_for_completion+0x270/0x270 [ 2898.404721] ? rcu_read_lock_any_held+0x69/0x90 [ 2898.405605] ? vfs_write+0x354/0xa20 [ 2898.406169] ? fput_many+0x2f/0x1a0 [ 2898.406711] ? ksys_write+0x1a5/0x250 [ 2898.407272] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2898.408003] do_syscall_64+0x33/0x40 [ 2898.408553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2898.409346] RIP: 0033:0x7f42e309cb19 [ 2898.409912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2898.412821] RSP: 002b:00007f42e0612188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2898.414010] RAX: ffffffffffffffda RBX: 00007f42e31aff60 RCX: 00007f42e309cb19 [ 2898.415137] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2898.416258] RBP: 00007f42e06121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2898.417394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2898.418446] R13: 00007ffe8ec7df6f R14: 00007f42e0612300 R15: 0000000000022000 11:36:26 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2912.321358] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:36:47 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 11:36:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf253f00000008000300", @ANYRES32=r1, @ANYBLOB="0c00990002000000240000002c005e80080009008000000010000100070000000200000027ffffff0800020009000000080002000500701630005e800c000100ffffffff05000000080005003a000000080005005c000000080009000000000008000200080000000c005e8008000200060000000c005e800800020008000000"], 0x9c}}, 0x4000000) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'ip6_vti0\x00', 0x44}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000240)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) openat$cgroup(r3, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r5, r4, 0x0, 0x7ffffff9) openat(r0, &(0x7f0000000180)='./file0\x00', 0x226000, 0x220) 11:36:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff8101b1bc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x101, 0x4, 0x5, 0x6, 0xfff, 0x47c9}}}, 0x12) 11:36:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 13) 11:36:48 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8a}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r6, &(0x7f0000000340)=[{&(0x7f00000001c0)="2b2e05ed250b08eef75bd3c1520dff7a521c31f0bdaefeff6c71", 0x1a}, {&(0x7f0000000780)="064f91286a086d0ae8e2b9577dce6c327e359ca78ce6cc34591d6e586ca7bcfbc138df16210f3afe31f7edadf1622a96ab36a6c090b28d0c616043a5a0b2a22a26222447867a17674ac5ae52baa9573e6aea116020a6e3b299ab34660e199e7c8094a341fc412f058b0f849a4c9f1006f74db0589dbf4ecac088f9f63a8ec5f63276031528d20a1c3c32ac36f00693fe7a4361cf277ba57ad4736b1a7ae3532d1fc96c08e88855c3069177013d30aa9b8c8e9fb979a82b7c28477212424c92d48accd59fde72ca6326e3b951bd3fcb073518bb61bd488fabfd7f8c43ddf337166f1847061786f81ce614225268aef89f91a6b4d97d0f860935d85aeecfbbf1c89d7b5b389efa358c6bdecfaf32b276ebbd3fd137d8ee6b1a9825cd1960d33c5c5386239b15bc30a08a945a0893954ddbabc3fad85a8eb7982fe174b08dadbe6e9405fc3af9e32ce577ba1c3202ad4af0dea86ec5e6714413fc543d79c148769d1984c9760b7794a94fc0b724302817bf6b996d06c94d6c2c169241fefc9a4566a7b6c5d8052fc2e9b5b0140ba39911ddcd3f4148c2478443056c0313196951605a114f46d95b422002aa3f7c69754f9f7c389a1d483bd473c7d3cf7a617e02dd42b3a34f65c8077946bfc7bbbc67e1b7254ef7128697529168ef32684eccbe5555721eb649e1d7ff9a38aa0e2d0b2ca31773a7150202e0e1a376cef933c1966fce535db42c47b25682e95bd3dfd3dd30c36cdb84174a691eb93a2dd73f936a2b230a02320f4ade1852ec5ce322a417d09fa3704006512ebe6671d4f0a81925e4cdd01eb272861fda5ba11973888878024f955963a330a67c1738f68747910c514070d0d9cd547b2df6b6acba482e7bf5d2b62b565cd7abeec7be1824cbec23d9f74ab08f15044b9e24033f32612731f09d4d76558a933c234af856b4bd45c438fff187c7c2daafce08b3bfbebc71a8bb4a6b7270ecbc0ddccb36104d9507f1d0341f79965f774160834c6e1c1a7184fa2af20b410eb493c7013fb6024a825e142e286320e491b38fc41525226ee2ca3898b7414532ef5bac72065224f180394b6d847b8f9e58c5e6731a780c29de5c23fd6d0cd75d58c4da9df5fb9e1f71a867fc990bb9f7e2ad8f02738cea160a9a9f44df6bc07b9ff6dc98df2f39d65aba86e8e7a988c6ff6e15d288c43d9ea0b8b78b81aa9bc2f99055b2b690e92e7a51167daacdf75ed9bc115ae6e8293abd7dc99112a7a8c7396e1352c3cf0c8e858ace7cf55140128d78368322c7abba19c8cf9cf2220a1dcd9c7b8098b3cce02096c5f599887039b779b3dd662b59620835a3e06db76e3807edac23462d8007330ec24013e27de781665d9c835b4176adc75c69a12643e4cca457f2c44a6bb75fd82cb0f0cb1171d09d4877164a599b5c602b536f70256868d4b8fcc8283f8cbf42254ae8fe1aa1740f5e57b283bb994120b58407a1c4cb73cb8dba4295d98a2cbb9ed7a1bd72a064d10a9a64b1b8060029cdb5f4ab91504a74167f34dbdab6d45ff0126395b4a1529e901442ee5d4502fdd2fa8ffdab8aa7e0128ca181f8fe3510860be835d6e3744f133e0d8970bc0caa1582582fe542c7f8764b88be27bca4e9a0d49344b7f3a652c1ffafa6f1b1a6552972ec355892404bdea757126fc4e0fe95a0bba595913da7f81c990b3c555922e55b4efd2ba0df3390ecd4ed72ea6e597613b14685c2b434e362cf0075ae8229e0786c693f55936f2d1cb4a8272e9986bfa719303c482f6ac85b32f7ab92e84f7679274556a5adf3e840cecb079f60945f1ddb3733ff1837dd6cbb87e5b0347b8d91bc58ead6ae50db95680019c28b1154d5fe9e013c0cd34fd9285faf4b0e27e690e3e3cb26332bd3495166fc3a641557f619158f2203d9382ba4574abd810df8a854a9c7a3fdff11976767e0dd7e4e6a56761f9b034f8e532c04adabd65a590ef417c0922fa74fec083aaca8e16474a7ae8e1226c7ef57faead772d43257442e7f3f54bf57ea83eaa12fe87c4b6c2d3d101b74fc5701561e676c94b1107d9889164a57678f219359aeac823ab6a66f9f8f28465c055df08e77d4fe27306738ea88bb5a0ebe31c786a731db8ffa3951a5d6caad7bcccec9f24fe3606241f66823b1ca244e09e5aaea600fffd7cb28ae451001977f0d1e61d14e6c272d10d40375cdd449703aedc45a23993c8e18bef6bca17439406b3d0cec5ef0aa76c689e87af6fb4282cde064c6132394160e243ad7d65cf5549bc47ba3ea94aa02589b8f68c7663f7df8f7bcd60053e3e30affa657e0a66e4a3cb35b57c31b220021fe33d272f83aeb0ecfdc4896c2de37d792f831afb18960f601b2ea51b9f2b2a90b322a9c592062703b06d62fc6b228a99147569115f4f512f67b982c8f8c2d7f493e27cd0ec7fea33813e2bfe86492e62003a3724c213adcde35d267371c3f4760bbf2f8bf0e8824fdd43c1635fcbacc1a080c7ecd734eb410f3c7354d238d355062c3920c2240bc18ac7149615225433f8c08de575fb68cb1ddc7846c4b5430ee0e0a940d2d385e41af4ea63cde119c6a4a162714590c246fd12729240feb10419e6f280ab38fd3da6a28a10718d8104d488f9427378ab237a9bff80bcf26ff5e9ab4ff1cb29a028facbc71b59c4962edfaad43fe9a3e9630d4299287399417868d3813399045f88c8ef0bfc335e58c325308d010f976f7e21eb571f6712946fe788914927caf9322d4fb3bb8b52d17be632843b1e942664a74317b86106fa9b68aefaa3add98f3120712ff946f6aaccdb4959deda9cb4e328c40e66c943aed402ef7ba32df50e12bcb3d0c13e0fea4bb0869800ae5d6787bf8be14890a2e121048884cd28dca3837fb94f61eca6ff9638d73de06087a41123613ddde1263a2dbc8a25335beeed71f0a8c7407a701fa9f8d9d33db6933964fd02722a4640f79d554d3d18122183decf6785905b30a2461e77439d586805d9dcdb90b026959cf7870fa59b87541705c220acef8e29b4faea4aab6979bbfb96361fb2899e3ac1e6663c7818d6fd52c5b8af7c3ce1651520e422eac4d79fc820579ede16939fc6e74ac4a041292c6565ba832d9050c7f4d81d64fe50ae718740ec5be90e6ba0ec8a6272a8f822fe23a232174855f6a1b6f500e6a961985194c4e69ca2e21959069dfa0268dd7d8b89a2b7a2302c4a36ccce671dea84492d65193161df7ffc6890ad6e6a4c3a06c56127f522884c6b1b4c05967d99d41c8a0c0b3cf2724834c4ab8388a5b81a605acb354f4f6fc4171f983a57e3aef746f9bcd0df172c49146ee62b692855d41648d316a8be75d1f5f302982e1d3a044d0d72831b32cc67c92e95a872479815c154398090e161a5e27ad985b814e51b86e01f24d24a776194c13895db838b8e4cffa0169b1073707ab8016697c8adcdb999344fd82b41bd3b92693f17d6a395fdc4dd7ed2d1af4f9424949b70341713c9d44feff1aa13ea92c0cdde835d66c98a5eaa720cb37742c301dfcc3546b292ac1c5120e4cb3fcbef382a1fc8822a4265f7ea6db3f298e630621c2bde77037864dd09ab9e1eb1973eeea6b4570867124f426f8268f51d5ad2ddd486dff2955ade3d3a186b0cdae95365a6b4a4912147bdabbb2c7c6cebc93eef8176dcd27482b7154de3f95db63917c5e39b29d386dcec551c7984afe85a490ebaa6a2012904317dd0929299f70674e7141710a2ea62d0f080e23c6aa4b90eb8c4ce8fb03808ad65655cf1debf52dc1ca8861fed58410a74621fdda98ae1e1a47b316fbeb1322176649d291d4ac9c1624556b3c4e0cfef3d77f3a76dbbacfddde877b66b740c0e039eaa4a6391c5e5211c2b9b25cf9e77d0da1210ae99920447bba8193ec6d08575e4d091cf3d058d84f835f8bd5f898ffee209d06108112104590e32b346f1e23e2831fc82092c85f75956f07ec83ca4ca42b42ecbaf125f33b6b42955590593d6835bee51f3790bcf6846f978eac858f1df6c2fb362c19b0a5ab79b5df2b9994260a1c92f4f0512457d8b7945aff21e30c7f5962979f07fd4844ab91457d00a516e5ddb642fd4c2e9ac1900fe3b2fd9a2a5c5b52ae66221c0ecba94ba8706ecdcfbbde4bea2d97daa4c4d7447ca986368aab4ac61a2c6627456f069cee4af4ac7553126f9e2af50c7dfd459c582d77b048d1d5b9eef40ccd3fa7373fdd93dcd51b0833673c584db93865acf5e71355037843f8bbc198440beb6d4408041568e9705bc6c88002e533cdd873ba4bd03d0359c8ff1154fa7bd8efb800ea67b0922b44eba35121e33b39a4360e4e64944b6bfacfb139bd19d412a82d99b17828200f4ba446e32a631d31d124a11802ed3543e58900f5594c68aeb8b9d8dbc1b86d4ba22b4376f8f4209b52a2339b5a068b173a0149462157f772e714c028cbe04df17dc660457c0b8df1688eb531026a71269d3c752e8bef2b297708c0ba649196d03bb00c2801439d7d875914bb60234a2a809782ad077d1b90f21191ff8ca81bda15ca412529aba8c460f80d3f09bc0f45730e9e10f543bae0b7e71e572d9c4454b972fa752a56427d0eb1b265e50aa2e4e43fceddb2cd43d9062060b07671eaac594861e4b0ee5a0e944c6c1a8c15bdae0a6e355f769f1d2de7e4d45ece6de8a34d2b59d4bdf010a02d5bf54ef665a469ab7f627e0bf1c11ac1209dc58e257485559f75eb561c6ce6d561e0f5aa5fa62eb16cae2f7d4ba899ec53b78d850a459491eea5f3c6b224b7311844aed459b85c6b3f3253f80b05652b36ce670b782a6d9b59ca69d8eab76d08561bacab962df21dc0b31a36a1fec95cab230ac25ba7da5b5c2195661cab21ade7a04f66ea21b3c6feac42551af44328010ff4e6fab871349d2a769e58a17369aaa6ebfeae8b28596f2cd8c430a9f1090b8952bc0962252b50c4e00e417155a247f6020a2a366eb115c4a9dc4c725148b7fc5ad654d771a0c28ab80b4aa8e89ddd65dd59fca87458a30f7b111715a07d9ae85a6480c132021dddd3896bab9a2a2c812d8b461e317522e548c9cabd5048649ad3e1d33bc072dfe69ed758abf97f6d1584d9e428edc94e5a36839a2857531a6ae40b1249168977342f32627f75725f0d025dc20e9f5d91fffaee428a14703102ab5f6685fc470f9054373444a99c3a8432fb57e3243c4c938883adfc5f9ba10894d4cca5799764a4dd7e54d3cfedfdc325f8f79e8d635b527be1cfca64da86c26108d435c3df0a74a43775b546e65b9c69fb7211f2737de34cce95ca888829d271cc4c9f09eeb9b4a9e45221127fbe3d8bbd2e30ff62a07f50cf396be95e63015b93a1fa711fbd3ec5ec79c9faab5d735d7e207e57092270923627da9afa2fdcf18575d6be3e99c93827badc76988adaf21773c63440a02dd217444c63824984aec9d09bd7a370980f9f0b47cc01faca7fdd83b71fff41bd986b1b32b11ae01d8bf5c39182362a320b25dea8bca4c034f6f9c9c15384bfd6abce4f90665a46bedb7046665bcbb765bdeaffe3b76f6680f91103d0317caa8e9c45f84e05c93900135770dc39c4b237e9a4f094d1c17b97b2f47afa56e54593212926edc022a58b49303e8c307b094f182d0686fc7c1f3496bac130a102115d6daf3cdbe17cb4c3a8e125dfad4c3de7bc368603d2dfa3d57e07fa3ebccaa1d4eb4ae31b7ebda3c9ffe765088b5c8435e66c7b5a19d0feb26846b454c170cc0093e0e1bcf1fbba515a573692b3f434990eead89b4344a01bdb9f119d302d6b728e69d0abe58221dd97fb", 0x1000}, {&(0x7f0000000240)="8404803c14899aeeab794b8fd9ff3f4ced6819745c115d9084fe55a0d4b5f558e28afac8e21403cf8f7fbd77879e38ea2545a643223b7e26568d1a9877bafbc37062935f177aeabb92db734a218e77db7db0ff2f87a84f2b1c0a3962cc4dc34210624865f5f0f2cd73debed9f8805da5881ee9bb84cc48e8ec2c5fa2c53d9184ce1a75c684a89c5f1f30a7e90c3edee9c17b033e5bb81af62e7fcb93fd3fbe78b0936595a1f4e6781b01e6bfffc5491cf9dfc56b6a32e69e74e738a94aad73d5206e7f533f1eb3097c80c9c2f786f26ce7aeff16b536df359f935fbb3c7b7734cbe57037099527a24d97234dcc69290530d8", 0xf2}], 0x3, 0xffffffff, 0x3, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r5, 0x9, 0x9, 0x9}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2920.417892] FAULT_INJECTION: forcing a failure. [ 2920.417892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2920.419827] CPU: 0 PID: 16071 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2920.420859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2920.422636] Call Trace: [ 2920.423060] dump_stack+0x107/0x163 [ 2920.423618] should_fail.cold+0x5/0xa [ 2920.424204] _copy_from_user+0x2e/0x1b0 [ 2920.424800] input_event_from_user+0x1dd/0x280 [ 2920.425698] ? input_devices_seq_show+0xfd0/0xfd0 11:36:48 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:48 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2920.426430] evdev_write+0x257/0x410 [ 2920.427215] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2920.427997] ? security_file_permission+0x24e/0x570 [ 2920.428730] do_iter_write+0x47e/0x670 [ 2920.429322] ? import_iovec+0x83/0xb0 [ 2920.429957] vfs_writev+0x1aa/0x5e0 [ 2920.430487] ? vfs_iter_write+0xa0/0xa0 [ 2920.431076] ? __fget_files+0x26d/0x480 [ 2920.431708] ? lock_downgrade+0x6d0/0x6d0 [ 2920.432301] ? find_held_lock+0x2c/0x110 [ 2920.432895] ? __fget_files+0x296/0x480 [ 2920.433488] ? __fget_light+0xea/0x280 [ 2920.434148] do_writev+0x27f/0x300 [ 2920.434668] ? vfs_writev+0x5e0/0x5e0 [ 2920.435238] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2920.435993] do_syscall_64+0x33/0x40 [ 2920.436525] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2920.437281] RIP: 0033:0x7f2bfaa5ab19 [ 2920.437854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2920.440631] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2920.441777] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2920.442845] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2920.443854] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2920.444905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2920.446017] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2920.447389] hpet: Lost 1 RTC interrupts 11:36:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 14) 11:36:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:36:48 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2920.637677] FAULT_INJECTION: forcing a failure. [ 2920.637677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2920.639512] CPU: 0 PID: 16113 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2920.640593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2920.642330] Call Trace: [ 2920.642746] dump_stack+0x107/0x163 [ 2920.643316] should_fail.cold+0x5/0xa [ 2920.643909] _copy_from_user+0x2e/0x1b0 [ 2920.644550] input_event_from_user+0x1dd/0x280 [ 2920.645288] ? input_devices_seq_show+0xfd0/0xfd0 [ 2920.646039] evdev_write+0x257/0x410 [ 2920.646631] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2920.647469] ? security_file_permission+0x24e/0x570 [ 2920.648265] do_iter_write+0x47e/0x670 [ 2920.648853] ? import_iovec+0x83/0xb0 [ 2920.649456] vfs_writev+0x1aa/0x5e0 [ 2920.650058] ? vfs_iter_write+0xa0/0xa0 [ 2920.650695] ? __fget_files+0x26d/0x480 [ 2920.651290] ? lock_downgrade+0x6d0/0x6d0 [ 2920.651933] ? find_held_lock+0x2c/0x110 [ 2920.652582] ? __fget_files+0x296/0x480 [ 2920.653226] ? __fget_light+0xea/0x280 [ 2920.653871] do_writev+0x27f/0x300 [ 2920.654428] ? vfs_writev+0x5e0/0x5e0 [ 2920.655017] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2920.655807] do_syscall_64+0x33/0x40 [ 2920.656381] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2920.657131] RIP: 0033:0x7f2bfaa5ab19 [ 2920.657681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2920.660430] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2920.661574] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2920.662658] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2920.663694] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2920.664730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2920.665772] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2920.667008] hpet: Lost 1 RTC interrupts [ 2936.161371] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:37:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:14 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001013cb1a3780fa51bf2890e0000ff5a00000004e4da0008006b00000000466fff7a22f667b485415f06025f12672603009700b94b089d00040000000000003a269331d964a07c121cf958878f24ab0b3d1817094069a7a9d6411c9f8f54f56ad932ee1cc39d49d74c26f6f7a10d9e983fe71a04523e515ca8311ce39a682c8287269244171898851ebe0bad8340229c5ba4c011a05bec74a1be73e986b521356c895c941f1d2200baedd75e02e4742b6e635899d644bac9a43e06ceea70a1076f6e85f75b2a3bbcc39b121babeda1e830293ec637be62771bdb61a7477fac535db51c9cf0d67140bb3c65cec8bd1a9176"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = gettid() process_vm_readv(r3, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000080)="b17cd83d", 0x4) 11:37:14 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x88, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xc5227398f0f45f8e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 11:37:14 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x398}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 15) 11:37:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:14 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fP(e1\x00']) r2 = syz_io_uring_setup(0xf7e, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x2, 0x0, 0x200}) io_uring_enter(r5, 0x57c4, 0xfe58, 0x0, &(0x7f00000001c0)={[0x1f]}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) sync_file_range(r6, 0x80, 0x6f, 0x4) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x101200, 0x0) close_range(r8, r9, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) openat(r1, &(0x7f0000000380)='./file1\x00', 0x200200, 0xd8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2946.762415] FAULT_INJECTION: forcing a failure. [ 2946.762415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2946.765634] CPU: 0 PID: 16137 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2946.767420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2946.769902] Call Trace: [ 2946.770594] dump_stack+0x107/0x163 [ 2946.771537] should_fail.cold+0x5/0xa [ 2946.772376] _copy_from_user+0x2e/0x1b0 [ 2946.773406] input_event_from_user+0x1dd/0x280 [ 2946.774424] ? input_devices_seq_show+0xfd0/0xfd0 [ 2946.775679] evdev_write+0x257/0x410 [ 2946.776497] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2946.777844] ? security_file_permission+0x24e/0x570 [ 2946.778958] do_iter_write+0x47e/0x670 [ 2946.779970] ? import_iovec+0x83/0xb0 [ 2946.780805] vfs_writev+0x1aa/0x5e0 [ 2946.781757] ? vfs_iter_write+0xa0/0xa0 [ 2946.782649] ? __fget_files+0x26d/0x480 [ 2946.783677] ? lock_downgrade+0x6d0/0x6d0 [ 2946.784575] ? find_held_lock+0x2c/0x110 [ 2946.785630] ? __fget_files+0x296/0x480 [ 2946.786595] ? __fget_light+0xea/0x280 [ 2946.787490] do_writev+0x27f/0x300 [ 2946.788297] ? vfs_writev+0x5e0/0x5e0 [ 2946.789164] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2946.790282] do_syscall_64+0x33/0x40 [ 2946.791130] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2946.792291] RIP: 0033:0x7f2bfaa5ab19 [ 2946.793131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2946.797303] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2946.799128] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2946.800977] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2946.802840] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2946.804689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2946.806564] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2946.808660] hpet: Lost 1 RTC interrupts 11:37:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:14 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:14 executing program 0: unshare(0x2e060600) unshare(0xe020d00) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x9, 0x0, 0x0, 0x0, 0x0) unshare(0x0) unshare(0x40020000) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x11128b8, 0x0) unshare(0x28000000) 11:37:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x8001) 11:37:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 11:37:14 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:14 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000180)) ptrace$cont(0x7, r0, 0x9, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r3, 0xe}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ptrace(0xffffffffffffffff, 0xffffffffffffffff) 11:37:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 16) 11:37:14 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x1010, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x8, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x1, {0x0, r5}}, 0x7) r8 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x20, 0x200402) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000240), 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10102, 0x0, {0x1, r5}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2947.365726] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2947.372690] ext4 filesystem being mounted at /syzkaller-testdir271657688/syzkaller.E6lVKo/129/file0 supports timestamps until 2038 (0x7fffffff) [ 2947.424530] FAULT_INJECTION: forcing a failure. [ 2947.424530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2947.427397] CPU: 1 PID: 16253 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2947.428846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2947.431670] Call Trace: [ 2947.432241] dump_stack+0x107/0x163 [ 2947.433012] should_fail.cold+0x5/0xa [ 2947.433827] _copy_from_user+0x2e/0x1b0 [ 2947.434679] input_event_from_user+0x1dd/0x280 [ 2947.435637] ? input_devices_seq_show+0xfd0/0xfd0 [ 2947.436659] evdev_write+0x257/0x410 [ 2947.437620] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2947.438739] ? security_file_permission+0x24e/0x570 [ 2947.439797] do_iter_write+0x47e/0x670 [ 2947.440622] ? import_iovec+0x83/0xb0 [ 2947.441423] vfs_writev+0x1aa/0x5e0 [ 2947.442221] ? vfs_iter_write+0xa0/0xa0 [ 2947.443082] ? __fget_files+0x26d/0x480 [ 2947.443949] ? lock_downgrade+0x6d0/0x6d0 [ 2947.444825] ? find_held_lock+0x2c/0x110 [ 2947.445704] ? __fget_files+0x296/0x480 [ 2947.446578] ? __fget_light+0xea/0x280 [ 2947.447428] do_writev+0x27f/0x300 [ 2947.448173] ? vfs_writev+0x5e0/0x5e0 [ 2947.448982] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2947.450031] do_syscall_64+0x33/0x40 [ 2947.450871] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2947.452026] RIP: 0033:0x7f2bfaa5ab19 [ 2947.452861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2947.457056] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2947.458765] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2947.460345] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2947.461948] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2947.463531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2947.465122] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:37:15 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) recvmsg$unix(r0, &(0x7f0000000880)={&(0x7f0000000440), 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/17, 0x11}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000600)=""/204, 0xcc}], 0x3, &(0x7f0000000740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x40000102) r3 = syz_io_uring_complete(0x0) io_submit(0x0, 0x5, &(0x7f0000000ac0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000100)="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", 0xfb, 0x3, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x80, r0, &(0x7f0000000200)="8bcec2820b03028dce6730baf29f1a187f15626eeaef225edc441cb4aabdebec5cce41422be1c6c27b2920d75bd58d7e36d9481315e4c6", 0x37, 0x9, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000380)="cebfd54c07d4923898a9c273922f34d759effeb3c92f8cc1e0322a28a925baea7eb3279bbab61d0b4ff70bdaad4ce117defe6085128b67490e3b9d362b43cc104444346af0b1da5e4cef0cd98e669102ff7eb1e13cbf3bb44cc23127c44b261d1fff6bee", 0x64, 0x8, 0x0, 0x2, r1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x62a, r2, &(0x7f00000008c0)="ade57b2336be15ae95e8fd80d1efb5fb017cbd1008ef1d96ec2c54efd598f5ac241c19da571d538234680f5034a7980f8de4429bb359bb1de3872ad361d7a929e88b70d8a7fc4c5b9ed7e8061fa80b61144b1705eb9a185e6fb14549aa4c6130ca04f674eadf0a73b0cb15b3eab743", 0x6f, 0x642}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x7, 0x4e84, r3, &(0x7f0000000980)="8cf0406e74fc974b4eb3018401ba5c8cccf4198fed2f7cfd0cc22c56e66d07f1936b453e12eaf1ac93873c51cd2e23187025fa81ef99d0a81b90f250182e40b17eadbc8fbdeac699c1f17ddde42c789c3c3524b3d7143cab432d439f254b43d068a77d1a09b9bbb2f1ca7bee4ca14e592e1d9ff3f174a0dfea43893b7d5d2fd750d9b31fa39ac6ef2ed34f719522f66dfc97cade118332bcbb15ac0114b85bb6abcbb5a1b8125ba460a8ae01da6a35a7aabc5136449eff59390fecb9d18e6c47f318789e935ba5162dc64f", 0xcb, 0x10000, 0x0, 0x1, r0}]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$VT_WAITACTIVE(r0, 0x5607) syz_mount_image$iso9660(&(0x7f0000003d00), &(0x7f0000003d40)='./file0/file0\x00', 0x0, 0x3, &(0x7f0000004300)=[{&(0x7f0000003d80)="e3f044c5629bf03c0374a63e7979a6e1f64fced6ba47", 0x16, 0x100000001}, {&(0x7f0000003e00)="4839bd657cf4bc417ba6446bd03b9621c6d2abd8f696a6479bfbe044f76ba980205272869c6d4b2c2208eb303963909bb630a5cf6fb015dc3a3da5091eb863dd9b7acc968e23b6b08e9c94e565985f6efbd592d72404aa1b684a160d", 0x5c, 0x6}, {&(0x7f0000003e80)="b9267004eefdf663c1a387024e5b34a2b632cfe1f4f0b1ce1b9a2e76ba2f489a7b836668d01da44eb10d10290d26322373bba7530cdc6cad85127b8452e0b3f08d8a58f196c436c8db6c54178a202bc6ee9a5c5b09604348d8d809c059663745becb9b19054f9673b34753cc24cbb41b75b359a67ecd3dd4e830370a", 0x7c}], 0x10000, &(0x7f0000000b00)=ANY=[@ANYBLOB='sbsector=0x0000000000000007,obj_user=(#{:!,dont_hash,permit_directio,uid<', @ANYRESDEC, @ANYBLOB="2c64686e745f686173682c0047dfb450a46f681690b21ec7476f6202ab6c929c6c7ce72d27dcdfef8800d5b6acf56fc69042af3ce612bbd3b1e50e81d2ab8220b5039a4947ad147dfca9be3114ae23a9536f9de61931b036726af3e76a132d1577ebbb2b0899e1ba17ea8e63613ea0d4549e954ef2eee27612ab8e74d74853bb6ace66864f065f91d5dae49cefd2c0d23f4b4bfac7bff6dbdcf84c2e188fa45caa80a383d5b0bf57b231edd5781bf85e25ac49d42d4fe7a30586559bb64dd45473b0bfa8c6c681c9ad9757bcc4bb6c8c6e6971d9fa85834c03e90583c6d95c67b6"]) 11:37:15 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2961.378513] kmemleak: 9 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:37:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 11:37:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xf0}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000140)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0800000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) 11:37:38 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000001900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000018c0)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, &(0x7f0000001600)=[{&(0x7f00000002c0)="6985b5b46e160509d00ad5b2a8b32dd1446a2e9d7cb5266bc6ef8206c731721c6d9bd64491002a6fa55a312312091e2c48b0b1e2ad6f0e2848cc126bcfdba8a608b36ed334f1760620c0e8", 0x4b}, {&(0x7f0000000340)="a6005bf525fc46ae03f4bb7833aa6c2be7783d53e1fcea91a2293c481a0550a5ecc2e38ad4bdd576ee689b3cdd5e1dcf99648d559e486169937479cc7f1c536fe730faa2198815f9014b962fe6e15afa91aae400292743b49845d19207f68a984492b31cd8297155a9eb96af7dd72382bf78523250e13c1b67f948f2737b27e50c902f5f46e55da6fd8988b81e25c46744361123ca5e69d72d90f04de9260db25ed8d08a783901ea5bbb20b56468ff38020239e64dcf5abd20a783972e9c064ed03498391e7ae0f6d167e23da727a94ef1b6e547555bd991a7", 0xd9}, {&(0x7f0000000040)="a8067bb038e6ad0b6d3308a7cdd206cce3891746b28dcfbc284eefb31365429d13e0a40aba592bec49be6722f9f87e1e709686acae40f454860d926aff32e08d", 0x40}, {&(0x7f00000001c0)="f8f54d8a1533c553cf36e2169197b07bf48c9d96dbb883425c8479f2befe06314ff91527a7e118cdbd1a500a014c870c0c", 0x31}, {&(0x7f0000000440)="dd56be93b0841a9d97e994be80da64a235621aed8945a0f373a1dd13ae94f3a42e59f3fb78838bc284da8d48c11cc27c20d0bf3d57ff5d210d30f20fc35192d2d53053c99c503a107ba36ff258883985aef493e2f62e1453a4dd05d48e195b6cbdef4b168bb4e725bb8aa5cd5607784814cdcfab7ac7ebe116bddfd05f9be306ff5ac46a0095123ca12b4e378f7454e710a104e7185d5f52c204166fd23bc634630988b93992f38273aa", 0xaa}, {&(0x7f0000000500)="6191e89d9d9e193b77f81158f650df965523dfe1a0b7d56d2cca0254d01849b37df3aa22f103c3b9d6c6216394fb20a41563e9605ac4c67e3edb3c48b4aaba9a20d44d48be66f35184cd450429cde1daf601c9957b160944c33a10f20fa660b30ccbf4d0d99d6c97a53f93d14155c0a6f917b784324dac90b281e90e79f282ff71777e79ec2f6ae9e01fc79fe3f85ce226a9171a683128d0cb7829a02a8361f7f44b34ec5d464dcbe8e769f75cfd6984026c39aed537487b3b00a65b9b679d1821cc7745e760a1bf764a97a293ad278cce59ab99f509ea137410dd5491e5c4ddf0ca434ce4b76a67891dcb5ac6f0b57bc68577b1", 0xf4}, {&(0x7f0000000600)="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", 0x1000}], 0x7, &(0x7f0000001680)=[{0x50, 0x0, 0x8, "bf6fb9c995e005b33550d7412defb1c95ba43fef2dfc388d08918142b3f92b71a0b8c3fcd9cf5ad8b9ad69dada1470732f57e09110b9930bb6ae8101"}, {0x108, 0x109, 0x101, "9960ff5ee0cd44b521a1f798eb235b62bae709971d44bc5398b1bac345f6fd467d1435ca1be17802ab97cf00746b3808123d79dceb904b925d5e072f88bb82d201284ca6280b3908e0c58ae619b020b9ed0b8a41eeeb66e7a59d6d2ba37092d96fd1c821d00f246567f77db2edeb475f52a6218391f54a73e5a66349972db444dc1dd478d64f16c05cf03c792fe08844c5931e5bf1e46215e139a625ce06dde4af23ffc006d835f12b143499b615131b0c0c78505ff7be8bbee654080fd8af6fc871fe670e2009329e91ea100c149e214585ce518e0de9ffd691d94678e75c315b0c50c4d5c118cf0b30d1684e2f0171948b"}, {0xd8, 0x1, 0x2, "c0fdbc9a871c77cf1c18d61f70982a71bd7d5ccb350c9e84954053f0446151b76fd47465aaee6cb2d058fd72c35a205bbdcea64c40fefbe554a7fc88affa1ace5d7ea3652b9061e5e032bee496ce714101fec2cf6bb1ca96d07fc3c418abb335eecd4e653f5d2ae8ddbce685b3c08fcbe3372966c21c1a20bd039573eff2c92161c2d84ffa9d59e5b882384e697b79af50c424a66fbcb3c6835d63ef53197ee51eef7c8de9d8038013691c38b55c1a176828a73bda28769070b3e66c9abf52268db4b25d"}], 0x230}, 0x0, 0x20000000, 0x1}, 0x7ff) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:38 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 17) 11:37:38 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x400000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb00000000665e2e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}]}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) 11:37:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x52a0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4000, @fd_index=0x5, 0x2, 0xdc, 0x7, 0x2, 0x0, {0x2}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2970.794148] FAULT_INJECTION: forcing a failure. [ 2970.794148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2970.796937] CPU: 0 PID: 16309 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2970.798549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2970.801159] Call Trace: [ 2970.801778] dump_stack+0x107/0x163 [ 2970.802655] should_fail.cold+0x5/0xa [ 2970.803548] _copy_from_user+0x2e/0x1b0 [ 2970.804472] input_event_from_user+0x1dd/0x280 [ 2970.805527] ? input_devices_seq_show+0xfd0/0xfd0 [ 2970.806672] evdev_write+0x257/0x410 [ 2970.807548] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2970.808764] ? security_file_permission+0x24e/0x570 [ 2970.809932] do_iter_write+0x47e/0x670 [ 2970.810870] ? import_iovec+0x83/0xb0 [ 2970.811757] vfs_writev+0x1aa/0x5e0 [ 2970.812599] ? vfs_iter_write+0xa0/0xa0 [ 2970.813516] ? __fget_files+0x26d/0x480 [ 2970.814442] ? lock_downgrade+0x6d0/0x6d0 [ 2970.815402] ? find_held_lock+0x2c/0x110 [ 2970.816348] ? __fget_files+0x296/0x480 [ 2970.817280] ? __fget_light+0xea/0x280 [ 2970.818184] do_writev+0x27f/0x300 [ 2970.819031] ? vfs_writev+0x5e0/0x5e0 [ 2970.819914] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2970.821029] do_syscall_64+0x33/0x40 [ 2970.821889] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2970.823091] RIP: 0033:0x7f2bfaa5ab19 [ 2970.823952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2970.828235] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2970.829994] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2970.831662] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2970.833318] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2970.834970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2970.836656] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2970.838626] hpet: Lost 2 RTC interrupts 11:37:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:38 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:38 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 11:37:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x40000000, 0x0, 0x0, 0x0) 11:37:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 18) 11:37:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x938c, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000680)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000000)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000006c0)={0x1, &(0x7f0000000200)=[{}]}) r6 = dup3(r0, r0, 0x80000) r7 = socket$inet6(0xa, 0x800, 0x7) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000740)={0x2016}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240), 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="01100000000000000400000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="3804800000b365f6fac6496300001002", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32], 0x188}, 0x1) io_uring_enter(r8, 0x525c, 0xd786, 0x2, &(0x7f0000000640)={[0x101]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2971.183498] FAULT_INJECTION: forcing a failure. [ 2971.183498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2971.186125] CPU: 0 PID: 16370 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2971.187674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2971.190148] Call Trace: [ 2971.190750] dump_stack+0x107/0x163 [ 2971.191567] should_fail.cold+0x5/0xa [ 2971.192425] _copy_from_user+0x2e/0x1b0 [ 2971.193372] input_event_from_user+0x1dd/0x280 [ 2971.194449] ? input_devices_seq_show+0xfd0/0xfd0 [ 2971.195523] evdev_write+0x257/0x410 [ 2971.196334] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2971.197480] ? security_file_permission+0x24e/0x570 [ 2971.198591] do_iter_write+0x47e/0x670 [ 2971.199440] ? import_iovec+0x83/0xb0 [ 2971.200291] vfs_writev+0x1aa/0x5e0 [ 2971.201104] ? vfs_iter_write+0xa0/0xa0 [ 2971.201968] ? __fget_files+0x26d/0x480 [ 2971.202877] ? lock_downgrade+0x6d0/0x6d0 [ 2971.203791] ? find_held_lock+0x2c/0x110 [ 2971.204718] ? __fget_files+0x296/0x480 [ 2971.205774] ? __fget_light+0xea/0x280 [ 2971.206660] do_writev+0x27f/0x300 [ 2971.207448] ? vfs_writev+0x5e0/0x5e0 [ 2971.208391] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2971.209720] do_syscall_64+0x33/0x40 [ 2971.210710] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2971.212006] RIP: 0033:0x7f2bfaa5ab19 [ 2971.212828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2971.216873] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2971.218565] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2971.220128] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2971.221690] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2971.223277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 11:37:38 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x609f, 0x38ad, 0x0, &(0x7f0000000040)={[0x6]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:37:38 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012180}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) r4 = getuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x98, 0x1f, 0x4, 0x70bd29, 0x25dfdbfb, {0x13}, [@generic="bdd27f196a223e325c5772aaf7dd28d9cd5476c65ba7b6ecf5737f835c9e97063b835ddab265aa91890db2b0a36f63349efc46b3bccdcf7a24726e80687242233eee55c95d90fc7cc0e017158065f6043280e3c5709d644b023a0c2c1e5c33a7fa07b89844186625e1cf3a8460892137b3080edac7978f78ee76f8", @typed={0x8, 0x3c, 0x0, 0x0, @uid=r4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4801}, 0x8040) [ 2971.224830] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2971.226875] hpet: Lost 2 RTC interrupts [ 2988.070025] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:38:05 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:05 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x1df3, &(0x7f0000000240)={0x0, 0xbd44, 0x8, 0x0, 0xfe, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:05 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 11:38:05 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0xd1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={@id={0x2, 0x0, @b}}) dup2(0xffffffffffffffff, r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="201900d07642da921fd61d12430c6c6b8c0ac5c96e48065e24ecf3bb8ce311427a", 0x21, 0x4e0}, {0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='d,\x00'/16]) 11:38:05 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:05 executing program 0: syz_io_uring_setup(0x5d4b, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @loopback}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) r0 = socket$inet(0x2, 0x3, 0xff) syz_emit_ethernet(0x145, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0180c200000a88480000000700000003b4000000004d8001230067000008069078ac1414bbe00000020044349423ac1414bb00010001"], 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000300)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 11:38:05 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 19) [ 2998.397049] FAULT_INJECTION: forcing a failure. [ 2998.397049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2998.399706] CPU: 0 PID: 16456 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2998.401205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2998.403683] Call Trace: [ 2998.404257] dump_stack+0x107/0x163 [ 2998.405052] should_fail.cold+0x5/0xa [ 2998.405882] _copy_from_user+0x2e/0x1b0 [ 2998.406785] input_event_from_user+0x1dd/0x280 [ 2998.407774] ? input_devices_seq_show+0xfd0/0xfd0 [ 2998.408834] evdev_write+0x257/0x410 [ 2998.409646] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2998.410804] ? security_file_permission+0x24e/0x570 [ 2998.411903] do_iter_write+0x47e/0x670 [ 2998.412753] ? import_iovec+0x83/0xb0 [ 2998.413583] vfs_writev+0x1aa/0x5e0 [ 2998.414372] ? vfs_iter_write+0xa0/0xa0 [ 2998.415236] ? __fget_files+0x26d/0x480 [ 2998.416101] ? lock_downgrade+0x6d0/0x6d0 [ 2998.416999] ? find_held_lock+0x2c/0x110 [ 2998.417893] ? __fget_files+0x296/0x480 [ 2998.418772] ? __fget_light+0xea/0x280 [ 2998.419621] do_writev+0x27f/0x300 [ 2998.420390] ? vfs_writev+0x5e0/0x5e0 [ 2998.421223] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2998.422275] do_syscall_64+0x33/0x40 [ 2998.423121] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.424240] RIP: 0033:0x7f2bfaa5ab19 [ 2998.425060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2998.429050] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2998.430747] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2998.432312] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2998.433872] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.435443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2998.437020] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2998.438860] hpet: Lost 2 RTC interrupts 11:38:06 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 11:38:06 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:06 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/80, 0x50, 0x42, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000200)={0xa, 0x4e23, 0x7, @private0, 0x6}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000240)="fadf31a5bf492f707a8eb3509a1112dda731bdac1817bf0ba95a0fe0c0e7645be75a1c592cc794be4300ab9467fc35a5c52897e63c0c0d19839422616b12adde24b14ae733bb76396dc80d81bf0eeb6b9826a5821ae8cc68981a02e7e5219aa855902a8d2acbe54ca70d3be4a8d71495b6536bd26ed46ad60f23232b1314e75d982c", 0x82}, {&(0x7f0000000300)="46eeeaa6d24d27d139690c47d2ff52a23bf49ee098bb7695a1aad4cf533d563ac0f986647e2455b36ad893e4e1445f05e6b5a71fed1e493e59a2132942e374b562551cdd4af4a7dabff97c5785463c3741310d8df668", 0x56}, {&(0x7f0000000380)="51332db4c6ac1348aaf625a2a33fac536dfe1b0272ecd275d85b6279e233239e2097124ea3ffd0b10864a565e9cbc7ca805dc5d2f00665e4e2347968e9433272a0e0178b4d240c5288eb500a01c696c09dacfc", 0x53}, {&(0x7f0000000400)="87107bb55d1a43487426d5efb6260d719248fd0d0f29864e874761a553009a9b33dbc102b8bf0d905370b59ed91aa8ea6245dd80b78af5884a2c4fc51d9ce4a9e46dce5b606921e876f4567f4609326094b29644ec0daf7c1b339da9b3", 0x5d}, {&(0x7f0000000500)="b9341384a40116c54e8e02311d5693feb86e61df357eaa0d673986fac665f18a26e3d33f2f7754650e985dfeb1504f9b2743cbb31152baf22a992d453178d39b85a87bcda003a8640c3f", 0x4a}], 0x5}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/146, 0x92, 0x2, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @private2, 0x400}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r3, 0xffffffffffffffff, 0x0) recvfrom$inet6(r3, &(0x7f0000000640)=""/88, 0x58, 0x40, 0x0, 0x0) 11:38:06 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040), 0x6) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = dup3(r0, r0, 0x80000) io_uring_enter(r4, 0x2942, 0x8674, 0x2, &(0x7f00000001c0)={[0xffffffffffffff7f]}, 0x8) r5 = syz_io_uring_setup(0x1a84, &(0x7f0000000240)={0x0, 0x371b, 0x2, 0x2, 0x29a, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r6, r2, &(0x7f0000001680)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r4, 0x0, &(0x7f0000001640)={&(0x7f0000000340)=@l2tp6, 0x80, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3, &(0x7f0000001540)=""/231, 0xe7}, 0x0, 0x2, 0x1, {0x1}}, 0x7) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000000, 0x13, r0, 0x0) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r7, r9, &(0x7f00000017c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r10, &(0x7f0000001700)=0x80, &(0x7f0000001740)=@nfc, 0x0, 0x800, 0x1}, 0x5) 11:38:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 20) 11:38:06 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x1, r0, 0x1}) [ 2998.736695] FAULT_INJECTION: forcing a failure. [ 2998.736695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2998.739491] CPU: 0 PID: 16522 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 2998.741084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2998.743676] Call Trace: [ 2998.744280] dump_stack+0x107/0x163 [ 2998.745129] should_fail.cold+0x5/0xa [ 2998.746014] _copy_from_user+0x2e/0x1b0 [ 2998.746930] input_event_from_user+0x1dd/0x280 [ 2998.747941] ? input_devices_seq_show+0xfd0/0xfd0 [ 2998.749070] evdev_write+0x257/0x410 [ 2998.749955] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 2998.751250] ? security_file_permission+0x24e/0x570 [ 2998.752420] do_iter_write+0x47e/0x670 [ 2998.753322] ? import_iovec+0x83/0xb0 [ 2998.754188] vfs_writev+0x1aa/0x5e0 [ 2998.755029] ? vfs_iter_write+0xa0/0xa0 [ 2998.755929] ? __fget_files+0x26d/0x480 [ 2998.756861] ? lock_downgrade+0x6d0/0x6d0 [ 2998.757801] ? find_held_lock+0x2c/0x110 [ 2998.758748] ? __fget_files+0x296/0x480 [ 2998.759648] ? __fget_light+0xea/0x280 [ 2998.760517] do_writev+0x27f/0x300 [ 2998.761343] ? vfs_writev+0x5e0/0x5e0 [ 2998.762211] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2998.763308] do_syscall_64+0x33/0x40 [ 2998.764152] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2998.765317] RIP: 0033:0x7f2bfaa5ab19 [ 2998.766177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2998.770457] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2998.772197] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 2998.773839] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2998.775469] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.777085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2998.778704] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 2998.780586] hpet: Lost 1 RTC interrupts 11:38:06 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2999.206228] EXT4-fs (loop6): Unrecognized mount option "d" or missing value [ 3014.608305] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:38:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x8000) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100), &(0x7f0000000240), 0x2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_setup(0x2877, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x3, 0x1000000, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_complete(r3) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE, 0x0) 11:38:32 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0) 11:38:32 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r0, 0x400) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/207, 0xcf, 0x3, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012b00)=ANY=[]) r2 = accept(0xffffffffffffffff, &(0x7f0000000300)=@nfc_llcp, &(0x7f0000000040)=0x80) recvmsg(r2, &(0x7f0000000b40)={&(0x7f0000000380)=@caif=@util, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/250, 0xfa}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000680)=""/241, 0xf1}, {&(0x7f0000000780)=""/181, 0xb5}, {&(0x7f0000000840)=""/187, 0xbb}, {&(0x7f0000000900)=""/243, 0xf3}], 0x8, &(0x7f0000000a80)=""/151, 0x97}, 0x1) 11:38:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 21) 11:38:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000240)=""/229, 0xe5, 0x7) 11:38:32 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:32 executing program 1: r0 = syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:32 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3024.882881] FAULT_INJECTION: forcing a failure. [ 3024.882881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3024.885617] CPU: 0 PID: 16570 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3024.887168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3024.889667] Call Trace: [ 3024.890257] dump_stack+0x107/0x163 [ 3024.891113] should_fail.cold+0x5/0xa [ 3024.891996] _copy_from_user+0x2e/0x1b0 [ 3024.892880] input_event_from_user+0x1dd/0x280 [ 3024.893894] ? input_devices_seq_show+0xfd0/0xfd0 [ 3024.894984] evdev_write+0x257/0x410 [ 3024.895813] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3024.896978] ? security_file_permission+0x24e/0x570 [ 3024.898096] do_iter_write+0x47e/0x670 [ 3024.898978] ? import_iovec+0x83/0xb0 [ 3024.899827] vfs_writev+0x1aa/0x5e0 [ 3024.900628] ? vfs_iter_write+0xa0/0xa0 [ 3024.901504] ? __fget_files+0x26d/0x480 [ 3024.902384] ? lock_downgrade+0x6d0/0x6d0 [ 3024.903309] ? find_held_lock+0x2c/0x110 [ 3024.904226] ? __fget_files+0x296/0x480 [ 3024.905116] ? __fget_light+0xea/0x280 [ 3024.905999] do_writev+0x27f/0x300 [ 3024.906792] ? vfs_writev+0x5e0/0x5e0 [ 3024.907671] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3024.908744] do_syscall_64+0x33/0x40 [ 3024.909576] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3024.910720] RIP: 0033:0x7f2bfaa5ab19 [ 3024.911559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3024.915662] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3024.917355] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3024.918944] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3024.920519] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3024.922093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3024.923682] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 3024.925468] hpet: Lost 2 RTC interrupts 11:38:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 22) [ 3025.074938] FAULT_INJECTION: forcing a failure. [ 3025.074938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3025.077567] CPU: 0 PID: 16616 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3025.079170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3025.081702] Call Trace: [ 3025.082291] dump_stack+0x107/0x163 [ 3025.083130] should_fail.cold+0x5/0xa [ 3025.083986] _copy_from_user+0x2e/0x1b0 [ 3025.084877] input_event_from_user+0x1dd/0x280 [ 3025.085888] ? input_devices_seq_show+0xfd0/0xfd0 [ 3025.086998] evdev_write+0x257/0x410 [ 3025.087830] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3025.088987] ? security_file_permission+0x24e/0x570 [ 3025.090101] do_iter_write+0x47e/0x670 [ 3025.090978] ? import_iovec+0x83/0xb0 [ 3025.091825] vfs_writev+0x1aa/0x5e0 [ 3025.092628] ? vfs_iter_write+0xa0/0xa0 [ 3025.093506] ? __fget_files+0x26d/0x480 [ 3025.094385] ? lock_downgrade+0x6d0/0x6d0 [ 3025.095313] ? find_held_lock+0x2c/0x110 [ 3025.096226] ? __fget_files+0x296/0x480 [ 3025.097114] ? __fget_light+0xea/0x280 [ 3025.097977] do_writev+0x27f/0x300 [ 3025.098763] ? vfs_writev+0x5e0/0x5e0 [ 3025.099617] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3025.100683] do_syscall_64+0x33/0x40 [ 3025.101503] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3025.102635] RIP: 0033:0x7f2bfaa5ab19 [ 3025.103469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3025.107520] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3025.109190] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3025.110746] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3025.112318] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3025.113886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3025.115470] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 3025.117247] hpet: Lost 2 RTC interrupts 11:38:32 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:38:32 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:32 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 11:38:32 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, &(0x7f0000000040)={'dummy0\x00', @ifru_ivalue}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:32 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:38:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000001600)={0x90, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd152}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0x4009011, r1, 0x0) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000015c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x2004, @fd_index=0x1, 0x0, &(0x7f0000001580)=[{&(0x7f00000003c0)="36513f0c99a07a4bc62271b6bc816d9ad307e0093d8631e2f307282a2fb7a90b72a11f3d44350f65fc4d2c7017051f6e98c93d2159d21b9e485a751ecdf30ac09a449e38ed5df01aceb9bae2a0a0f5a7134dc11e371679f7a42022ad54e1c4070b3133085aece5fece38c19af150a0cecc22cf6e10624c5a8ae9d182b82345", 0x7f}, {&(0x7f0000000440)="c5f73bc902d2dd643eb17f5b721bf908f2c585691a6816b2be3bcf1c7c4ae68493eda3e92fae9307", 0x28}, {&(0x7f0000000480)="6ba97ac36ab9dc2031531178cd762b20507b4d2c314906eaef618e2713a55589ee0a5d5b83fe80c2cc487a5beb88b24776b63cb73e960001bb0f336ce8756288a0a4220c1fa883d8c199c52931239c9006caba08ffd69b322aa7eaacc3816aa2572cdd5862e23f7a9eecb7c0be5231f63d50818ad4f5b32574bc952e54a9a5a1824662497e349b43b924afa7190f5083e9b1a5c8698e460198a563c552c509c215b359547d15b7fa09f86d92f3621df9978778a50d48d2d66bf6b138e2259434cd77cd871eae0a9edbabc683ba8c1b146cc0394b4212a097811df3", 0xdb}, {&(0x7f0000000580)="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", 0x1000}], 0x4, 0x2, 0x1, {0x1}}, 0xcc3d) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:32 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3039.746996] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:38:57 executing program 6: socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0xb5, 0x1, 0x1, 0x7}]}, 0x10) 11:38:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 23) 11:38:57 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x80000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x2000003) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xa4000004) inotify_rm_watch(0xffffffffffffffff, r3) inotify_rm_watch(0xffffffffffffffff, r3) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, r3) inotify_rm_watch(r1, r3) syncfs(r1) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105142, 0x0) 11:38:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0) 11:38:57 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:38:57 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = dup2(r0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:57 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x14d6, &(0x7f0000000240)={0x0, 0xcd48, 0x2, 0x1, 0x281, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x8, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, {0x2, r6}}, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3049.892511] FAULT_INJECTION: forcing a failure. [ 3049.892511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3049.895414] CPU: 0 PID: 16711 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3049.897117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3049.899885] Call Trace: [ 3049.900531] dump_stack+0x107/0x163 [ 3049.901421] should_fail.cold+0x5/0xa [ 3049.902355] _copy_from_user+0x2e/0x1b0 [ 3049.903348] input_event_from_user+0x1dd/0x280 [ 3049.904458] ? input_devices_seq_show+0xfd0/0xfd0 [ 3049.905648] evdev_write+0x257/0x410 [ 3049.906560] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3049.907891] ? security_file_permission+0x24e/0x570 [ 3049.909134] do_iter_write+0x47e/0x670 [ 3049.910091] ? import_iovec+0x83/0xb0 [ 3049.911028] vfs_writev+0x1aa/0x5e0 [ 3049.912038] ? vfs_iter_write+0xa0/0xa0 [ 3049.913230] ? __fget_files+0x26d/0x480 [ 3049.914481] ? lock_downgrade+0x6d0/0x6d0 [ 3049.915763] ? find_held_lock+0x2c/0x110 [ 3049.917040] ? __fget_files+0x296/0x480 [ 3049.918270] ? __fget_light+0xea/0x280 [ 3049.919465] do_writev+0x27f/0x300 [ 3049.920502] ? vfs_writev+0x5e0/0x5e0 [ 3049.921561] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3049.922917] do_syscall_64+0x33/0x40 [ 3049.923934] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3049.925363] RIP: 0033:0x7f2bfaa5ab19 [ 3049.926392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3049.931718] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3049.934073] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3049.936276] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3049.938442] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3049.940669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3049.942869] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 3049.945414] hpet: Lost 2 RTC interrupts 11:38:57 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 11:38:57 executing program 6: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x81}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) inotify_init1(0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.pending_reads\x00', 0x10000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x2f, 0xffffffffffffffff, @out_args}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x810, r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x50) [ 3050.062879] FAULT_INJECTION: forcing a failure. [ 3050.062879] name failslab, interval 1, probability 0, space 0, times 0 [ 3050.065920] CPU: 0 PID: 16740 Comm: syz-executor.7 Not tainted 5.10.123 #1 [ 3050.067790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3050.070610] Call Trace: [ 3050.071312] dump_stack+0x107/0x163 [ 3050.072215] should_fail.cold+0x5/0xa [ 3050.073157] should_failslab+0x5/0x10 [ 3050.074088] kmem_cache_alloc_bulk+0x4b/0x320 [ 3050.075203] io_submit_sqes+0x11c2/0x2310 [ 3050.076232] ? __lockdep_reset_lock+0x180/0x180 [ 3050.077356] ? perf_trace_lock+0xac/0x490 [ 3050.078374] ? io_queue_sqe+0x1020/0x1020 [ 3050.079444] ? __do_sys_io_uring_enter+0x107b/0x1900 [ 3050.080687] ? mutex_lock_io_nested+0x1110/0x1110 [ 3050.082094] ? percpu_ref_tryget_many+0x167/0x290 [ 3050.083320] __do_sys_io_uring_enter+0x1086/0x1900 [ 3050.084756] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3050.085938] ? io_sq_thread+0x1640/0x1640 [ 3050.087133] ? wait_for_completion+0x270/0x270 [ 3050.088271] ? rcu_read_lock_any_held+0x69/0x90 [ 3050.089399] ? vfs_write+0x354/0xa20 [ 3050.090492] ? fput_many+0x2f/0x1a0 [ 3050.091397] ? ksys_write+0x1a5/0x250 [ 3050.092504] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3050.093708] do_syscall_64+0x33/0x40 [ 3050.094638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3050.095883] RIP: 0033:0x7fde8a0b9b19 [ 3050.096799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.101264] RSP: 002b:00007fde8762f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3050.103123] RAX: ffffffffffffffda RBX: 00007fde8a1ccf60 RCX: 00007fde8a0b9b19 [ 3050.104785] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3050.106321] RBP: 00007fde8762f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3050.107864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3050.109396] R13: 00007fff1c2158bf R14: 00007fde8762f300 R15: 0000000000022000 [ 3050.111222] hpet: Lost 2 RTC interrupts 11:38:57 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:57 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000007c0)=0x2, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x1d0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3f}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xfa, 0x5b, "70238b4e68e044583d28617f560e25a3f3f9ab3f5859c8b2fca4c9430845b3853907300d97a1a89033d185d4ae9ad90b40cd3d3061a8ec98ad8d0634c4f5b4155504fa5b73010a57b81589aa68464ae0a552becb20a12af8d267ed20d7dd63120ae6e7b0c1d31c2bef14359bb9dae1c5cdfe3c1aae8daf50f3574ede4b0e62e1ba6a830de3b858a741785f491b609683ad8e41a8c93d4d023b922e9149396091edda06673a29b0b4de614edaf379a8f026ea6d2ee997732aecc970214ef9a6c926a521aedba69124231f743ba06e2e1b1ed60123d4104aa9d7f74b7687258441f646e5a3bcba39c0183a0540e9efef9f54a047bfa86e"}, @NL80211_ATTR_FRAME_MATCH={0x50, 0x5b, "2a40095792b3e78845fb881ec8180b52d7d209353bbdfbc3aa777234d6e66535e40016126a1fb34f4ff9639566d95646b7d83cd46d4093f8417bdaac87668fe510a8280175284e6a6e5894bd"}, @NL80211_ATTR_FRAME_MATCH={0x31, 0x5b, "306a2a61c1bd77844f5db5564c351119362634883a48b31b6c13dcac1fc30df2f4f322b09a8478d097297729e7"}, @NL80211_ATTR_FRAME_MATCH={0x20, 0x5b, "3ab3da4040cb49da18c4c3d1a68fc326ca5dd7bdb4bfafb2a6b2f65c"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:57 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3050.195361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16765 comm=syz-executor.2 11:38:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 24) [ 3050.275573] FAULT_INJECTION: forcing a failure. [ 3050.275573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3050.278190] CPU: 1 PID: 16781 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3050.279725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3050.282123] Call Trace: [ 3050.282786] dump_stack+0x107/0x163 [ 3050.283580] should_fail.cold+0x5/0xa [ 3050.284408] _copy_from_user+0x2e/0x1b0 [ 3050.285255] input_event_from_user+0x1dd/0x280 [ 3050.286238] ? input_devices_seq_show+0xfd0/0xfd0 [ 3050.287274] evdev_write+0x257/0x410 [ 3050.288080] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3050.289193] ? security_file_permission+0x24e/0x570 [ 3050.290291] do_iter_write+0x47e/0x670 [ 3050.291117] ? import_iovec+0x83/0xb0 [ 3050.291950] vfs_writev+0x1aa/0x5e0 [ 3050.292720] ? vfs_iter_write+0xa0/0xa0 [ 3050.293555] ? __fget_files+0x26d/0x480 [ 3050.294414] ? lock_downgrade+0x6d0/0x6d0 [ 3050.295314] ? find_held_lock+0x2c/0x110 [ 3050.296210] ? __fget_files+0x296/0x480 [ 3050.297072] ? __fget_light+0xea/0x280 [ 3050.297914] do_writev+0x27f/0x300 [ 3050.298754] ? vfs_writev+0x5e0/0x5e0 [ 3050.299588] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3050.300626] do_syscall_64+0x33/0x40 [ 3050.301409] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3050.302512] RIP: 0033:0x7f2bfaa5ab19 [ 3050.303310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.307284] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3050.308892] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3050.310450] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3050.311967] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3050.313496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3050.315111] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:38:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 11:38:57 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x3fe5, &(0x7f0000000240)={0x0, 0x4797, 0x0, 0x0, 0xb5, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}, 0x1) syz_io_uring_submit(r3, r5, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="0e3731825ffdd5836b0b817315374b8de64cec6333938ad9f04a19627ce19208151693f848746e1815e97e9c4233f14951", 0x31, 0x404c880}, 0x80000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r4, 0x8000000) [ 3050.377475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16765 comm=syz-executor.2 11:38:57 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:38:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 25) [ 3050.621585] FAULT_INJECTION: forcing a failure. [ 3050.621585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3050.624240] CPU: 1 PID: 16845 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3050.625719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3050.628268] Call Trace: [ 3050.628838] dump_stack+0x107/0x163 [ 3050.629656] should_fail.cold+0x5/0xa [ 3050.630503] _copy_from_user+0x2e/0x1b0 [ 3050.631409] input_event_from_user+0x1dd/0x280 [ 3050.632414] ? input_devices_seq_show+0xfd0/0xfd0 [ 3050.633491] evdev_write+0x257/0x410 [ 3050.634333] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3050.635496] ? security_file_permission+0x24e/0x570 [ 3050.636604] do_iter_write+0x47e/0x670 [ 3050.637470] ? import_iovec+0x83/0xb0 [ 3050.638316] vfs_writev+0x1aa/0x5e0 [ 3050.639132] ? vfs_iter_write+0xa0/0xa0 [ 3050.640014] ? __fget_files+0x26d/0x480 [ 3050.640881] ? lock_downgrade+0x6d0/0x6d0 [ 3050.641827] ? find_held_lock+0x2c/0x110 [ 3050.642793] ? __fget_files+0x296/0x480 [ 3050.643692] ? __fget_light+0xea/0x280 [ 3050.644568] do_writev+0x27f/0x300 [ 3050.645352] ? vfs_writev+0x5e0/0x5e0 [ 3050.646201] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3050.647277] do_syscall_64+0x33/0x40 [ 3050.648113] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3050.649224] RIP: 0033:0x7f2bfaa5ab19 [ 3050.650042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.654050] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3050.655695] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3050.657254] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3050.658856] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3050.660413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3050.661950] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 3050.688970] cgroup: fork rejected by pids controller in /syz0 [ 3066.232501] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:39:22 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 11:39:22 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f00000000c0)="83a59717", 0x4}, {&(0x7f0000000280)="5271155ddf48d01a6b7deb96d9efe664b682cceddf28457ec67ce8a3aebef8e75108f9015f052a5dd13cabb0062e44881f8ed5392d47c96dad8ff5c3b19e25c7cedf93641a37440145ff777dbde7bf3e5b8a1bbdb26ee712ce7f218d025c7e1693dd6e467bf59a27ec2909bc9fcff86cc0ff717a1b643203eb0d27be680ce770b5a0f98df5d002f7", 0x88}, {&(0x7f0000000340)="e0dc54ae9659044f890e104405f7a6fc5fb5a560b636b94e00804bb5cd668fc916e35f71c5375a75ad06eb840b62c1387b221e6899bdceecbfd9d7605eee950eeac208073e85124f3fd2da28d7d9b340f92a097554a350054cfeaae48407c4d92a17fb4ae729f695c98486a58abea8d2bc1a", 0x72}, {&(0x7f00000003c0)="4a3ca59b7a1c9f0b2f7564faa8ea884d92b4099f74b7592681da9de3b34242f500193a06849d04795f5f11bc8654e823facda75df14c8bf4dd17279392094c2ae67b5fbbe7baee9e236c6ee0178985de3d35607ce23dc1fd7572f2080cd4e2ccaeb970284b4777c324bf", 0x6a}, {&(0x7f0000000440)="e27d233ea6ffc2b3d0540b364856736e49f2f059e958f125a6f0bc906234fa454cd8c9d37bfe290eec5f387488dd6fc4a23d31fce62d5b1d9a826c4ed3275f19580d455376582a3d16f93d97b1bfa0b09e400e8172bf2bc1697893379b632c8859b8568ed08998c4086c965f5a9abd1b1d69449647f9e2737403fabade064bfdc96f283d3317045a2fef53f69d841fcbd0a8400e4e2796a6237d509476b3e8dbded43b3753174a6e4a4e9fa61df2baeb2b4d4e80adecc926a9750bbd6c0408391e16f68b1e2ca8daed18518983fb30d55358e1622ec0294ee1e249b0226c484c949c32b1ae6b9d97cb1af221c803852fd012d84f529240c4b3572c7a6109ccf7f338994e7ba7505191c63d400c62b115eccacf2b38a75fc7de2e2648e2f85ca2b3d2127e2e238638ee139e4b8525e6986a14a7a866e0186153eda537ec069a5683e199bc18a3e0c905ad51eb6f612abb976ea022c2bdd41fd83de567a16e5e6fa90a010ef2ecda8ff46c64a05f5acb396fc96ef6885e7e69c7003114d23b7611c9b3c348e6d107f3b779fba1b73ebbf05e80a5e18c34974f10fc56e2bfb4687e3d95df9b83fb2d812b2ee011cdf1d5074478910a2413f121cfa83c34b407b4c3f26ad260cfecbea44e804ebefe662e12ae72ba47916b2a52be711f1563ae132c1f3b82d7f8f845b0f46ca1f283de873b5cfee76e574ae6b936d64a6786c3ac70b81da48c58f106f71edad9071845bd0f3ae838b389822ced550a259d52c8e806fe10c59cd39599ab53d20b3d6f758b66eedeb88edee90a40278c360bb9653d6f1e4951dc08e3c256225063182af5136e395090522c41ef2841c9d110eec6550d39bbad46228471a574e4742dbd15dda8629964eb66e4118180b0fdc6d45a9f1712389ce9f5b16c6ac90074b9f141ff194ffbb0a97541eea17524c7cec9165813fda4d31c39b672ad484d9407a2606506bf4b17515aafbc97fabe657b75fa7a2fc09a066293bcd7fa8d650797cf7223d22d36001959b26032a8493b2dc54964f881d6afee5e95c559421168bd9a8379e4d46049d0ff8e9f682e440018a56cb9660f98363a86a2b83008d67d675a41aed8bd069e51792217b06c2997460b207edb25307457df315c1906a794a999829d3c5ee073f35dfde47a8e9d832eaab8c11f03219066f97b81d65b19aeff0f3f940d82f698a46f49a775ae4fcac422f6ec07a6d39f0bfa7c9380ee7f09dd73a0dc42d708e7e6ed824c4fd39a2c562619b7907a7518920eec1d00941ffc82ecbaf20a2cb9e003ca0d13bf586f3761c08b9783fae8b7c94d560bf34ec60f3730f3d2f0829dc796d90ed54aeb2db4367601d00e11c15a0a3e353fb1045e5ec5d54033eaf92e918fc012269ffabe79d9d24584ed86f07ee6ea61a518aca3eaf26c8039c37927b83b23f5e5d55698f428710202b779b4fccdcb2c10ca960e56ce097b73fedea1a35a4d78c387d9450b326f0e04a1428f666d3e38c66630bbe895ad3a322d4de07806c209841a8a25bdf858adaebd77e1b76beca2add8e72f8f070c32f31e1dea90e7b0e035b8aca58135c3bbb04c2b2783f1967641c64f8756e209e00526efdf86288d276ae98b141d5ca65ca6db539ca5bb7c862d9f22dfd89cccb180a56e3303f67c192d448ccb2ab6e7292a10537e96e9e68c64350fbc876256d3f9d1d48a3be40b3c7e4cbc1fd6fefd85000cab30e4e91a4ab3492e5f5b714b53a933a775acc0ee50b6c0610125331f75584522951886402c7df09f6f786b1ad25ed3e83699f428d9031b3c7472b308c49437674c43f2f295a22d23eba09688d709c2029106567c88c30a89fc8acbc884aa3498e5043717257251ede1dcdaa492e131d743a9c0209f6a6eb06be8addf1133b404fdcfd69c8863c62cf3e3577bd191831ec1b1b6f98b0adb1ce7483473c59802b75424168a69113d8e2a0cdb7671946d52c978fc13ae26adefe7cd620388bb2b576437655ae940719020beb6de449805bbc69003b86001bc3ca60d83548ed083c7fe9afd72feef885d3bcb39f67c37ad07eb2205338e021284da81aa5943daa0a4739535619ebd6cccc6fd499edac8d8159316d26b669986e45bb6818b02e324a9c008bbad0b504bdf5e8311ee127f84ff0399e29454ecd65fd7d039f6b25659bca000e74a34cc51e14baba2a6dbb417d52ee31c00c8e08e5ad721169759e51b835c9b448bbb39c769e7c1600bfc6ea3622974c54a3dc46c1067baaf1f297f6722562a9422c6b717129a5e552e19d5acdbbc39f2cb815db95f201b555a7d890b371a8e7de30a55a1ea72b652afe7c476a35bae718f4ef1ea82995c7cea7b13d7fdb937b734da155769d77c7b9d36b5090ccf6bf96fde04cb964e1816638c0210e672317ca66638e8eccbad19b547acee6d57e64bdea8b69c2dde708ef5a6c962d48bddb97b74545299dbbc8a8a5f6aca802a9b225ccc874880e922a4a644b51b75bb4e92599905bc65bdf782320ca85257adb685d4da4fdd1609146b3b1923d20295ed806ff889fb92e73a270cf0832ae3f7840b24c8808971b84aa928a7e76047ba18fd67b4120fedb6496c69418c8d90301d8994427b9bc88f1be1d5634291397bb0b5f2c72e64dc89d2d5827efd689ebc4b536d25e1f38c844d6619c3503df91fae2c886eae80a5ffb7a32c643f8c9c3d710a05a715df9d743e7ed6591b5c5ba892c596019fdecb5f73000fcbadea1aa67a57569f49c5c352855b8cd0eab907dca60781d2a530be79a693e8f50f20d297292b08b14154d0340021df4d4a6443926e70b4efe544c63abae60089131c2c4d88f067a2224439673dc013468bc12fb78ff50c9d3d18683ea001e83e4a70e106be07f25b55426273404c10038f6f51f1ab2983c463ad18e1430ae772c62abd259a200f720a0ed51492936ae790279e792ce6a9e1354d506f02e883f07ffcf45d8c8463013af66aa337d56e4d66364d99ebcb94e58d5bfa4ca00af454e84195d25d4409de9e8d3cacc2c988d9d8b9089ea396873a76c33f3826f442cedb266bdc3caff468fc0958c6164efd117fc3e93782fdc63f6f7ec75fd4497a44fd7e86cf6ddd035b6eaf46860e932a8f33cf41453b9c1e0db75b5f21a7b474627dc67540cf7189df8c0551d9ce01117100473b60150d355d522bc78686af09a3c3eebff103fdbea5da68dd22b6a461136110d56304bccb7cf98b1cb6e2daf6c84f98919ab0ffd41068d4668154038dea4f30e31382646d2a44410e108cf593bdf2fdc6373d89d13960918b887038b1b0d59ab59bde169563c4a4e9929f1cf3d4b21051399c89b2312ab5367313a82d380cf5b742efe51d69bda0b462266ae1179fbde3041ec0a5e4c2a4640eb7dc231726ebd68252cd3c92d9317476d4cfb90b04bbb08daac75f07c4e87c89e24e9c2a2f22e084daa3630677eac0a2327f908a9f10f306c1163f42da380ee241a9adbcd636f937855fa431c04a39185c911227f7d18b8d98a9c1ff0144e0ad88c178c59f76e5246c57e038603104087dfb6550fd9d84ac6b1ab44a3defa006055c0925001f9652b79aff5e84a6c75123c5700ffe7bb750bb5b5c1542bcdda2126fabe181567437a232d17a41274e0d143cf99d0a21c80d3e8b16ae7f15760e316c42de21358f35a8f179b77e26cb466e70c2c4cc02e83e8b45b9b7a8fe0b2652b2637e96e1c7e12fa826f04a93f4d674fbe777a9eefb7649e24173ac1f13f4af366d7186f0af8e2ea2850891da86a7199e4fea42e41071a3613f47a1ae45060a3eb74a33a235dc7354a8945514577f72653f1b2624806c083da49dfde28ef778a1cdf6c0eca9dfd156fbcc9dd584afec35fe96fe6b08577b8e3d43bffcf7fbe2e46aeae000702e231fe438c3417d06a1ca9053eb0b5321d361bfdd42b9f81a577b0ce514e6d406a9325a23c9044e744f7fa106a487ef032fbbf66e0ecb2cd6e44d55a3de3fc1f3ecd9691471a1de845687d128a8f79743a92c125e7f92011d0e26aef9e44582dd1a74e968da469cfcbd3b0f06cce12793336797531f5c4882ead08323d5a265ecfb57c2b242c4b5ee01497ab216287c78e004b98fc4b11448da02e637a88c017edbb70c85b5ba2fa0e943f4606f4d28ec17ffdce5991d62f6dfcb4f2485f87fef8838c504eb8a41e423fd13695a84dcd1662685d3498b876b289f9e4b10de66705226a7613eb144b4615ab86cb4a3f1c8a0773abe7102e33c8b104c2581d4ee5b25b82116743473cbcb9bf06ea6908d1af68227a8213fcb5f553df4c075cc8f2dc5366737c7025c2b9ae705abf607ec961de874355cd7e68f1efd3c783c9ebe7462d4edb6b947e48967f6744c7469cc5a9caed96a59514e6646cf4d719f8d1b049b8a647390849b7f187377ab9669f2edf8cfbf26587a4ca159c76010256234de2d33c51cfae7ad6c485adf819f8df22148576c046f2066c75eac2afb098b601fabb27efab612be2985d39ff15970994009f1668b9a2bc9610c2c211695fe83d0de91b65a0c6563d167a28f1c266d360b3541ef6d02f7b09396867caa4b22660b7a8c16cf663d61fc66101747390c55b052949a548152a6f3ebcfcc3f5d63321f6a2580cb98f7a9fddbdafa8e09924692bd64ffc2c5b93a7e0a82e52310db6d016e9f167cbd79be3dc494591be4f639986b6ad4651956f9d4cc67ddc698a0e7beec19b5120ae087d3c51c943ae345f639029f17acb3b142c66dd1e1554ce598f07980e69cacd658f030d622397cf3afee655b67a72d899ef2fa24598b916b709b2052f3892aa6ef9c21facd04971465639a24a1d3e727bd91b99dfebec16080dffbb16cdda64da4bd4f30d4d2f3a1cf094bbe11fe8db830cc4f33cd8437db4db4b5f25940d23628879c1c32edf7bc91b63876e4d6b655e84da2eac565be8c5a3163f8f43232b8e5b1dc113993d2c89b4610331bdb807a863cfe4c47bfd43a8a30675e19500eb1f38f36df2f3b8d86504a1f460b1ae9fbee89c82aff7f868982cecb8369ea4c069e5e7c1eec40a7ecadd327f472600845e4e6dc63e06afa4a668cbf13cb13175e0a5b2f85d4916a8a68873527d72715ee1c12e41141160fd2a11bf223b68ce0277d0d615d4087e5daff8f72a12908db7735ad2e259698050c207525cd922fa989b439d900d04f927e028e8495874f6111360d9a5d720aa35589c83887da5b1acbb025882eea72288dba1c8dd41cc52ff5b3eb8c9ca174600ea5", 0xe81}], 0x5) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = fcntl$dupfd(r0, 0x0, r0) ftruncate(r1, 0x3) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x7, 0x2, 0x400, 0x4}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) 11:39:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x468440, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x104, r6, 0x209, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x8050) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000007c0)=0x2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:39:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 11:39:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:39:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/72, 0x48}], 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:39:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 26) 11:39:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x5, &(0x7f0000000100)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f00000000c0)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}, {&(0x7f0000000200)="b5b360019f9486aea0f9102762fa8cb2a0a60ff4a11c5794eddcae09ff623b6839451488cfccc48ead752a8f5637cd122c7f94adf7f1bf7830fec0373a7236d1a94b122a272425acf23c812306d37bc4b4c35dca8215ac3fb42b5119df3706bd573af4e283695ed2fe913b9b45e94e492ab994a7686ae2521f1171d474aa3308a93f7c3b9060c32d83acd3ce2f52572357045999597d3da26ef0a4e6c02f09b4295061a33be0c2887d27229d7c6820fa9b385456df41c68f52a3443a6358442b76c0243b39b6080a45d37da089a76b50857db1e96b340585b284d1dd80f1132069bbb7f90f1a58a6462a02bb7902", 0xee, 0x2}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0), 0x17, 0x0) fallocate(r0, 0x3, 0x0, 0x18000) [ 3075.177198] FAULT_INJECTION: forcing a failure. [ 3075.177198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3075.179752] CPU: 1 PID: 16963 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3075.181199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3075.183564] Call Trace: [ 3075.184144] dump_stack+0x107/0x163 [ 3075.184913] should_fail.cold+0x5/0xa [ 3075.185715] _copy_from_user+0x2e/0x1b0 [ 3075.186551] input_event_from_user+0x1dd/0x280 [ 3075.187507] ? input_devices_seq_show+0xfd0/0xfd0 [ 3075.188535] evdev_write+0x257/0x410 [ 3075.189452] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3075.190628] ? security_file_permission+0x24e/0x570 [ 3075.191773] do_iter_write+0x47e/0x670 [ 3075.192648] ? import_iovec+0x83/0xb0 [ 3075.193503] vfs_writev+0x1aa/0x5e0 [ 3075.194314] ? vfs_iter_write+0xa0/0xa0 [ 3075.195191] ? __fget_files+0x26d/0x480 [ 3075.196090] ? lock_downgrade+0x6d0/0x6d0 [ 3075.197005] ? find_held_lock+0x2c/0x110 [ 3075.197926] ? __fget_files+0x296/0x480 [ 3075.198823] ? __fget_light+0xea/0x280 [ 3075.199717] do_writev+0x27f/0x300 [ 3075.200507] ? vfs_writev+0x5e0/0x5e0 [ 3075.201359] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3075.202434] do_syscall_64+0x33/0x40 [ 3075.203260] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3075.204411] RIP: 0033:0x7f2bfaa5ab19 [ 3075.205289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3075.209385] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3075.211077] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3075.212673] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3075.214201] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3075.215741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3075.217591] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 3075.223837] FAULT_INJECTION: forcing a failure. [ 3075.223837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3075.226842] CPU: 0 PID: 16978 Comm: syz-executor.7 Not tainted 5.10.123 #1 [ 3075.228636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3075.231522] Call Trace: [ 3075.232215] dump_stack+0x107/0x163 [ 3075.233132] should_fail.cold+0x5/0xa [ 3075.234108] _copy_from_user+0x2e/0x1b0 [ 3075.235110] kstrtouint_from_user+0xbd/0x220 [ 3075.236254] ? kstrtou8_from_user+0x200/0x200 [ 3075.237383] ? lock_acquire+0x197/0x490 [ 3075.238378] ? ksys_write+0x12d/0x250 [ 3075.239352] proc_fail_nth_write+0x78/0x220 [ 3075.240443] ? proc_task_getattr+0x1e0/0x1e0 [ 3075.241558] ? __fget_files+0x296/0x480 [ 3075.242566] ? proc_task_getattr+0x1e0/0x1e0 [ 3075.243673] vfs_write+0x29a/0xa20 [ 3075.244578] ksys_write+0x12d/0x250 [ 3075.245493] ? __ia32_sys_read+0xb0/0xb0 [ 3075.246524] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3075.247761] do_syscall_64+0x33/0x40 [ 3075.248698] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3075.249986] RIP: 0033:0x7fde8a06c5ff [ 3075.250924] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 3075.255972] RSP: 002b:00007fde8760e170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3075.258384] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fde8a06c5ff [ 3075.260669] RDX: 0000000000000001 RSI: 00007fde8760e1e0 RDI: 0000000000000003 [ 3075.262597] RBP: 00007fde8760e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3075.264426] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3075.266232] R13: 00007fff1c2158bf R14: 00007fde8760e300 R15: 0000000000022000 [ 3075.268372] hpet: Lost 2 RTC interrupts 11:39:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x80, 0x1, 0x8, 0x0, 0x0, 0xa00, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd3, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x5, 0xde, 0x7, 0x2, 0xff, 0x3, 0x0, 0x6e, 0x0, 0x4}, r2, 0x2, r3, 0xd) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x410000, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:restorecond_var_run_t:s0\x00', 0xffffffffffffffa3, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0x3f, 0x8, 0x4, 0x0, 0x1, 0x1, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x400, 0x80}, 0x6000, 0xa0, 0x8, 0x6, 0x3d, 0xffffffc0, 0x9, 0x0, 0x40, 0x0, 0x3}, r2, 0xd, r4, 0x1) [ 3075.332255] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 3075.345913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16990 comm=syz-executor.2 [ 3075.509383] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16961 comm=syz-executor.2 [ 3092.645418] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:39:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 27) 11:39:48 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:39:48 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x60f2, &(0x7f0000000240)={0x0, 0xffffffff, 0x20, 0x1, 0x360f7e38}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:39:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 11:39:48 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:39:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x21, 0xef, 0x0, 0x0, 0x4, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0xffffffffffffff4d, 0x3b, 0x5, 0x2, 0x9, 0x2, 0x0, 0x81, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0xd) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) fallocate(r1, 0x3, 0x8001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) finit_module(r2, &(0x7f00000000c0)='+-{#)@(^([\x00', 0x1) finit_module(r0, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2482, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 11:39:48 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000040)=""/2, 0x2}], 0x2, &(0x7f00000003c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x1, 0x2000, &(0x7f00000004c0)={r4, r5+60000000}) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:39:48 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = epoll_create(0x7ffd) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x60002004}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000980)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000180)="e4a44af07b8b3885ab1fab5e6157d3b4eb12368cc22ffa2a6883657e4246faeeb011175ceaa77907665774998222392b2bf9b09ae1a695d1b8d5ecfc4dda98599ed27d37c1ee60b8023346e15b7a534fd29712a06be44a22bffab09aae50c5ae8e18fd5670707f781472fb5beafc1ae0bb03efac357eb32b0920ea83822676a190e6233a73f0df4db88b4d2811dd6aa65dc7abcb588c70be14af9cd8fed0bb743bcb02e2506177fa664ae99f56deb0e6285f35f4a50025961ec7f41b601a78cb882b26e3be338162adf180159ddcb4d8ba6905d6dd", 0xd5}, {&(0x7f0000000280)="4bdeb6ad51b1358d22402364965514818d8c6221a9164728515ac3226c844571338d89c7a961bef51374dd972827aeae6c10376452e79bdad40e5d899868547058b2e761c43d8b3053409852e86051c8b8bf85cb5c25e6d46c41b7a47960fd451606a822f8f34be9153c9d464675fa33f7fa7a0fc770e6f86f944475c5177823a75c657759ff4ccc773e3585b896bd066ef77a331e4f07969b9674c1c99e19b0482ffb0647f4a06b00d603a0671b24c9a102aa9360c104eef8fe", 0xba}, {&(0x7f0000000340)="1ac2b6200f7c43aa1b89f0ea9b3b427747aa8099b4bf6956d7f126cd2f684e51217d366af629633d7a3013f389cab6b4244cb4c04b6ee47fa824916f8435d70be96437dd0a15d0b3ce204329d62cf97959fe807c6ce4e4c7eeda8ae60fd976fb705dd96184d08f6665419397387d58e54b9cacf762a4c1568dae03e9", 0x7c}, {&(0x7f00000003c0)="c1a58e5a9ceb77c0", 0x8}, {&(0x7f0000000400)="b94f75a576bfe3640a222702215371a315a63c5a6bda3a445b27c855e6ffee86d6f8016adbec63b49aa6454717d92e6319a83f824cde0cb8ededad6e167d8046ca9db984bf01fd9d244253bac7cf2cb337deaecbf8b5b2c12589d476bd79183db8a7b3f25f6842a68007bdc87d288120cb64b171e447fdeddd9f8efff86df81aa2c07536ace0dcd2c5e967f1d7befe6b5b88fd3ba627c269697b494f6db91b867f3fca85d8bfd09992a865511360575aeb17e3360035684f55d4abcef00bf649b47893bfa9c8eb371dc22a3227ad1e747d0bd5a28485e91712301845e3b582631656e9f129d7726bc4244b24276e174b", 0xf0}, {&(0x7f0000000500)="2d22580ae1ba73ec7e05dccf58362e10e0023c42073b4c1d01159c4aedab22544b8373999eb0e8d8d553d389fec556caa1f1c0efbcd2e789e9fffc4717d730bc24d76032d4e8272f0cf1799723768e85d7ab748cbb24fd2412c0fe195a1ad8fa421d28566ef5d72ab47f045b5c06787700b358067b79e40f9fd3e260ecaaf95f576cbf6587bc86b0dfc170746a350702f7b85a4130e4d8199dc76953f1893704ebfbc359007a224fdf4ad70bcae39abe82f43de4c8d861f67d6dbdc1b22215b38b4e77d980e2c1a46b990700c2", 0xcd}, {&(0x7f0000000600)="849d1c5931f1587f3e2eb10fe441b363843bc48ba2582d3e6edd43", 0x1b}, {&(0x7f0000000640)="18461819cb2f6ab1c7f0819bbaa7a93045be38434a55a8d5ba4daf61a29e2a3ef4bd83e147a5bfa206e1d0fead0061c8ba64e7ececa079e54662edb4e3bd8d17814e4ec4dd711a1a1dccbd9c41ad13e5d42f409d611dc81d56b81950643edb", 0x5f}], 0x8, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x40}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x2, 0x4, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x81, [0x7e, 0x80000001, 0x3ff]}}]}}}], 0x58}}, {{&(0x7f00000007c0)={0xa, 0x4e22, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x677}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000800)="1d92462f1b47af1e8e43bcc4ecf9617d43cddd17ae778a42a89165b638a7fe0a52add7b3f785fb7959d50812f4911d", 0x2f}], 0x1, &(0x7f0000000880)=[@flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @rthdr={{0x78, 0x29, 0x39, {0xc, 0xc, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2c}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1]}}}, @hopopts={{0x58, 0x29, 0x36, {0x3c, 0x7, '\x00', [@hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x6, [0x0, 0x8]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xba4}]}}}], 0xe8}}], 0x2, 0x4000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7fff, 0x0, &(0x7f0000000040)="4f9e30448e511bc3f3a27b00a6c121062e199c295559ed985396da08c5dff7442d44bb", 0x4, 0x0, 0x0, {0x2}}, 0x4) dup2(r0, r2) [ 3100.928345] FAULT_INJECTION: forcing a failure. [ 3100.928345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3100.931552] CPU: 0 PID: 17032 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3100.933332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3100.935792] Call Trace: [ 3100.936390] dump_stack+0x107/0x163 [ 3100.937183] should_fail.cold+0x5/0xa [ 3100.938022] _copy_from_user+0x2e/0x1b0 [ 3100.938908] input_event_from_user+0x1dd/0x280 [ 3100.940011] ? input_devices_seq_show+0xfd0/0xfd0 [ 3100.941098] evdev_write+0x257/0x410 [ 3100.941923] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3100.943085] ? security_file_permission+0x24e/0x570 [ 3100.944212] do_iter_write+0x47e/0x670 [ 3100.945077] ? import_iovec+0x83/0xb0 [ 3100.945924] vfs_writev+0x1aa/0x5e0 [ 3100.946732] ? vfs_iter_write+0xa0/0xa0 [ 3100.947608] ? __fget_files+0x26d/0x480 [ 3100.948505] ? lock_downgrade+0x6d0/0x6d0 [ 3100.949427] ? find_held_lock+0x2c/0x110 [ 3100.950347] ? __fget_files+0x296/0x480 [ 3100.951240] ? __fget_light+0xea/0x280 [ 3100.952114] do_writev+0x27f/0x300 [ 3100.952895] ? vfs_writev+0x5e0/0x5e0 [ 3100.953743] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3100.954806] do_syscall_64+0x33/0x40 [ 3100.955629] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3100.956759] RIP: 0033:0x7f2bfaa5ab19 [ 3100.957576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3100.961652] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3100.963337] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3100.964936] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3100.966487] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3100.968053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3100.969598] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 3100.971328] hpet: Lost 2 RTC interrupts 11:39:48 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x3ffc, &(0x7f0000000240)={0x0, 0x1862, 0x4, 0x2, 0x25d, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0xe002, 0x0) syz_io_uring_setup(0x5975, &(0x7f0000000300)={0x0, 0x2620, 0x2, 0x0, 0x20a, 0x0, r5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_complete(r6) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r5, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:39:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x80, &(0x7f0000000180)=""/128}, &(0x7f0000000240)="25eb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3101.051695] Module has invalid ELF structures 11:39:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) 11:39:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1518, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f6d626c6b5f696f5f7375626d69742c002c1f91ef6ec6cde5c4a3caaa6f492c2b39f1e7d94167a1d03b9b76a45b285d0ebf414f12491b984c35c36280372d42a4072e34a1c98985d9ed426756546e825c1c09d391bb2092190e3f2278ee614caa965772a672b92d74d25919d9e0397e4b9208855dd32903eb590ccbed0fea1c1ee1001856e9a9a2e6d2be181172dc9f69ed38a5922d55df492a24a50ef9db78831bfc69633c9b871a0dd194c5a9f5a5a5680f7b584d5da6c8da127b8852138b0383ebd93800"]) syz_open_dev$vcsu(&(0x7f0000000240), 0x8, 0x82100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002e00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000004c0)={0x0, 0x0, "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", "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"}) 11:39:48 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:39:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 28) 11:39:48 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3101.305318] FAULT_INJECTION: forcing a failure. [ 3101.305318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3101.307970] CPU: 1 PID: 17089 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3101.309446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3101.311872] Call Trace: [ 3101.312462] dump_stack+0x107/0x163 [ 3101.313240] should_fail.cold+0x5/0xa [ 3101.314065] _copy_from_user+0x2e/0x1b0 [ 3101.315042] input_event_from_user+0x1dd/0x280 [ 3101.316031] ? input_devices_seq_show+0xfd0/0xfd0 [ 3101.317069] evdev_write+0x257/0x410 [ 3101.317869] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3101.318994] ? security_file_permission+0x24e/0x570 [ 3101.320087] do_iter_write+0x47e/0x670 [ 3101.320917] ? import_iovec+0x83/0xb0 [ 3101.321730] vfs_writev+0x1aa/0x5e0 [ 3101.322506] ? vfs_iter_write+0xa0/0xa0 [ 3101.323362] ? __fget_files+0x26d/0x480 [ 3101.324232] ? lock_downgrade+0x6d0/0x6d0 [ 3101.325125] ? find_held_lock+0x2c/0x110 [ 3101.326019] ? __fget_files+0x296/0x480 [ 3101.326896] ? __fget_light+0xea/0x280 [ 3101.327747] do_writev+0x27f/0x300 [ 3101.328695] ? vfs_writev+0x5e0/0x5e0 [ 3101.329675] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3101.331003] do_syscall_64+0x33/0x40 [ 3101.331982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3101.333210] RIP: 0033:0x7f2bfaa5ab19 [ 3101.334013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3101.338026] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3101.339668] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3101.341215] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3101.342753] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3101.344310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3101.345952] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:39:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000005c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000180)=""/9, 0x9}, {&(0x7f00000001c0)=""/9, 0x9}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/58, 0x3a}, {&(0x7f0000000340)=""/130, 0x82}], 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000434ca0df55b4ba5a15278e6ecda5d429f60e8225c193c7c602467b9e2fc2886d07aca1c5ba2956ec6cff8e5752d65115b6da5d975470a6f54f723d68ea20bded26e585c6", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110}, 0x40002000) ftruncate(r3, 0xfffffffffffffff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) fallocate(r4, 0x10, 0x0, 0x10001) 11:39:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 11:39:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3119.467027] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:40:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 29) 11:40:15 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00,/file0\x00']) syz_io_uring_submit(r8, r11, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x8, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x1, {0x0, r9}}, 0x7) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd=r12, 0x9, &(0x7f0000000040)=[{&(0x7f0000000240)="70620f1f9090bcdcbe460f32b82ee368527853b7955ad7195ed587b2273fc2998c04154fb901c5702eb4a0f294ca1f8f291a27df7207418c2beb88fe84cb56ca29aed891b0f3aaa867412c4b4f2b79b24d750700c8effbef291f75788d2d9d40c0a52145c7a585e6dcbad808b05331541a42c2ca39279df460304eb17507ac7f5ec2a06986d03207851acc9bb256dd8dc53c9dc02d49a5c03ed3a73b45cfbb30dcda872fccb5faaba45e39b1873a2c5bb9215b2c33e356be3b", 0xb9}, {&(0x7f0000000300)="315a9de96bdd570dac2e0ac3a18f5a7d07c7afe234f85a27201cd5c238774555b4379ceac1f5094a5bf39c6ce3173f0340c57a162482c587e47163c82b0331491956f425ef1b11e8bb706e90b09e4275120a35f272304bed36e263532ad8d5995f0d9033a65fa41e772c5816435d262df2fe9aa6fccc8cd97619161fc182bb4bac97a7608369c6f289eb22544d289dee3347f2aeb31cacbecd6d5f4f244ae28a456a6ca2f48d62fd9a4158", 0xab}, {&(0x7f00000003c0)="a0b94f3599847fbb2317ab2241f475513f80633da839ec3d5834f183b9e0424d95a40ca7d12092f4984677f149facce2c8427c50d63551cb5791c2735fea3b27a8e1a68410f513a2f065ffb69d64b8b2802190801d0dd3c1ad796d58a31fea2dd63474011c52a44b20787da25323e1a16b87c355d41faebc7a476135f175a8b1f3cca1dbd71493d901af32a198584aaedcc370496ad5d39b119606b529b4fd0f92ff293090c6e7f3311460aeecdcb29424d14bb16e0d0ce887a0ead0ccc4ceb61770daa0193116aeb7028ecca7ee9ebbeda5a3a2c4d9b966f58fa90cf287", 0xde}, {&(0x7f00000004c0)="bc9ba5b74c1e9f7820de7f5dc24a9f2b7898dd016210c23c3d4e894a1d95347d9bb928d2bf1a4745f758715bb6667e90c8f912ce2689950adc1870936fa91544d44b82ccd254141ccb3b3310e5cbca4c196f6272facf6b864939219ab13bf82e176df60223ab58cc1f81be62890ab1a0350f44c4d09a34e7b70a849d791f90ba", 0x80}], 0x4, 0x0, 0x0, {0x3, r9}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r13, 0x8010671f, &(0x7f0000000680)={&(0x7f0000000640)=""/35, 0x23}) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r9}}, 0x80) [ 3127.826167] FAULT_INJECTION: forcing a failure. [ 3127.826167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3127.828347] CPU: 1 PID: 17147 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3127.829608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3127.831624] Call Trace: [ 3127.832017] dump_stack+0x107/0x163 [ 3127.832742] should_fail.cold+0x5/0xa [ 3127.833375] _copy_from_user+0x2e/0x1b0 [ 3127.834162] input_event_from_user+0x1dd/0x280 [ 3127.834921] ? input_devices_seq_show+0xfd0/0xfd0 [ 3127.835724] evdev_write+0x257/0x410 [ 3127.836289] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3127.837056] ? security_file_permission+0x24e/0x570 [ 3127.837797] do_iter_write+0x47e/0x670 [ 3127.838357] ? import_iovec+0x83/0xb0 [ 3127.838902] vfs_writev+0x1aa/0x5e0 [ 3127.839434] ? vfs_iter_write+0xa0/0xa0 [ 3127.840065] ? __fget_files+0x26d/0x480 [ 3127.840663] ? lock_downgrade+0x6d0/0x6d0 [ 3127.841260] ? find_held_lock+0x2c/0x110 [ 3127.841862] ? __fget_files+0x296/0x480 [ 3127.842444] ? __fget_light+0xea/0x280 [ 3127.843009] do_writev+0x27f/0x300 [ 3127.843543] ? vfs_writev+0x5e0/0x5e0 [ 3127.844139] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3127.844899] do_syscall_64+0x33/0x40 [ 3127.845472] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3127.846365] RIP: 0033:0x7f2bfaa5ab19 [ 3127.846906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3127.849636] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3127.850742] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3127.851777] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3127.852802] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3127.853819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3127.854845] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:40:15 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:40:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xa3, 0x7f, 0xc0, 0x0, 0x0, 0x1, 0x80200, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff7743, 0x4, @perf_config_ext={0x1}, 0x2, 0x6, 0x2, 0x0, 0x2, 0x200, 0x6, 0x0, 0xffffffff, 0x0, 0x3f}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "2a00000000000000000000f1ffffff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2cb}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 11:40:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000) 11:40:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x8, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x1, {0x0, r7}}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r5, 0x0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="b93ae05efc77e742112cb81dcbf8958ef738bb8075ae3905", 0x18}, {&(0x7f0000000380)="ff9b24f91ff70b4b6335c7cf779fd3303afd5676541559dd", 0x18}, {&(0x7f00000003c0)="80697d1b3937f8c1ca2c68927cfba2f2bdc9277158d7bc227fb2bb46ec13a43440d3f83e8895f0108074b7d749c46fee241805", 0x33}, {&(0x7f0000000440)="0734d2d8c92d5e37d783e64141a83e8c371c76bca5f8b3cb01fae8092b13bf83497f5a66a5cd50eb044101435e0478eebf742035501a9660c300e8b2c411ec0396e829a24a56def574d7a78633ac25b7e865921178ad6ab5a0631f65ff6eb58b9de53144d3096c912de44cd76aa497f47e08734fef2df5d4b1ed61bd9d6b0329db1cc011d3c33e75e3eee67bada44fa99d63470b982967238eebe08436e79bc5c7d3115257dae708e495c6", 0xab}, {&(0x7f0000000500)="b5ffd862b2e39d0e0fda9cf0773843b3d65405e045b57dff29f3610ba3ec68e3e03c2dad77fc55a8188d1f5bf688d8377881d098525c7ca1641648c60118d26c4cdc3f55bf3ef28ae0f3c2a08ef2f6e2c547ee89b673377ec484bd1600457959dda353b3b2415810d506d8d0390d5c6ed9796dcd6b583a78e2c298b6dcfc52149ea84b051e9e2c1ac75d04218e2f321ce480984ac17e38618d0e91feb7b0c24852014385913f27f98b7cf6fbf1cfee8612cba1ea44cd4ff01862645aad6dabbebe3cba6e22f58a4677116606948808b75d87933444db368b64f69e72739dc3e8398a746e47ea1c22cfad14bcf2fc7a", 0xef}, {&(0x7f0000000600)="89955b", 0x3}, {&(0x7f0000000640)="95f716d4cf32963bec0b0c3416289b5feb0cb44c5660ae7e7e3bf70638b50157c2c5b7e53627eccfceda2fcfb7a48f59bb779dc2c961e965acd61da0e3b9b52156574995e3eac53c22da51b0b10b965c00608e300812458b8a17d5d5e4b677ad0b55a1fba6dbde0ee161e500a8ad7e83e1f94b8c8e9f", 0x76}], 0x7, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x2c8}, 0x0, 0x2000c801}, 0x1) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r10, @ANYBLOB="000000000000e5002e2f66696c653100"]) syz_io_uring_setup(0x2880, &(0x7f0000000240)={0x0, 0x1415, 0x1, 0x1, 0x252, 0x0, r10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:40:15 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000180), 0x6) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x100208c1}, 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd2a, 0x259fdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20002004}, 0x40045) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x772}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x984) r4 = syz_open_dev$vcsn(&(0x7f0000000200), 0x1, 0x501000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r5, 0x404, 0x70bd27, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000880) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x800000, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) dup3(r7, r0, 0x0) 11:40:15 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x7e36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0xd50, &(0x7f0000000240)={0x0, 0x8c25, 0x10, 0x0, 0x3d1}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000580)={{r4}, "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"}) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x8, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x7) io_uring_enter(r7, 0x251b, 0xa136, 0x0, &(0x7f00000001c0)={[0x7]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd, 0x1, 0x0, 0x7, 0x1, 0x1, {0x0, r6}}, 0x47) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 11:40:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 30) 11:40:15 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:40:15 executing program 7: r0 = syz_io_uring_setup(0x35b6, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x67ad, &(0x7f0000000340)={0x0, 0xf073, 0x4, 0x0, 0x3d6, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x20, 0x1000}, 0xfff) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x102010, r0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x10010, r0, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000240)="ec484f16afabeacb667c7a61658429a8814170ef8ece574b7ee4875e23a51ec85ca6735ed53a9061200f5a015e1042dda62ddde0c33f193be2fe16af196287dadf42dcc7dcfd5ba3aec1cbd666d9af12c0d8b76f7915716b73531484ee0a8044cb7029c554494a4944f6ef013599098dee1c80d9059827764c5fc836187a9c8905979e3881857559544799e127a2afd6a9580274f354e1bab9e6a2a229d0ef3b37e850d787faa29ff585926cf7416fd8d1c88e819551e3ffcc8b952ba7af99a92672acf56a68c1173f62f544ffd787508e7726846a6b56f46c54c6dca41e70", 0x7fff}, 0x400) io_uring_enter(r0, 0x58ab, 0xfffffffb, 0x0, 0x0, 0x0) [ 3128.100551] FAULT_INJECTION: forcing a failure. [ 3128.100551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3128.102377] CPU: 0 PID: 17266 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3128.103400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3128.105145] Call Trace: [ 3128.105575] dump_stack+0x107/0x163 [ 3128.106166] should_fail.cold+0x5/0xa [ 3128.106747] _copy_from_user+0x2e/0x1b0 [ 3128.107390] input_event_from_user+0x1dd/0x280 [ 3128.108071] ? input_devices_seq_show+0xfd0/0xfd0 [ 3128.108804] evdev_write+0x257/0x410 [ 3128.109422] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3128.110318] ? security_file_permission+0x24e/0x570 [ 3128.111070] do_iter_write+0x47e/0x670 [ 3128.111713] ? import_iovec+0x83/0xb0 [ 3128.112369] vfs_writev+0x1aa/0x5e0 [ 3128.112908] ? vfs_iter_write+0xa0/0xa0 [ 3128.113500] ? __fget_files+0x26d/0x480 [ 3128.114162] ? lock_downgrade+0x6d0/0x6d0 [ 3128.114790] ? find_held_lock+0x2c/0x110 [ 3128.115444] ? __fget_files+0x296/0x480 [ 3128.116093] ? __fget_light+0xea/0x280 [ 3128.116755] do_writev+0x27f/0x300 [ 3128.117306] ? vfs_writev+0x5e0/0x5e0 [ 3128.117890] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3128.118624] do_syscall_64+0x33/0x40 [ 3128.119175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3128.119989] RIP: 0033:0x7f2bfaa5ab19 [ 3128.120561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3128.123453] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3128.124687] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3128.125756] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3128.126809] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3128.127914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3128.129022] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 3128.130403] hpet: Lost 1 RTC interrupts 11:40:15 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x3c8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6565200f7d4b587a65722c000000"]) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40001, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8000, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000003940)) 11:40:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') unlink(&(0x7f0000000000)='./mnt\x00') 11:40:15 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000240)={0x3, 'team_slave_1\x00', {0x3}, 0x7}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r5, 0x1c547000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) dup2(r4, r6) 11:40:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 3128.248529] cgroup: Unknown subsys name 'ee }KXzer' 11:40:15 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3128.280539] cgroup: Unknown subsys name 'ee }KXzer' [ 3142.391380] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:40:38 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') unlink(&(0x7f0000000000)='./mnt\x00') 11:40:38 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000240)={0x3, 'team_slave_1\x00', {0x3}, 0x7}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r5, 0x1c547000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) dup2(r4, r6) 11:40:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) vmsplice(r4, &(0x7f0000000900)=[{&(0x7f0000000240)="088be4f0c84f862ef106241b761c024edd413f78fb60720c673676ac24dce71f490db3157b1a4d7db96caf548de26bbdf78d0172bec69ff5c318f935e721c82b0c97b2b306d4d259aeef034f28e68fc359af97ef583bfe5de1ec99ea30c59906be358c14a3a0a338cadfcd91249adc72d5c7d8b23973e030a811b2871b0e5d661df7ee37", 0x84}, {&(0x7f0000000300)="fe1fc5dc2a0f2ea0ae1e3c9c52e292c2b205d7ee4dcc339c1576fa4b810066195d2189ccc9368c89a0b9c2ec1f7a44922cacf2176a9b72a87e7043646339c8938e7b0e636b823892ef531702e0a7cdc66d4ff54277cd452ea907888599eb0184cfa2327b94c8acab2864fc3432f3b2cc1d77fbb308aac55970698299ff59664225076967094ee69f705cae5e894e202a54b129e944b74f2bb6cf40d604ff949a5eee5ae38afe56e1231fa04586db2a85599e5f3f1bc03f4e54f5b7193a8a93eb016ce6909dfacf6f76c5b3dc2603ae43eaac85adcf50c2d8ab775e82b9c631789859f46d33f2972520e64275d02693dd7cd5a5c0", 0xf4}, {&(0x7f0000000400)="ced9e45b0d00342c673b9e51adf7d45e04db5526fc807715cd5175b81d62a32b42f1c0db634a55dd3cee8b40023e3ec417f9933c940374cd8a1b4a5c53c258ebcfbd4abf99d95ece33bc877107cfa2719858ca237cf9bbe6b5c621192ce139e0989dc1b5384ec738be2230afca2259e307ed51b7acd68082a6", 0x79}, {&(0x7f0000000480)="501353dc539b41da78d03acd0f8c477ee5732be3b9df58d105cbcd29b1ced1709dafa35ee56745d1d003d922538ec187bcbf3426c58d2dedb47441a643ec6c77379aaf5c4bd40c054d7ad2e9a7b51b7bd694422886c545881d9369bfb7cdc9244c83c1f7537702aaa4a47689dc35f0d1a124ec5211b5ecb6d67e19383ddfcfd0a19110d9b76f2d9a57f0eb741097e884f94d815f37c567e5cdcbc7d3212a53978695189d8a117308d902544a6e7b417807464833ef9ca058cbbc86543a1dda242b3303d8cad62e1f5138a4180555fb17ed775d345da5852372d3", 0xda}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000680)="bbb6e2f12b0e42009324a7ffb57a9d2e7b32cc81e3da2edb4c39d2902400598caa60e66752cc4f923da95df71e797605fb5d3b5b6def8cba7da1ad7ac7b529249384fc736f9ac8ccf80858c14889812d862e8af37d2d2b4d9fb6f0254a28d9460a16150081d40fedb7967ab08fc2c0524e26586e0b502184c28907221c7b6bc070fb5fdc9bf6c6894911720e3c2b4e9d9642b064137bf1c14daa55a0aa7ab62fd4dfd2f94fc7ad82f6640d15182f9f151a99497f39a537cfab37fc7c56a003a3714d0afb33c609dc5dedf41dc325e92bcdbce2e31294f9b59a13881716809eb35e67f679b8ff16f96af3a5668ecd25eba21334aa1bd7ca1dd1a1", 0xfa}, {&(0x7f00000001c0)="debc64b3da68f78198264b7094daebdc1a7d5ff409374128f17527ce5eeb7a21dfce35b5114b6a0bf54d36b5", 0x2c}, {&(0x7f0000000780)="fea041d294f1a91957ee6da85dfa2fb1323c539a302e601425431eac", 0x1c}, {&(0x7f00000007c0)="c67f1db041110ae231d11520eb3ecb5597c02557bb25a90d8acb337de4a81a0ea00a1eb4d7894626f08f38ae6ef5d178049b54bcdf4fe57c4d678938bebd6fc6a002e4bb2d", 0x45}, {&(0x7f0000000840)="3c59a755f4833b253f08f9aaad86172784c53c9eaef78d3fb758d758eb0bf4c808478746f4346e35ada6bcb3a414a59dac4e06bae9564aaec2f13cc0ecaf71946580e39749149f1a9323e2d6b8af4e167e7d02dcd83d110c35fcd5b7cfe1f9d156e16924762d5db845441c2bff01fb864cb4fcce8dd8a7b4df6158186ebf53c259f458a8986ca3b04bb98c11a5ffaf9606f5556ef64727bd9f50b0", 0x9b}], 0xa, 0x6) 11:40:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3845, &(0x7f0000000240)={0x0, 0x1205, 0x0, 0x3, 0x12d, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3972, &(0x7f00000002c0)={0x0, 0x71d8, 0x8, 0x1, 0x2aa, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1f) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:40:38 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x1000) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240), 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000000028157ce6514a91eec8cf8067d4000000001bdd9198e14ee6076b723b00"/48]) setsockopt$inet_tcp_buf(r3, 0x6, 0x19, &(0x7f0000000300)="3aade4aeaa", 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @local, @mcast2, 0x0, 0x10, 0x8}}) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x15, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000700)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8931, &(0x7f0000000000)={'wlan0\x00'}) 11:40:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:40:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x100010, r6, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000007c0)=0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="30000000c90e79c0c26e6278d9476cd26b24b9d64ac7ff74a4d34b3d97c13f2f1f4efca712a1856b55691e280a24a0552194704a3c49cb71c5822a7c3aaf67f28f3455769af9e8ec3691e9dd7468cbfa027219ba36a2dd5019dbc00b8785503c0ded2c0d4db4236b988a8779c47830a21f42453c848cae5507ac2288cf76aadec234a169feb8e400fee0d9c58183156d46b58d307d913694f54958889b0974d59fb88102f3aa8292bbf432380a6939ed9203659fa36e1f72db151e6f30e5be95d0e0a3e880d71c54a5fceb5b295d1b3112d84051a54a11b0920b000000000000166df29ae2abb6afc77e8416cd9bf797b290d7a9b8bd3dbb3fdd71035e1996e95f506b87f3a0d62da8160b4ee701675085f003a27a443fcb74e1bc6bc928b26001eb45abe68e3dce313e09cb632db5c1dc4c1d3102e63a09b4bbdfc611e6c48cf1cf21b35fba2b451102423b2a81dea59c75d0837e39f00950d845b6a04c68f4c38931b7fd81d44ddb3175299a86f42f8ff29410bd83a6e9b5f7a962427a84ec2c23daf5fe0c20e90c5938ae9b23992a", @ANYRES16=r8, @ANYBLOB="010000000000000000006a00000008000300", @ANYBLOB="71aa6f638f527a95ba7681d861f436b27e4486052bd9752ff6c1f82c19dd17c7495ba4c8f8cab15b21961e1c75e63b0f5ff5bd12d97c7f86cd5e49199096760b7c19b0e759e0e52960087745e350cecd00dfb3f966ae89a3d4068cc8d8d7d19ceb00e073dbcdbe72a8ccc61ea8199adfa372a2bf9fbe27a2ebdcf8a9401f7379fba636c2ac9c53b4a1fa40c9a2532f", @ANYBLOB="0500d200000000000a000600ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r4, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x304b, &(0x7f0000000180)={0x0, 0xe0fb, 0x20, 0x0, 0x30c}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0, r4, r10], 0x3}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r11, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:40:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 31) [ 3150.827023] FAULT_INJECTION: forcing a failure. [ 3150.827023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3150.829279] CPU: 1 PID: 17345 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3150.830366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3150.832120] Call Trace: [ 3150.832560] dump_stack+0x107/0x163 [ 3150.833128] should_fail.cold+0x5/0xa [ 3150.833707] _copy_from_user+0x2e/0x1b0 [ 3150.834342] input_event_from_user+0x1dd/0x280 [ 3150.835032] ? input_devices_seq_show+0xfd0/0xfd0 [ 3150.835775] evdev_write+0x257/0x410 [ 3150.836347] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3150.837195] ? security_file_permission+0x24e/0x570 [ 3150.838003] do_iter_write+0x47e/0x670 [ 3150.838598] ? import_iovec+0x83/0xb0 [ 3150.839156] vfs_writev+0x1aa/0x5e0 [ 3150.839749] ? vfs_iter_write+0xa0/0xa0 [ 3150.840400] ? __fget_files+0x26d/0x480 [ 3150.841045] ? lock_downgrade+0x6d0/0x6d0 [ 3150.841651] ? find_held_lock+0x2c/0x110 [ 3150.842241] ? __fget_files+0x296/0x480 [ 3150.842907] ? __fget_light+0xea/0x280 [ 3150.843488] do_writev+0x27f/0x300 [ 3150.844013] ? vfs_writev+0x5e0/0x5e0 [ 3150.844643] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3150.845379] do_syscall_64+0x33/0x40 [ 3150.845928] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3150.846822] RIP: 0033:0x7f2bfaa5ab19 [ 3150.847378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3150.850063] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3150.851188] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3150.852219] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3150.853270] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3150.854307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3150.855342] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:40:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3150.952953] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=17389 comm=syz-executor.2 11:40:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 32) [ 3151.048935] FAULT_INJECTION: forcing a failure. [ 3151.048935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3151.051156] CPU: 0 PID: 17419 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3151.052192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3151.053935] Call Trace: [ 3151.054334] dump_stack+0x107/0x163 [ 3151.054857] should_fail.cold+0x5/0xa [ 3151.055422] _copy_from_user+0x2e/0x1b0 [ 3151.056024] input_event_from_user+0x1dd/0x280 [ 3151.056741] ? input_devices_seq_show+0xfd0/0xfd0 [ 3151.057470] evdev_write+0x257/0x410 [ 3151.058042] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3151.058837] ? security_file_permission+0x24e/0x570 [ 3151.059609] do_iter_write+0x47e/0x670 [ 3151.060209] ? import_iovec+0x83/0xb0 [ 3151.060811] vfs_writev+0x1aa/0x5e0 [ 3151.061362] ? vfs_iter_write+0xa0/0xa0 [ 3151.061951] ? __fget_files+0x26d/0x480 [ 3151.062537] ? lock_downgrade+0x6d0/0x6d0 [ 3151.063135] ? find_held_lock+0x2c/0x110 [ 3151.063739] ? __fget_files+0x296/0x480 [ 3151.064315] ? __fget_light+0xea/0x280 [ 3151.064915] do_writev+0x27f/0x300 [ 3151.065463] ? vfs_writev+0x5e0/0x5e0 [ 3151.066009] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3151.066734] do_syscall_64+0x33/0x40 [ 3151.067288] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3151.068046] RIP: 0033:0x7f2bfaa5ab19 [ 3151.068565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3151.071237] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3151.072385] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3151.073529] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3151.074605] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3151.075715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3151.076819] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:40:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:40:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = syz_io_uring_setup(0x7a9b, &(0x7f0000000240)={0x0, 0x6d0c, 0x4, 0x0, 0x3dc, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0xfffffff8}}, './file0\x00'}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r6, 0x0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000014c0), 0x4, &(0x7f0000000300)=""/139, 0x85}, 0x0, 0x1, 0x0, {0x0, r7}}, 0x7ffe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_vlan\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r11, 0x3, 0x5}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xcc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:40:38 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000240)={0x3, 'team_slave_1\x00', {0x3}, 0x7}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r5, 0x1c547000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) dup2(r4, r6) 11:40:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:40:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 33) [ 3151.268539] FAULT_INJECTION: forcing a failure. [ 3151.268539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3151.270535] CPU: 1 PID: 17453 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3151.271546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3151.273248] Call Trace: [ 3151.273673] dump_stack+0x107/0x163 [ 3151.274208] should_fail.cold+0x5/0xa [ 3151.274824] _copy_from_user+0x2e/0x1b0 [ 3151.275449] input_event_from_user+0x1dd/0x280 [ 3151.276095] ? input_devices_seq_show+0xfd0/0xfd0 [ 3151.276807] evdev_write+0x257/0x410 [ 3151.277330] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3151.278020] ? security_file_permission+0x24e/0x570 [ 3151.278734] do_iter_write+0x47e/0x670 [ 3151.279312] ? import_iovec+0x83/0xb0 [ 3151.279908] vfs_writev+0x1aa/0x5e0 [ 3151.280482] ? vfs_iter_write+0xa0/0xa0 [ 3151.281097] ? __fget_files+0x26d/0x480 [ 3151.281699] ? lock_downgrade+0x6d0/0x6d0 [ 3151.282369] ? find_held_lock+0x2c/0x110 [ 3151.282922] ? __fget_files+0x296/0x480 [ 3151.283485] ? __fget_light+0xea/0x280 [ 3151.284181] do_writev+0x27f/0x300 [ 3151.284714] ? vfs_writev+0x5e0/0x5e0 [ 3151.285351] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3151.286198] do_syscall_64+0x33/0x40 [ 3151.286739] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3151.287519] RIP: 0033:0x7f2bfaa5ab19 [ 3151.288094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3151.291051] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3151.292111] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3151.293146] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3151.294153] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3151.295255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3151.296237] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:40:38 executing program 7: r0 = msgget(0x2, 0x0) msgrcv(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000047a8ecb50926cb72ef8ed2fe50a43bf41dd7957a146d963733b9900106de26cf4105b43377c66ca6ce59f87f4bced1f0e2e9edb3e017b712b64c52c0c3b597854b"], 0x1008, 0x3, 0x3800) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/90) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:40:38 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') unlink(&(0x7f0000000000)='./mnt\x00') 11:40:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f00000001c0)=0xc) 11:40:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 34) 11:40:39 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3151.447954] FAULT_INJECTION: forcing a failure. [ 3151.447954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3151.449890] CPU: 1 PID: 17506 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3151.450869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3151.452668] Call Trace: [ 3151.453071] dump_stack+0x107/0x163 [ 3151.453591] should_fail.cold+0x5/0xa [ 3151.454125] _copy_from_user+0x2e/0x1b0 [ 3151.454688] input_event_from_user+0x1dd/0x280 [ 3151.455457] ? input_devices_seq_show+0xfd0/0xfd0 [ 3151.456527] evdev_write+0x257/0x410 [ 3151.457095] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3151.457873] ? security_file_permission+0x24e/0x570 [ 3151.458603] do_iter_write+0x47e/0x670 [ 3151.459150] ? import_iovec+0x83/0xb0 [ 3151.459682] vfs_writev+0x1aa/0x5e0 [ 3151.460184] ? vfs_iter_write+0xa0/0xa0 [ 3151.460755] ? __fget_files+0x26d/0x480 [ 3151.461305] ? lock_downgrade+0x6d0/0x6d0 [ 3151.461864] ? find_held_lock+0x2c/0x110 [ 3151.462463] ? __fget_files+0x296/0x480 [ 3151.463044] ? __fget_light+0xea/0x280 [ 3151.463606] do_writev+0x27f/0x300 [ 3151.464113] ? vfs_writev+0x5e0/0x5e0 [ 3151.464694] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3151.465370] do_syscall_64+0x33/0x40 [ 3151.465871] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3151.466592] RIP: 0033:0x7f2bfaa5ab19 [ 3151.467129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3151.469732] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3151.470771] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3151.471862] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3151.472836] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3151.473865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3151.474924] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:40:39 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f00000002c0)=""/171, 0xab}], 0x3, &(0x7f00000003c0)=""/174, 0xae}, 0x0, 0x40, 0x1, {0x3, r3}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x5f5e, &(0x7f00000004c0)={0x0, 0x72c4, 0x2, 0x2, 0x228, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_io_uring_setup(0x2ab9, &(0x7f0000001f40)={0x0, 0x187e, 0x20, 0x0, 0x179, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001fc0), &(0x7f0000002000)) syz_io_uring_setup(0x2699, &(0x7f00000005c0)={0x0, 0x6672, 0x1, 0x3, 0x2f8, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)) syz_io_uring_setup(0x98f, &(0x7f00000006c0)={0x0, 0xb026, 0x4, 0x2, 0x13a, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000780)=0x0) r8 = open(&(0x7f00000007c0)='./file0\x00', 0x2000, 0x1ca) syz_io_uring_submit(r6, r7, &(0x7f0000001f00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r8, 0x0, &(0x7f0000001ec0)={&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000880)=""/54, 0x36}, {&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000001a80)=""/64, 0x40}, {&(0x7f0000001ac0)=""/252, 0xfc}, {&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f0000001cc0)=""/71, 0x47}], 0x8, &(0x7f0000001dc0)=""/244, 0xf4}, 0x0, 0x40, 0x0, {0x1}}, 0xd6a2) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x101) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r9, 0x80089419, &(0x7f0000000180)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 3165.455291] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:41:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') unlink(&(0x7f0000000000)='./mnt\x00') 11:41:01 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x23b9, &(0x7f0000000240)={0x0, 0xc568, 0x10, 0x1, 0x385, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:01 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x290b, &(0x7f0000000240)={0x0, 0x51e0, 0x2, 0x0, 0x38, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x8, 0xfffffffffffffff8, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, r4, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x80, &(0x7f0000000300)=@nfc_llcp, 0x0, 0x800, 0x1, {0x0, r6}}, 0x6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 35) 11:41:01 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:01 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000240)={0x3, 'team_slave_1\x00', {0x3}, 0x7}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r5, 0x1c547000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) dup2(r4, r6) 11:41:01 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000040)={0x2, 0x100000001, 0xde, &(0x7f0000000240)=""/222}) r4 = gettid() r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x6b, 0x5, 0x8, 0x80, 0x0, 0x84, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0xfffffffffffffff7, 0x926f, 0x0, 0x3, 0x4, 0x2, 0x0, 0x0, 0x0, 0xfba}, r4, 0xc, r5, 0x2) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'caif0\x00'}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xee00}}]}) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:01 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x7174, 0x20, 0x0, 0x36f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3173.745630] FAULT_INJECTION: forcing a failure. [ 3173.745630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3173.747557] CPU: 0 PID: 17556 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3173.748606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3173.750363] Call Trace: [ 3173.750762] dump_stack+0x107/0x163 [ 3173.751284] should_fail.cold+0x5/0xa [ 3173.751859] _copy_from_user+0x2e/0x1b0 [ 3173.752465] input_event_from_user+0x1dd/0x280 [ 3173.753213] ? input_devices_seq_show+0xfd0/0xfd0 [ 3173.754074] evdev_write+0x257/0x410 [ 3173.754729] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3173.755528] ? security_file_permission+0x24e/0x570 [ 3173.756283] do_iter_write+0x47e/0x670 [ 3173.756870] ? import_iovec+0x83/0xb0 [ 3173.757472] vfs_writev+0x1aa/0x5e0 [ 3173.758090] ? vfs_iter_write+0xa0/0xa0 [ 3173.758685] ? __fget_files+0x26d/0x480 [ 3173.759262] ? lock_downgrade+0x6d0/0x6d0 [ 3173.759884] ? find_held_lock+0x2c/0x110 [ 3173.760534] ? __fget_files+0x296/0x480 [ 3173.761199] ? __fget_light+0xea/0x280 [ 3173.761825] do_writev+0x27f/0x300 [ 3173.762383] ? vfs_writev+0x5e0/0x5e0 [ 3173.762965] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3173.763729] do_syscall_64+0x33/0x40 [ 3173.764292] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3173.765080] RIP: 0033:0x7f2bfaa5ab19 [ 3173.765598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3173.768435] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3173.769669] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3173.770796] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3173.771864] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3173.772920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3173.773901] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 3173.775195] hpet: Lost 1 RTC interrupts 11:41:01 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x5) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ftruncate(r1, 0x1000003) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r4, 0xffffffffffffffff, 0x0) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, '@\x18^^'}, {}, {0x20, '{\\\xf1'}, {0x20, '\xeb\\'}, {0x20, ',:'}], 0xa, "8134c165f0b066fcdd6dff08d89a61bbcf6720b385ebb94f8d03ad14d22b26b0468e8bc39d7035af47e6f464a04df0f791ee42c014db2e1e5a5424b9988f2e20f5bfa945a80adb2b3c2db5e88cb1ed849c16a3490aa31e7e70467ef2ff67c862283e0cd5817f824666e5ae636bcae14db063d68e742866039275a085404cc725f0f232790801c813de3283e2d54d7fafcdfc4e9ba82f6bd88bedfe2e47a16c22c8e5a7ebd7ee750731cb90be669fd57d9185a9cf884c"}, 0xd5) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) 11:41:01 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_complete(r3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:01 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:01 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x4, 0x20, 0x0, 0x21d}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="a3", 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r3, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f2959ce875080000004a00113962000000000000"], 0x14}}, 0x0) read(r4, &(0x7f00000002c0)=""/4096, 0x1000) accept4$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x0) dup2(0xffffffffffffffff, r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r1) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1d3, 0x40) execveat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000200)='--\x00'], &(0x7f0000001340)=[&(0x7f00000012c0)='$/]\\\x00', &(0x7f0000001300)='\x00'], 0x400) 11:41:15 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_setup(0x2ebc, &(0x7f0000000340)={0x0, 0xfeba, 0x0, 0x3, 0x241, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x4000010, r0, 0x8000000) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000005c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000480), &(0x7f0000000580)='./file0\x00', 0x800, 0x400, 0x1}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0x2db5c52e6aa4d2b2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xcae0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x46000, 0x0) io_uring_enter(r10, 0x361a, 0x9e54, 0x2, &(0x7f00000001c0)={[0xd16f]}, 0x8) r11 = io_uring_setup(0x6921, &(0x7f0000000240)={0x0, 0x7006, 0x0, 0x2, 0x355, 0x0, r0}) io_uring_enter(r11, 0x3d01, 0xf7ed, 0x3, &(0x7f00000002c0)={[0x4]}, 0x8) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf, 0x1}, 0x9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/nf_conntrack\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) pread64(r0, &(0x7f00000010c0)=""/4098, 0xfffffffffffffe9f, 0x0) 11:41:15 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 36) 11:41:15 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x34}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x111001, 0xb1, 0x3}, 0x18) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:15 executing program 5: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000480)=""/4096) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x8, 0x3) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4, @fd, 0x10000, &(0x7f0000000340)=""/230, 0xe6}, 0x9) io_uring_setup(0x6fb5, &(0x7f0000000240)={0x0, 0xebba, 0x0, 0x20000002, 0x4a}) pipe(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x25ca, &(0x7f00000014c0)={0x0, 0x2195, 0x0, 0x2, 0x38d, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001540), &(0x7f0000001580)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'vlan0\x00'}) 11:41:15 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r0, 0x10000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)="06ef3c6c6996d52d", 0x8, 0x8e}], 0x0, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0xcb9}}, {@huge_always}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x39]}}}}, {@gid={'gid', 0x3d, 0xee01}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {}], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@appraise}, {@seclabel}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000440)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x71c08ffe, &(0x7f0000000400)=[r6, r0, r7, r8, r0, r9], 0x6, 0x0, 0x1, {0x0, r10}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3188.291279] FAULT_INJECTION: forcing a failure. [ 3188.291279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3188.293140] CPU: 1 PID: 17646 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3188.294186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3188.295822] Call Trace: [ 3188.296255] dump_stack+0x107/0x163 [ 3188.296828] should_fail.cold+0x5/0xa [ 3188.297406] _copy_from_user+0x2e/0x1b0 [ 3188.297987] input_event_from_user+0x1dd/0x280 [ 3188.298654] ? input_devices_seq_show+0xfd0/0xfd0 [ 3188.299392] evdev_write+0x257/0x410 [ 3188.299977] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3188.300894] ? security_file_permission+0x24e/0x570 [ 3188.301695] do_iter_write+0x47e/0x670 [ 3188.302268] ? import_iovec+0x83/0xb0 [ 3188.302824] vfs_writev+0x1aa/0x5e0 [ 3188.303349] ? vfs_iter_write+0xa0/0xa0 [ 3188.303937] ? __fget_files+0x26d/0x480 [ 3188.304534] ? lock_downgrade+0x6d0/0x6d0 [ 3188.305238] ? find_held_lock+0x2c/0x110 [ 3188.305919] ? __fget_files+0x296/0x480 [ 3188.306514] ? __fget_light+0xea/0x280 [ 3188.307069] do_writev+0x27f/0x300 [ 3188.307576] ? vfs_writev+0x5e0/0x5e0 [ 3188.308127] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3188.308826] do_syscall_64+0x33/0x40 [ 3188.309409] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3188.310195] RIP: 0033:0x7f2bfaa5ab19 [ 3188.310747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3188.313491] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3188.314636] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3188.315751] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3188.316779] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3188.317919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3188.318962] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:41:15 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000086dd6096153f00303a00ff020000000000000000000000000001ff0200000000000000000040f0ffff110200907800000000600009e60000000000000000000000000000ffffac1e0001fe8000000000000000000000000000bb"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000740)="44bba53f473709116653681158e9d2fe", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, r0, r0, r2, r3], 0x5) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0xca0fd39c9db49220, 0x0, 0x11}, 0x18) write$tun(r5, &(0x7f0000000200)={@val={0x0, 0x8914}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x20) dup2(r4, r1) 11:41:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 37) 11:41:15 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3188.399967] tmpfs: Unsupported parameter 'huge' 11:41:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000240)={"65a67be64099c142eb6608a67f362cbd", 0x0, 0x0, {0x7, 0x2}, {0x9c, 0xfffffff8}, 0x7f, [0x7, 0x6, 0x6, 0x0, 0x2, 0x7, 0x6, 0x1, 0x8000, 0x1000, 0x7, 0x6, 0x0, 0x2, 0x40000000000000]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000340)={{r0}, r5, 0x4, @unused=[0x2, 0x10001, 0x4, 0x9], @subvolid=0xfffffffffffffffa}) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3188.476630] FAULT_INJECTION: forcing a failure. [ 3188.476630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3188.478452] CPU: 1 PID: 17701 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3188.479485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3188.481172] Call Trace: [ 3188.481561] dump_stack+0x107/0x163 [ 3188.482085] should_fail.cold+0x5/0xa [ 3188.482617] _copy_from_user+0x2e/0x1b0 [ 3188.483191] input_event_from_user+0x1dd/0x280 [ 3188.483862] ? input_devices_seq_show+0xfd0/0xfd0 [ 3188.484588] evdev_write+0x257/0x410 [ 3188.485156] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3188.485919] ? security_file_permission+0x24e/0x570 [ 3188.486653] do_iter_write+0x47e/0x670 [ 3188.487220] ? import_iovec+0x83/0xb0 [ 3188.487881] vfs_writev+0x1aa/0x5e0 [ 3188.488393] ? vfs_iter_write+0xa0/0xa0 [ 3188.488953] ? __fget_files+0x26d/0x480 [ 3188.489554] ? lock_downgrade+0x6d0/0x6d0 [ 3188.490147] ? find_held_lock+0x2c/0x110 [ 3188.490777] ? __fget_files+0x296/0x480 [ 3188.491370] ? __fget_light+0xea/0x280 [ 3188.491940] do_writev+0x27f/0x300 [ 3188.492457] ? vfs_writev+0x5e0/0x5e0 [ 3188.492987] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3188.493703] do_syscall_64+0x33/0x40 [ 3188.494234] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3188.494958] RIP: 0033:0x7f2bfaa5ab19 [ 3188.495489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3188.498219] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3188.499337] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3188.500373] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3188.501417] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3188.502468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3188.503654] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 11:41:16 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) io_uring_enter(r4, 0x411b, 0x8974, 0x2, &(0x7f0000000040)={[0xffffffff]}, 0x8) 11:41:16 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000d, 0x4010, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syncfs(r4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:16 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x45a001, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="132a679915817fa1edcefda799bc06f1573d5136b522970a481d75dc3777ab5a09f29c2b5a0d26d55cbd8cbfe4e5b577b43ba3a59cf5a50ea9edab2352444a8250390b00ae89219b3a85d316acd4e375088b7d5177f2e214d17b25070159fb5e624ae2ce90cb58854f935f457598188123d67867462bf08e50e7d4", 0x7b, 0x40, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:41:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = fcntl$dupfd(r1, 0x0, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 38) [ 3188.615033] FAULT_INJECTION: forcing a failure. [ 3188.615033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3188.616917] CPU: 1 PID: 17760 Comm: syz-executor.4 Not tainted 5.10.123 #1 [ 3188.618120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3188.619819] Call Trace: [ 3188.620204] dump_stack+0x107/0x163 [ 3188.620739] should_fail.cold+0x5/0xa [ 3188.621330] _copy_from_user+0x2e/0x1b0 [ 3188.621998] input_event_from_user+0x1dd/0x280 [ 3188.622678] ? input_devices_seq_show+0xfd0/0xfd0 [ 3188.623405] evdev_write+0x257/0x410 [ 3188.623964] ? evdev_handle_set_keycode_v2+0x120/0x120 [ 3188.624876] ? security_file_permission+0x24e/0x570 [ 3188.625691] do_iter_write+0x47e/0x670 [ 3188.626277] ? import_iovec+0x83/0xb0 [ 3188.626850] vfs_writev+0x1aa/0x5e0 [ 3188.627513] ? vfs_iter_write+0xa0/0xa0 [ 3188.628285] ? __fget_files+0x26d/0x480 [ 3188.628884] ? lock_downgrade+0x6d0/0x6d0 [ 3188.629511] ? find_held_lock+0x2c/0x110 [ 3188.630127] ? __fget_files+0x296/0x480 [ 3188.630808] ? __fget_light+0xea/0x280 [ 3188.631465] do_writev+0x27f/0x300 [ 3188.631997] ? vfs_writev+0x5e0/0x5e0 [ 3188.632574] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3188.633359] do_syscall_64+0x33/0x40 [ 3188.634026] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3188.634840] RIP: 0033:0x7f2bfaa5ab19 [ 3188.635398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3188.638111] RSP: 002b:00007f2bf7fd0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3188.639188] RAX: ffffffffffffffda RBX: 00007f2bfab6df60 RCX: 00007f2bfaa5ab19 [ 3188.640178] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 3188.641209] RBP: 00007f2bf7fd01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3188.642211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3188.643216] R13: 00007ffd2f94380f R14: 00007f2bf7fd0300 R15: 0000000000022000 [ 3194.112171] Bluetooth: hci3: command 0x0409 tx timeout [ 3196.160255] Bluetooth: hci3: command 0x041b tx timeout [ 3198.208151] Bluetooth: hci3: command 0x040f tx timeout [ 3198.279710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3198.281442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3198.284351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3198.308952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3198.310378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3198.313949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3202.944288] Bluetooth: hci3: command 0x0409 tx timeout [ 3204.992173] Bluetooth: hci3: command 0x041b tx timeout [ 3207.040148] Bluetooth: hci3: command 0x040f tx timeout [ 3207.286384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3207.287694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3207.292829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3207.329381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3207.330830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3207.334166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3211.904197] Bluetooth: hci3: command 0x0409 tx timeout [ 3213.953365] Bluetooth: hci3: command 0x041b tx timeout [ 3216.000224] Bluetooth: hci3: command 0x040f tx timeout [ 3216.372122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3216.373423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3216.376268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3216.409383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3216.411007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3216.413865] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3221.056156] Bluetooth: hci3: command 0x0409 tx timeout [ 3223.104158] Bluetooth: hci3: command 0x041b tx timeout [ 3225.153145] Bluetooth: hci3: command 0x040f tx timeout [ 3226.694764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3226.696135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3226.698979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3226.742083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3226.743736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3226.747188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3228.274241] hpet: Lost 1 RTC interrupts [ 3231.424204] Bluetooth: hci3: command 0x0409 tx timeout [ 3233.472205] Bluetooth: hci3: command 0x041b tx timeout [ 3235.520182] Bluetooth: hci3: command 0x040f tx timeout [ 3235.843173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3235.844606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3235.848847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3235.903665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3235.904919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3235.907749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3240.512147] Bluetooth: hci3: command 0x0409 tx timeout [ 3242.561166] Bluetooth: hci3: command 0x041b tx timeout [ 3244.608143] Bluetooth: hci3: command 0x040f tx timeout [ 3245.042878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3245.044607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3245.049968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3245.086419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3245.087828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3245.091720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3249.728228] Bluetooth: hci3: command 0x0409 tx timeout [ 3251.776151] Bluetooth: hci3: command 0x041b tx timeout [ 3253.824333] Bluetooth: hci3: command 0x040f tx timeout [ 3254.005517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3254.006926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3254.015570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3254.067843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3254.069190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3254.072279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3258.688249] Bluetooth: hci3: command 0x0409 tx timeout [ 3260.736241] Bluetooth: hci3: command 0x041b tx timeout [ 3262.784133] Bluetooth: hci3: command 0x040f tx timeout [ 3262.931946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3262.933296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3262.936307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3262.964612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3262.965868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3262.968798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3267.584393] Bluetooth: hci3: command 0x0409 tx timeout [ 3269.632192] Bluetooth: hci3: command 0x041b tx timeout [ 3271.680205] Bluetooth: hci3: command 0x040f tx timeout [ 3271.867025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3271.868350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3271.871601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3271.910300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3271.911633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3271.914554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3276.544194] Bluetooth: hci3: command 0x0409 tx timeout [ 3278.592163] Bluetooth: hci3: command 0x041b tx timeout [ 3280.634929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3280.636321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3280.641482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3280.643137] Bluetooth: hci3: command 0x040f tx timeout [ 3280.671796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3280.673191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3280.676013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3285.248145] Bluetooth: hci3: command 0x0409 tx timeout [ 3287.296123] Bluetooth: hci3: command 0x041b tx timeout [ 3289.344174] Bluetooth: hci3: command 0x040f tx timeout [ 3289.406687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3289.408889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3289.412607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3289.445547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3289.446888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3289.449954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2022/07/07 11:42:57 executor 6 failed 11 times: executor 6: exit status 67 SYZFAIL: tun read failed (errno 9: Bad file descriptor) SYZFAIL: child failed (errno 0: Success) loop exited with status 67 VM DIAGNOSIS: 11:42:57 Registers: info registers vcpu 0 RAX=fffff940001d94ce RBX=fffff940001d94cf RCX=ffffffff8162a7fb RDX=fffff940001d94cf RSI=0000000000000004 RDI=ffffea0000eca670 RBP=fffff940001d94ce RSP=ffff888034757710 R8 =0000000000000001 R9 =ffffea0000eca673 R10=fffff940001d94ce R11=0000000000000001 R12=0000000000000000 R13=ffffea0000eca648 R14=0000000000000000 R15=dead000000000100 RIP=ffffffff816b021c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fa622f6e50 CR3=0000000035a38000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636578650a3a7365 6d69742031312064 YMM02=0000000000000000 0000000000000000 6174732074697865 203a3620726f7475 YMM03=0000000000000000 0000000000000000 203a4c4941465a59 530a373620737574 YMM04=0000000000000000 0000000000000000 0a64656c69616620 64616572206e7574 YMM05=0000000000000000 0000000000000000 6620646142203a39 206f6e7272652820 YMM06=0000000000000000 0000000000000000 0a29726f74706972 6373656420656c69 YMM07=0000000000000000 0000000000000000 6620646c69686320 3a4c4941465a5953 YMM08=0000000000000000 0000000000000000 72206e7574203a4c 4941465a59530a37 YMM09=0000000000000000 0000000000000000 72726528200a6465 6c69616620646165 YMM10=0000000000000000 0000000000000000 6420656c69662064 6142203a39206f6e YMM11=0000000000000000 0000000000000000 41465a59530a2972 6f74706972637365 YMM12=0000000000000000 0000000000000000 64656c6961662064 6c696863203a4c49 YMM13=0000000000000000 0000000000000000 63637553203a3020 6f6e72726528200a YMM14=0000000000000000 0000000000000000 6465746978652070 6f6f6c0a29737365 YMM15=0000000000000000 0000000000000000 0a37362073757461 7473206874697720 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffea0000d17880 RCX=ffffffff8167d267 RDX=ffff88800da2e600 RSI=ffffffff8167d301 RDI=0000000000000001 RBP=ffffea0000d17888 RSP=ffff88800ee77710 R8 =0000000000000000 R9 =ffffea0000d17887 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffea0000d17888 R14=0000000000000000 R15=dead000000000100 RIP=ffffffff8167d30f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0a6f20bfb8 CR3=000000004c632000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000005 YMM01=0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 36386c6c696b6672 YMM04=0000000000000000 0000000000000000 6d560a426b203430 303820202020093a YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 20090a426b203430 0a38202020200920 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 722f6c6c696b6672 2f6372732f2e2e00 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000