0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) setxattr$trusted_overlay_nlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={'U-', 0xa987}, 0x16, 0x2) unshare(0x48020200) 04:24:34 executing program 3: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/111, 0x6f}], 0x2) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x6c) 04:24:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r2) keyctl$set_timeout(0xf, r2, 0x0) r3 = getegid() setgid(r3) keyctl$chown(0x4, r2, 0xee01, r3) fcntl$getownex(r0, 0x10, &(0x7f0000005c00)={0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="a84467bb604c75ac82860f17f44ed81b17721bcb681073a2ceec5d83c61f9b3923e25cd486697955f0bbda0f92cf63caa77b7e46d391c7585dc8a38427977130ceef1fcbdc1aa6273f2c77feffbae5bf00e3a01252155e25975c247e42f30e76cef9206edab4f32b027434eda6f415651dea203358ba5e521180e495ed82a93691d3f43f3a71063e11bc5d0d562a1667da0676f895c0b289a827d2c1a7a09f1ad2656bf234f9bc7ae31a15c786f052c1c3655c19cd02d7ba9e5817fa58c52b", 0xbf}, {&(0x7f00000002c0)="2e03b6b60316ec38d79a7ec28388efc0dcc90dca6232d251faefbbeace57da88663078553eaf544ba2b6da63f11d7c3d5215d7fdd78f51a2f6dec20f9d33b48b3db1a004ba0d8ee842667627a99d323204cad0def58bd4598d14f62cd7e7d4ef786d6c299447f9f771c4b0ed58e2f74117a624ece66230f81df45659bdd5981bbd93267f089de03f101e59d1b08f9b6b89da975936500e1ef957", 0x9a}], 0x2}}, {{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000400)="ecc0c10592410d8d5728ac1e3d01160886ee67667bb710923104c6e4b0190d4d3c8c12163505fcc589e7ac15b20efa0edb423831ef682c1aef0c652c489d2723bdf70d9b80cdc8a4511c5a12fc5e4b43cf3f1a011abc8c83a0f7ac12568a12d77efdee8c99743ef9681984718151d905c56e3b4145677148b862d62398831e99476354ed53c11521f110fe34ce7103c7460ac4893a1a1a0c5bf3de5dacd94aed6715f42134941fff14c0d9cb2a8399b668763bf69db68bdc3ed082260a88d5917769143cfd9d10667e4c56c53ca097fce5dc9f9f2bf2bf7c6b037a3b6ca75a09cf4cd2ec6205e150", 0xe8}, {&(0x7f0000000580)="9159d30326ea260c05b8d71e35eda66736791f00dfd7f717e2729fc38d9984bb757f7126ae6e553a16f54d1b1d20278b76c6b87f5cdb17b6c0c4445b95bac876f6b2a038d82957323956627cfbc544cc6b1596af0d60f0a05dc84b8cab5ce31bdbfa41be95fe72ea389ef402b64b4632c02fe77f7f9c8a9d6c129ba1227023a0e3a42a7f5212f0042c9d55d14b509330ec4b88c7d29a8620c4e96c3933f05902f0f5fdee10cd411fced06dd7dca8e163bff833ce1c9549e17f2793321564201e1db547084da41e180a0e6d6bba7e", 0xce}, {&(0x7f0000001700)="bbeb5f62c432d86ec8efb07a97289fd90092ef050acca7c390493fc741e23d74427af2acd4e2b32ff0cee89d3f7ba0aef0f8e40caad307df7a4a4747c684216bc38bd8cdf7c81c98d91265322b197e4f0b69976e4c018b5edb6a11873d87dc9e6c", 0x61}, {&(0x7f0000001780)="d25a3c9c47ee6a10747ae4610fe17613835a2053a103557aee8b7905921d2a126f828e8347745cd48ae0a67951290595b0a09453c3d11ef1cb983faaa6d529ab56bf787c79ab8259def7656fc146ef066d04f01924232ed227360751fcb177bcde24063a319a1b5a33fca9e3fa4696a314d3b70f2d1687294055854a8e1d21ac08dadda09c991229f903f45f1e43779d5cb04afc3cb416d30c113274a7c71e874b92aab17e4c66d4d40247c5b394f024d000741dd53a3769dc6e4c375c1e2c37685eb9fa85a66b30d73f160ce5", 0xcd}, {&(0x7f0000000180)="b6986bee490adb43901dd84d883ae54c219ef43c74994a5c07a04f4cef5d42404433bfb94e65eea303ad4088d8e0fb0fd7603d89fbebd190d4", 0x39}], 0x5, &(0x7f00000057c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000fd61accbf0bbe806000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4880}}, {{&(0x7f0000005880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005b80)=[{&(0x7f0000005900)="f612533378fe0cf8dc6254550ead48b97492b1b09855885adef2fe043696a202ee560a05a0cb5a526de8bf653dac76fd5db150d0e3853eb7515fe0d9555c9fa1261e64bad2d5c9dfbd56f1ce8f139bb684628481f547a57758b8b5c72df5b37dfac934b0f9d423bdde37336669851410863098a99df16a165d267010a507f5dcad59755e8ba0aa70ea68d2bb1d7fb56465645c1b808007c419420222e6fb997185ee2f", 0xa3}, {&(0x7f00000059c0)="421b1a754ce6685ed08d1549905ff4", 0xf}, {&(0x7f0000005a00)="34e47787191cacab6482041c2dce1ba87726d9213aa46f37363c72a2322f0c2b047337f09366220b15237de3520842c82a988138b439f37ad9a01efb6d0a34f249ecb480fe1df7e087333fc6005bc8ef168d4737720c2e", 0x57}, {&(0x7f0000005a80)="4baa4c895041a85f5777bf982eaea1d665c03da3d1bc87aff922f8a5390dab096af2ba279a505aa31990e44e58b1a75d28156c4ac5b47adba6adeac1b07e50e09278e58aecac81a00f1eacf7e4ab04b1d00cc5aa9eb94e6875187edac34da19d4a97798012574610cde4bebdd7f17a43f70af01fc118f1e69e433729f4ac4cf52a2d569e8732", 0x86}, {&(0x7f0000005b40)}], 0x5, &(0x7f0000005c40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}], 0x60, 0x40005}}, {{&(0x7f0000005cc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000005d40)="ae88fcc8e58ffa2e2b60590639bdeb682ff6865d08d811903c700c0e97dfb16c32643a2556968932c7db5b7b214852e5e24f09328701fadeb822b24a126451a144442257d35f2db9de4a", 0x4a}, {&(0x7f0000005dc0)="30f1bb56e5f8e268b13bbc28278b2e522c8c890fd2068bae55fa09191e7fcd8af6cc1e288217974d731fe9149b92423f6ff5f31e2b6668070ba68c306e241814cc839b8644fedd12d22b9cb0aa0e475031dd90fb9168f4d22b3d7a1724380e234cf2f179490d050b87ab5a1a2760e4d45bc9d04f783755f0ab7977a1a303038967316d5cd4e6364dc4b40e54971301fd086d7b3886a214bc23dff1fa35cb0c5d0c0bd6a5f28602d0e43bb91e36236cf93018a9cd242cffdc64e71be8dff3d5eec900977aa70d6d66450f42a3bbc3614f42bf0c31dab948c6ec73ae0abe2877b73fbecd", 0xe3}], 0x2, 0x0, 0x0, 0x801}}, {{&(0x7f0000005f00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000007140)=[{&(0x7f0000005f80)="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", 0x1000}, {&(0x7f0000006f80)="332290a4cf56498caaa3dc4b3550898dc5f0c649882349d287f1ce2035fc508192058e", 0x23}, {&(0x7f0000006fc0)="bb940016ca96045d481d4da8cbb4671cc014de74702de7ac3b3a98a9e5ce19c5c3f3520147a1c278a650ced9180b7871246900d60a27ef7277635dae9192b9484d47b75d99bd5ce66abafac8e4082f058a4c51bb66c483ef6979ba1e359d9c27f29fc01f5db5e3ae16e411779c4f18b43d681d5acd0ac52aaa36fa5923101ac4f06f5f24a957aa951218de8acdf7cc69b68d1368f776f9b2acb76035e859aa6ba43bec65018c7b601b27887fa0ce6e53ac410129ed32d91ece582d8951", 0xbd}, {&(0x7f0000007080)="dcabe13201c5c727beee63571f4b6ba8b792723fd3fa3f9f7d808c5e2cfe510d58b2bd2283b2cb26f4e18188902c60741cf5fe3ccf3444345b3eb1386aa9dd8c08580fb94e0ec5274725d3bdf7c4acad469030a91100e25e1408eeea79abe12cbe85bc56ea286ab847c7f6ffb27e1f20853c457e53a1739d8b91ee0ade67dd9ccf2459293f956fc2eb8b61aa12f7aff6a9e4f03e96f42263642e1549f4dd59956d99bc5af66801064dbc1b1452ac18a1d69b6e30c5ad5e236b", 0xb9}], 0x4, 0x0, 0x0, 0x20008000}}, {{&(0x7f0000007180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007480)=[{&(0x7f0000007200)="df0122e332ee58eafb49ae156da74ccb526ae7aec1fedd269bba3840934f38f8fd8651bedb4f", 0x26}, {&(0x7f0000007240)="3809b14b4f28abad1f3cb15c482748d32f46cba7a1b393d47fa35f94297b50b2b7c25eea2ba1fe4c72f90b07125ae3082398b0d57d4ebe3c3581e40466f6629974cb13f700607f09d7ce62e2d6bf99", 0x4f}, {&(0x7f00000072c0)="65dc5b59a158c368c569f51a2dea4f6da24b6a53c4f92ef9eced3fd81e49ca3ef9317e831b97d00e94d4518bdc7aea87a381d568ad2fe022c988f1fd2b5182b453668b266e571627497591c0447e91f0626cb56a8aa9fbbbd59a526a81b2", 0x5e}, {&(0x7f0000007340)="5bfa19aa4c0d2d87de143d40e66500e36c72db95299db5d28725057439cc3d17e1389c326fa20bcc0fa409407eddad17247e7387dd3c9ae03f185813e4c42db6457332991c0ed1ac32b06756e0b9efd5dcbb41d7b91de406a28966a59ac7d558c9ff8d91c908ec467687f25e432c5357e66b9122f3f829fb092a3c942f3d85b92b54e12e11b46a6f05b9be12443e0cf15a41218aaaa1360e6064821dea19159a824baca28133c5013c00a417c77ff26655963805828bc52e8d90b40890416eb90ef321e5363901f42b8cbc58aaa7f63c4b3fd736d9b954c060fa456c5d037ab303f6f15eac6caf560ebd4c3bdd89ec5d30f3947e7e1164360f9cd9e5183c", 0xfe}, {&(0x7f0000007440)="1afbfabb520cbcb7f96673709c50", 0xe}], 0x5, 0x0, 0x0, 0x1}}], 0x6, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r1, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1, 0x2, 0x11}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r5, 0x6, 0x55b, 0x9, 0xc5}) [ 1753.229451] FAULT_INJECTION: forcing a failure. [ 1753.229451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1753.231350] CPU: 1 PID: 11626 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1753.232474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.233956] Call Trace: [ 1753.234427] dump_stack+0x107/0x167 [ 1753.234970] should_fail.cold+0x5/0xa [ 1753.235549] _copy_from_user+0x2e/0x1b0 [ 1753.236149] input_event_from_user+0x1dd/0x290 [ 1753.236858] ? input_devices_seq_show+0xfe0/0xfe0 [ 1753.237584] evdev_write+0x257/0x420 [ 1753.238015] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1753.238549] ? security_file_permission+0x24e/0x570 [ 1753.239058] do_iter_write+0x482/0x670 [ 1753.239491] vfs_writev+0x1ae/0x5e0 [ 1753.239865] ? vfs_iter_write+0xa0/0xa0 [ 1753.240263] ? __fget_files+0x26d/0x480 [ 1753.240669] ? lock_downgrade+0x6d0/0x6d0 [ 1753.241090] ? find_held_lock+0x2c/0x110 [ 1753.241601] ? __fget_files+0x296/0x480 [ 1753.242020] ? __fget_light+0xea/0x290 [ 1753.242497] do_writev+0x283/0x300 [ 1753.242922] ? vfs_writev+0x5e0/0x5e0 [ 1753.243345] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1753.243833] do_syscall_64+0x33/0x40 [ 1753.244214] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1753.244729] RIP: 0033:0x7f701ebafb19 [ 1753.245115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.246924] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1753.247685] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1753.248388] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1753.249142] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.249906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.250671] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1753.302505] isofs_fill_super: bread failed, dev=loop6, iso_blknum=64, block=128 04:24:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x6, 0xffff5cf1, 0x0, 0x0, 0x0, 0xe4cc, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000592828df2e788bb300000000000000000000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000010000000061626364656a6b2c6d6e6f70"]) r1 = dup2(r0, 0xffffffffffffffff) unshare(0x48020200) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x401, 0x3f, 0x7f}) 04:24:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x6) r1 = socket$inet(0x2, 0x5, 0x4f) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x8, 0x42, 0x0, 0x1, 0x1000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x4000, 0x8, 0x1ff, 0x0, 0xab, 0xf4, 0xdb, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x40000000}) 04:24:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:24:35 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/12, 0xc, 0x80000001) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@loopback, @private}, 0xc) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x1000, 0x6, @remote, 0xffffffff}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000580)=ANY=[@ANYBLOB="ba2274b84b58cfaf7b075355edef70a1825a0ded2489d5a940228a9348b687f6feb407425cf49ba58dedb65836060195997baaec6cf7ce878adf92140bf0fe4d402a701541e49cdafda8f9ba07e666230dd979155356a152cb893b8f23848f3ad379c6bd2f94572c4ed5be38641d3ccbf2f8d101d2279b8784909e701f48712116cb63cdfe4211aadfc2e2a5e0d57005a8582845d599e6ba3ec8104738972097226af7757ebf949ac0e7912865f277ecd04a5cfcf96c458f407492b2cb49e278e641400f4fb9218cb3d5e4a83c1e8a81a0192dd65206644447f923a38ce13880220b160b5fc23bafcd05dbe7b7fdccc461f7803f6758e8f013a886930e474d5bc19b4b1dc8d103f6500c245c52e34f4d8000f5a54d1564adaf31958a399715b791423a9c23abad80d2d428ce4e9735e5726209713171cc991273493f911dfac0855b996506ea1bb262f8b49932e3c74763b0172568b8e161f82d50d8cd2fb6a3911720464bb770a44d4193b311c0febeab336598ce22bd7daab0748ae695b1728948e9de6de4b41bc71c8c19e028cf1a72c360b59805ce2c951a4d66ee49ba08b0a957fa079a528488e5617a8e735032da93854278b34eac2182b56c9c12f7540ff7aafe3a7aa40a9d03fe0bc4a04b35d7879e0401fb21d1f74f75456e5d6c6476a5072b54df5cc1ee8a0f453af5aa349e33865433714c429310379beb3d93417c4d3e29e2a89fc08a11c81a5e72a6bb427421c21588bf4ee14d4684ece11bcf49a0ba242121c8675768798dad6540a506ea3c9d8d913683278e27b1a71cfe7373a3d161c7efea60b8c5eb123199076aabca81826ad869637e37675c684b833ec83ed039fd9e0444cf2060b1c6d7d4dc6a99b6fc73b275cd8d6ac74b6a6008ab91e82a4bee343555d53c6b3efa5931970983c8ca8bd20cc7fc76c89664dae3d600d8e76e8e111a2283366c18ef29d9dd8d3fe42b73cd578219df12b04f4dacb44f175f783a49b421d4bd0a39fd3a82169d8118c0ca9d47a34dafaeddcea7452b0a478d475c2940f76bdd0ab40d7fa5a5fc963d29954c54da808225d02dcc1e0f27161f569f906e46afd9a0770f7ef05e8a5ec6256b23b8ef7aab9d7bef421be2d9cdf5c2dc425f115445928d7d1084a8b18220dc30382c282a92184692884cf7a3d3af9d940dd09ddc107e3b5a2eaf0dbac1ff92fc130db331bbbb3b1e56f5594dfa1801835f7db678e2e5168efdd5bdd5def6627b383b27f07da13285efa52374a07e295f7d24a73e5a03d9bfb4a099c98ba8b0a787993c3ff1eece37aff2647bd1ca2c7aa2f87580ddd7c0c3b5b2b106b67c7885af5766d9f4dab95a83ddeb9e8bfe8f5ee46526a4d65dbc60c3d893490189e8c02328220688d8d1568954079127e27ab750b52191e66b8f059ec1b8ef6bfd254d2a56d611b944f9fec788554e549044c3e8d1ddc0e2fdb4437dfff9a3ac58980aee3d90c964453c8907d20055345d009f102e55f278b7621c3a77f26978d1f7bdfd145661ca8b01ebea75fb4eb8ad74bc8cfa1ab239d7523c3cbceb2b2928e30ee14f64ae13ab6979ed6f2b5bf9ebe13b9cd497c4f9d619aec41137ce6fbd2d8a42ad5f04bf66d2f8a9cd1f5d90031883449f928f690a4e98c594ab0db03d0cba95014c35660babf6bd27133d9aed709f92e751012b0320673e1a9e2efc543504e40576ade83a400b47f47befd7f07a1789f427863aa5a1912e5f478454887142d4b1f3906c21c71d686e697b744d771df678fe5e71c7d32b88215e8a5af16d4dc417b298597cd069e975c190d6d98c36684dda0d7dd23322d7a51695337f04111b6aeabcd2924c01f0314f10032493e2bf0f124dd39e43770c1d6f816ef5279de7b37b04a15685096166823af6c02d21fef480336b7f9880918f7192b0cf2479798be143c111677a9dd70a041f5a4ce4024b7fc7747d28ff3d4e8bbbe76a4cf98a211e5605f38b4f436275c55cc9a6eb05c431996fe95402a5964de4e37c527fa17d6d3351b06cc925a7b09dd7e5bd377fbd4ed2198b33dd5cb3a166d9a6cae2d53c2dea83ad45180cbd6621765d98679946fdd794829a7e5892ffc83ee104ca59e6396cb252b1e4a5286d2a903651d4e7037ee7ef667cef4e9446e07bbd0237f52424f4ffb632b8ef4d40fe831dec9d2f55866c0f463a98906f1a3f851b9a7b780d4f5e3b8ece26cee7362cb7ffc243a293c2dee877410ec1198ff310da837b5099ebe5b60ae1159a26a5398caae3af9763e9ad775308456170325c24ca1a56ed371b0d5878d4053978647d5f08e7dec522cfa52b92ee275d9a8c4d821e53f0905ae38ab5b20df163838b15c2ba6aa22ee722be6633497ec7fbc49100d3bb1064d6bbef97843fb5cd309738ce5978a0374ef229c04bca1f03fdfaecda94d0e960a7a05db469efe1f1071d1b5349d226dbc01e688658450a12e2d714e6889567d75673881a42e19f3dbf65f7720b00615a5dfebdb052e5414eb07705f025e25f84240f397df0b2b155593f3c9ea2d140d2e294c486e60734e3f36da83d9dbc1a99848a8b5015bce780cab0258679978a526584688767e82fb655607389c85b174747982a0504b29a6bd17ae3e1ac5b7f43ffef9e1109dc2e09408762fad07dee2a9e0988d037718f05a09fdd409945998bab2cc6c35275a652e1820bab8754051f7c114527e1c0967cabfaf0e78d3eb47e63f3b4edc549c5c45bc501c60221e02aec11240ec0a51aaf4e1f1e81cdf36756f5072404dcee8b0473214cc817ca5eca0a2b1992b33a27c668f70d011a462778d234e06e14dadc682d307dc205859f435c47fa17245c12a7896d88a833de8d739a2b09f0e3716e4487358aa34874c48ba1dfc7904f6d1d1c0ae9fe4d4eeaae5c611dd2f729c4b0ce0e65f7c019e26985a67dffcd1871ccff14f24a15e405d6055561975b1e0deb94157a7f92ee078a43f1708cd439b999145c7dcd9e19feadeb2e4a1712f46a2f89b965c0c35c695eb73923149210bf0ee6f98ec8617eee6a8b59f490f5e07dab279510b91dc6b5df1504b87c24ffe143cc20c9b93763871748c110d4230f5902a53ec589e3f867c12fbefddf9aa4d02bdb5f826af693ce358fc14ffad18513ae5f10be507aa5980ebd432d23325d54c2913deb86c92820b13d902dfbbebe46294f2302835b84389a17082d186b24c6e7cecbb0bb9285c0f04271436ab87e57a5906f84311aa907999dd870e6f98768b12311b7cdc372a1ec65c3f0d1f1519a383c1f07e4eb28e3bb97bd08bd30ac92b492c01683121362b48f60679b675470b7d712f7c95ffb6c9a3dddabd41f7560ef8ad1d5df7605f907ec9e4e6f49848b9fdb630cf5d28f3ee10d70535a508fe41de0df13a5fd62ff3a9e891cb7d818f7c743caecfb709f1caa8525de7e1b45f63a92a760c0dfa4404d6a676c3fe30d2f98982c935281937ace5ee1eb15d9d6a9c4d32021a6353e77abc01f5c0ee876d3da6b63c17d3a7382f8d4994a20324215184ffeeefeeac03f24b9ea09f175a703a6a41449970d1e2d3f2d4fd554dd7f54c3d44913ea109938a6fe0bbd1bdeb4e98a4293cd76bdb465eadc5395522a5e9807f3b08d05fe0e105d8fa5fd74c3e7136c25445e80e48dd06cf690dc83852c7860a0332d09fe314f5b8dcb9e77d20a88fbe1c23dd98998b3a511d75a7ec0c4661840449aa0fd3d89e03568e69cb890e4a576c05c7828eac985a8cb66dfbeb7a1a7a9c4615a43bd3d9b432a434a831540b32b46d7d3bfe0cb84e01b88e9d04ae5f6dc351402df767522ffe6bc399d29318a500c27f3aee62f843edaf440799ca743f416fa326c804065fca8f8fe094305337d39e1e5039f9d2fe4e433ee1fa885bad3f92b23fb28de0d52c8293f01b0ee3cae5fb80cc49fa0542871662ef057ebcfc76ece80fb090000003e23f8643681f90199d3f7e3785b6764fbea57bfaee0c5e9c5fec3098ce9f5ac2c4d67d83d0cf818b10008aa971ccea1bdc82fd118aaa5aa10ca28a9053f0dfd238c9b41cb55c884a3b6898d37cc6664bbe3099b99f157c6917dcf5e4988f517544113fc186af687c475b53d04d727b8a54fdf24204107b72e8d20eacad62e48999d573059efdec7b1a84d822778d4584ce873f716c9d27342caeae721945be548b7f03d4101bc08d4ff73fe4c11b2ffabbbdbaffe19bb5c25ec9df8a8ed1b228d493dc5053c82a6000bcdc1ab624dd65003488eee60e61390dfde4703d93bb8019c0b07166fc884c0f59cc218d2633330474584f7ea81e40f2097b005ec0abb94b1493c1fef84fc5bc1501375639357ed53fcce0efa5519224008365b241c87c10ad3ce92884b28ab4238378b84be8ef64d80a9ed565bf706b0eac8e9bbd5b8abae3ed6d4bf4eb9f3a8d846d6456d5dd277691b958f2a11988ec722c5deca7222d6c2be852434eb94083b83c3346549ada76c71951f5da615c974c35a6266ccb51a12c7378d664c15af72aebb36cdbf241c2384a9ba8f11f5baa77ed18206a0f7c3ba7d7f11ab94b01b53829ac7a53240c678b4a3594100a374fcb1872c461ae647736c94a3907bb89e1488c22d96e7896c08f567ade547085a4f8afe46a6ba5740ea6c55ed0c4cfe99c2d512373ad249ef6ae46eb5813b8e0b02cf7de0892be5b0d52ae6e363e39af68d2ed154db5f3c50eb5c40d442778ffb0743a7d38a0900baaf297b534c5c4554ce3d611599d787b8354e30982905bbaf13758a683ee3471ed99f95c2a486bd8874a36d7c4d46ab81cbdb9f9c8f90c4e48f71407e2d42c65c7a95709e4a0ef9e95711c76db8e09197147fa97e8d370fa71d740be028042494e4eb2b71dd3777173d5877edc933f04cc05defda713f33c87e48df4b38e7c184005f546fd7d83d117f7a9c0b90dffa7453c2901e9ae0067559be0188aee4eb6ac66b94ad9b5bbe09d988de5ff1752f84e19c62e4467596f055dd7603d39ff25f8c919d27a014cff7d54bc0536e6d020f3128ae57a91520fd0cc02123e9397d04ca1ae28771de607aa9fa786afbacb82eed9b3022650ae4a6c44ed933a1b1af40987a4aa1ba55086fd94f47810f420a9dc6b73feb1cd11c3bf090553478cc08cefd080000000e14db46c47a7773fa78f86716bf8546a0e17fd88819d00fa534fe7e9ae99af2a9b204edc5cc649ab404d0304828f9ea72b93b228f9d4c2b47d7de17be6c00d9853ec091e65ec7b6e0", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0200006e696c65300000000000010000"]) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x22, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000000340)) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 04:24:35 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 8) 04:24:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) clone3(&(0x7f0000000100)={0x20000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080, 0x0, 0x800000, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) io_submit(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xda3}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() kcmp(r4, r3, 0x2, r2, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3, 0x2}, &(0x7f0000000040)='Z.;\xf9\xf6F\xee\x80#', 0x0) [ 1753.462318] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1753.496147] FAULT_INJECTION: forcing a failure. [ 1753.496147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1753.497452] CPU: 1 PID: 11645 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1753.498197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.499089] Call Trace: [ 1753.499382] dump_stack+0x107/0x167 [ 1753.499781] should_fail.cold+0x5/0xa [ 1753.500196] _copy_from_user+0x2e/0x1b0 [ 1753.500605] input_event_from_user+0x1dd/0x290 [ 1753.501104] ? input_devices_seq_show+0xfe0/0xfe0 [ 1753.501604] evdev_write+0x257/0x420 [ 1753.501985] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1753.502514] ? security_file_permission+0x24e/0x570 [ 1753.503030] do_iter_write+0x482/0x670 [ 1753.503428] ? import_iovec+0x83/0xb0 [ 1753.503818] vfs_writev+0x1ae/0x5e0 [ 1753.504190] ? vfs_iter_write+0xa0/0xa0 [ 1753.504593] ? __fget_files+0x26d/0x480 [ 1753.505008] ? lock_downgrade+0x6d0/0x6d0 [ 1753.505452] ? find_held_lock+0x2c/0x110 [ 1753.505901] ? __fget_files+0x296/0x480 [ 1753.506342] ? __fget_light+0xea/0x290 [ 1753.506770] do_writev+0x283/0x300 [ 1753.507155] ? vfs_writev+0x5e0/0x5e0 [ 1753.507581] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1753.508106] do_syscall_64+0x33/0x40 [ 1753.508511] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1753.509077] RIP: 0033:0x7f701ebafb19 [ 1753.509483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.511461] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1753.512280] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1753.513068] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1753.513840] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.514612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.515386] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1754.254531] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1765.212963] kmemleak: 13 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:24:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) clone3(&(0x7f0000000100)={0x20000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080, 0x0, 0x800000, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) io_submit(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xda3}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() kcmp(r4, r3, 0x2, r2, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3, 0x2}, &(0x7f0000000040)='Z.;\xf9\xf6F\xee\x80#', 0x0) 04:24:55 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 9) 04:24:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x0, 0xfffffffe, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$netlink(0x10, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x80000) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setpipe(r4, 0x407, 0xfffffffffffffff8) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) setxattr$trusted_overlay_nlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={'U-', 0xa987}, 0x16, 0x2) unshare(0x48020200) 04:24:55 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(r0, &(0x7f0000000240)='./file1\x00', 0x10000, 0x9) openat(0xffffffffffffffff, 0x0, 0xe9c315f24c3b5057, 0x10a) removexattr(&(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x157) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0x1f, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYRESOCT], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0xe3ff, 0x8000) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000680)=""/215, 0xd7}], 0x4) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000380)=@known='user.incfs.id\x00', &(0x7f00000003c0)=""/163, 0xa3) r2 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x105142, 0x0) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000480)='./file2\x00', 0x20040, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESOCT=r1, @ANYBLOB='\x00\x00\x004\x00\x00\x00\x00./file \x00']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, 0xd4) chdir(&(0x7f0000000280)='./file1\x00') copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0xae640, 0x21) 04:24:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:24:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) capget(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000140)) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000001140)={&(0x7f00000000c0)=""/104, 0x68}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read(r1, 0x0, 0xd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000002f00)={0x121c, 0x31, 0x20, 0x70bd27, 0x25dfdbfd, {0x9}, [@typed={0x8, 0x47, 0x0, 0x0, @u32=0xea}, @nested={0x1e9, 0x69, 0x0, 0x1, [@typed={0x8, 0x86, 0x0, 0x0, @pid=r0}, @generic="d63cd40898b6f5efb353681e0d1a33fb90b545d31279712fda732a89866d16c859d1542a695caf8338670ada9a1966048fec3bc0a2cc38b88c354aefa270f72f1de983ea4c0371ac52ac14cea61690885b384a8f", @typed={0x7, 0x38, 0x0, 0x0, @str='#-\x00'}, @generic="0d2659aa32cec413d3338bdb543d3a735e11c1f143e38aeb2822bc95494f59d542268898d92501c381f9a29b4f44cebb983850791bb17472f2b43482", @typed={0xc, 0x56, 0x0, 0x0, @u64}, @typed={0x2e, 0x7e, 0x0, 0x0, @binary="e9cd429a162ca02dc58c470e3dfc29402a8839aee47bb1c23c8c95ca84e332cf8717407eb96915ff63af"}, @generic="253c8031a168aa0edb8553e93de3f96ce881f1cd6f9147067ca5060a4ebd13e037f617f50544234c4e73bd54aca0ca170c80c690d3c1c8ec590f4d08ae16289653fd64a1267911c92f357d0904f3893e2d0e92f3c22b1c1c3d4cfc1e55e08ffd265b13afd19d06b64a290d19721de1b56544e73c1c7ea7ba6e5efc041764d397f7450fc3cebc4929766b7e98", @generic="a38c168aca6ffa201a967171c13b214c8bcab3bed11e09c89dc1314f05a2af9d880d5d2c0977a5dfa07123b563d6da664e7f75bebebad6bf97edab33d669b155841ffd41925c763e2462fa02cb11a006239d7821270ae09594b3ed838e1fcb07058ae38a6a93af39c12fd959c2419bd40bad5431de10551a38", @typed={0x4, 0x1e, 0x0, 0x0, @binary}]}, @generic="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", @typed={0x8, 0xa, 0x0, 0x0, @uid=r2}, @typed={0x4, 0xd}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x121c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x0, 0x0, 0x20000010}, 0x40010) read(0xffffffffffffffff, 0x0, 0xd) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) 04:24:55 executing program 6: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00", 0x0, 0x403}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r2 = fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup2(r2, r3) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000140)='cpuset\x00', &(0x7f0000000180)='M', 0x1) read$char_usb(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x8, 0x8, 0x0, 0x10001, 0x38001, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x5}, 0x10003, 0xab63e86, 0xfffffeff, 0x6, 0x100000001, 0x175, 0x0, 0x0, 0x800, 0x0, 0x8}, 0xffffffffffffffff, 0x10, r4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 04:24:55 executing program 1: syz_emit_ethernet(0x100, &(0x7f0000000080)={@link_local, @broadcast, @void, {@mpls_mc={0x8848, {[{0x400}, {0x8}], @generic="4d957134960443193ccaefd32d982ef86ac16320fff8b8a9a422926446415c3d1d556278dd75969fb7e62bbe8a42127de801b6e9f6b83f3df5f130f3f2628ebbd907158728bd78e83601211aaa2077bb63f1b4f2110bb1b4124c141ff410dad9d35c2e4a70a70d2e14e93221761730df0241d20ce852f2b5ec0b397c56b6242c9c2c47f5913705a8c3728a96d43e0a433b58d867b4b518e8296a1587b80b5cd139a13150be6e7c31b548664b203f61acfa2cdc9169ab3605ea25f444f364152298d58f62a5efaa7519804388df0ed2a7691ae7bf5bb633251f055078738b11b476a56de319b4a87933ff"}}}}, 0x0) syz_emit_ethernet(0x60, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0x0, 0x1, "0e63", "039850", 0x6000, "621ae6221467fc76d0930ceb5009978f3afdc3969caccb24d50a876ef856831cfd306fddbdee28f8423f29c42256af71db2274a827e91a1fd243c2478fb6bfec662660aeb8"}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x620, 0x56f, 0x431, 0x1e]}) syz_emit_ethernet(0x1015, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@llc={0x4, {@llc={0xaa, 0x1, "f8", "40ee8d109ed8955155442977299fc224bb381d5982b7b6972ff120901a50128a0000e1361fb5531aefd4fb45d505b17d22bc768f565f14864a0ac6d337ca87b3a3de1a486eeab701a8f1ae28dfa4b1eb6b6779be791c01827f2879a18a61c6601640d7e04ea3c758ccb77e0ce44e1db39d57a69f9dc435929eeb4ba2223f2fd1bd022610131ed8128b89f0ce0db479525e96d982c01ee81bbfa89d8c5be6e53311a254d2f68257fcb82367e048e1409ba9690c139b5610a7e3eb2cbca06856063dd3956417e5b6f1b52400d0afe83d32cb1054cbfdf9d31bc2e3371ee7b5fee84df406e3e1b1600aa1646ea6f9206c8b6791039679a8ec3f743074d1483a349bd1d77dbbc4937ebbe980d3b15e7d53a3bbfcee644a340ff59443564fc59a75157176413dd5ba052bd0fa3cece3a98eaeac3764b45561167cb455b52d25e7ae4b84d9284654de7564fdc1feac1353867b133c5847145290f3490f0151006b5bf8d0721cf787908c04a8f656bc68b098e0a0e4659057ee6c1ccf2ca6b6b5c464a460534ae5a9a1fd6095cadde8991b393d35530eaf14ac6f8dc645f6c5f86fcf5f7473fdd6f991b2f4060fb1341b96e4a8caad4f1f8cd15187f4fa6290a46a37f00d848b81abc2f106553db2ce68dd5c6cbd9950fb685c6d25ea0c0944c09cd38e1be530260ebf4162d181cf9d454864b799dde89059bba7a63a4a84e927cb539a27340258718361139c3e4647274f45b7b8ce07ed9881819951e174addf557ca9a7f9bdeb28680b0b85e77dc286e6f1d4682f3b78f488ad572f5373c3f1adeb22777185f5faf381d4b27aab2176dce445dd0a21a24f55ece4637ade21a58a75c769a04cf620a9a4e63773862bf1c28f1630edcc9fae3e27bcf6c887710c7b3a98e1811a8445aa095bf1cb727bbc66418661d7e3a044be28476b5c9e15b220cfdc1b509b7c99cbad177e756dd569a95b3ac7ee3177f3fa14311d80b03b95e1f6fbe8a18e9dc2532a1d3e730746dfc21dd447b4242945e0558ff2a1dfd50d97ae1a6fe4aa641a416ff9aedbdb17f93aee3124f568f045f6db000b6f0d2a842a7c755aedb0de12b0b760c9a22accca6867fd0433479daf812b44ffc9fbe6af7e56838a4e321ed34f7237bd51b223961d8747bafcc4bbe4fb83cdefbc06657885ce3fc96f131c2954934ebc9dfa6ce45d3853b37a08fe9ee633f604274cf45caa78b51d5bc5e535ce11d565362c3d9ef82e31c35705972a2f9f392a8ec24cc666d8018d722aa159b46af7b732b46a1a9a29e6cf46356fe55c26bdb1a6f897626ab2c6608a1d377eba2225096908b268399ce2187398afce2abff72680c76d40c4a22bade3e5b90780ffbc28743c18ec2ec297df4d32e58c2f70f949e42abc0a44677d279199ceca4241eb5acf8a78f046d4e46d7d93be1089ce353ea4a0d386c99963a422cc6182f7eae20fbca329c168d24723a90c3cb06338ac5a2b33cf370158748290b4f260a0888082b29763c30ceb131cda4a9a7b40745d43c69673c069aca22dea22d27a265e554ebe594baedc3d671db1ff6cd7d1face984087223837f85f87b5d37a8100facf354b6f7444a161318324495e66b66762b6d9e40c921ba1d52a81422dff353b2420a7514932b83b4130c8ea1f2a070b9a4b2af5a61806bda058543c30636731d9385dc86f7347b090d0812c6d8c6b9f869fe78aad3dde0005836569b8597310f76badacb830d0dbd218798293f72e3df585afe5489426c6a418f9d2788f958a62c5bc60e6234ccbc8540a32de8cf28aac47f8e53d99c023ef3508fa2d8abea04dabab7a097ce2036051d59abf5b96290762c0f8390bb764bbe9b147cf90da81761f6172129155d69f28a7b9f9d3b62f7a226187a5fa72265af8c73e64dbea3922381edd90adaf9ad19895db68c8562669c45ce9de762a519755cd8f121d8e31c470c20d518a9f35fc92cf5382fbac45f99831311ff39a24ec7fb6431cadd9ee24b469fd7a2919625cd1ee3c272983032ae0270cc9ce00f704b044e41473bd55c7384597d904505a701b6053db16965e36008551241aecfccdeb9666623b9e4004bccc2529a56b0fc45d88fc94e8f8ac3a862df9721f08d26945431bdc476226f4283a1900e3bd0d96ea4e69b8d5b6533c08bd53c250d5122b527241b198ae17941550ab4d7635a23b63cdb7c95849b6c7ce7219bbce1e0db043368fa13f5b53517b9fd9e468cd4f43091b96d3fe01d3cb5b491e7c56f9d3fd31c275843c14a28a4aadda78eccf5693d88c854feda91f78c7d8f1645947123ff464f65d5fb33836266886aa4649717540620a4076553a8cefa3924452e314b78d47c1b423842dc7ac3094f52bdeae41c7c950be5c213731eb4adcbee4d6bc9047f4c1b74d87d852e93a73baa60b6815b5b0b1bce56e8bed08bf67cf11fcb0e126eedad5db1166948170fa96c67c1d80f235f4cd19a201f7dea1d8b74447413946a0b5fcca231dcce2d7772c2a5a4903312f6246e353fc711f1ee03107a05e65eb267ecd20068f8c99d12dc7090166e3ac7edfce1c3735b77ba0fde82b773a25a1cd85113c684121757a2a498caaf1262ac6ca87d07c51d80061e76d0a2e72683ddb94266989639887bb2f41c922c1280863a00176c7c0e9822fea74380fbf8b9bd3ba0f0d8ef7cb2341e26e465ca764158e2352f489bb9bf61ea29162ab045a2788319b1af7cc5aee61b6249a28833d5e4641956b53ff502933d68f675139a709052d2ca896446f50c8da8a6d7ea75425235c8a0e74f19daed219e9e5f8a3bde345c2ce4b1632fcb01510f26f46f943b07a71d682200bffc5b28fed30eb689d363651a2a707c7b560dc1c01d1a7a4132883c7df80cd4efdf4efa1452d225ffa471643d503381b34b7b6f7e482611179c53e0195637f3c9011eaf547b306cf517913e11a6d5c3cf283a1c9a3543a3c98ae9d626d09e8a3c74f6fed4a525e13366945a212e9f77179121a62cb2b18c55cb6a79469ddbdc56c56db7e8017dc4d139a4a1439b08e5bd63a2e7d60a9da4b2259539c1259c355c53d3dfcb18c540ceb9ba43062ae47da373ad0030a5fb1ee0d76be5c309ceec227a30cde0d1d6d26b400d4ca7ea90ddd4afd03abc35fbee512338e551bd5c80e0b48412d33d180be9bb81c81bc3d46aa1806357c5f32576de31fee85392485a3229f435a63d684fe868a722e955aafe7b72f5aa8bacbdf2d2f6686f5aec3de39b2003d9a00d88d37eb08e93a1566581f373867aa4851953815aaf8d229448f2623f31f8609e1334337679f13dca6c914bd000b80bcc3d186c1876ee1fabd6e531b935b580eeb95748238639a2c9126b5869fc69b17a59c614466cb8b8665e5689097f34c696b897db0823574b4706d495e3d83a288827dbffa9279193071e546d7763816a9d8e400ecefde64d87b9be5ca3f6886885b7e7a37b2652b00dfff1fdb98223d0e39d1192ce90ae4c5b900874ae3d34ea82fde952f18a0d641456af7607ae777e3d21e4a80e5ee9e62a9cd94324d2aaf749079e5d329dc6e7546f8e2a137a8c6df0b36b2946b51899f30f0df91835567f48b59c25dcdcc079ae85a0010ea06ea100b0586363594b29e45084e897bdbc7087f7fe25d0f6573488a58f6ce0951508f41f4531b5a6dc71d40768bd6390411f650da76f4b2d97695fcb1c8d97090f9b1a82b6ebdf8d81088018424b3f7af5d2ab58fa99c0500421afadf24a975410cc83a0496a85baaa18fbe811a20468fd7cfcb7c0243ef84cad734acfd5b4933ca568e51cf390d7494878cadd7c97840db6ae4147cae8a524c6ec11f63343a2cb2d9e76eb5e47c547814f7507932f6fbed6926fe2dd0d37d74c2827f6cdd25615365847cf22f7a2cda86d0a140318ef84821be1e40a4d48100f826fe92d16f4adb3cc99d648077593e1cbd21301c713ab22690f9442852c781268ef318839d62628561b20dc231974ab1a7c6a4fd1496c949cff017bac58ab08866541396caa80e99893d1a9b799022b18f3470fc0386b183e6aed87309dfa6eca3e3982b1a9467e87a4e610166e16ed145e468f834184ac490d55bd544ed87d4673a3625f192af35b8ec7bb1864016a9731a175d111f8a5d5e721941a12dd3e51ee5a50e3fcc99b8020eb46ae3036071a1486afe67c9f08e28151356a7ee6e51f6e0c96b25d14fc7005896b512257edd9576a502fad544577548b31baf08dadefa60e01125426459f2a4aeb0054732e42fccddaa61c7e9d5e3447685a8935d4b6c1678b769a5a12006be0b3082395a7c930cc9d13af6d337ba43d417e6a35a1e1cddfcc83faf48ebf8aa252e33378d3b26153dfb56ec0a9263f7e1256307d98f1b9f271fe58c7a9c671a71fca863ed5955fb8661c07a1c9f126e104477e80668aa71d5a7a4ca65bcba984344c5937fd6dd83741c818189f3413dac2ecd6e7b572b46f553ff1f2956c9160c916af68bccdcb5c3b100b89b2fb59a4a8a17fa88a00269e821af62afcb52b28e74ae694b135caabcde1251c2e9937902674359995d226a22da8f607b98b997d20b2fb8776fd51a94c01a83fb0456a9f59bb5553f79bdba201a44069e7e5c0bf00fc55197995f148027a1fd1230d5f5e79e34d01f66912d2826de2c1e7827b27d84f93c1beaf943e0f1f8450f8534836d9682cfa81c9bf64004feedcfbaa66f27506c5eb7516e950ff2c32c186eea267bf9aba8f910bb93f3625daa528f0e56265b523d8ea9305cd0b6172dad38bba8be467ea95c1458e8cdf6ab9cb7e53c77ee889db605c38ada8e47e257f1f6b6fec1960c47b90dcaf506127fe406eba54fffddc61720231dd04309eac868f847e1d0d11b1a7ff220f04b8e5a0e52246ccf35c31b39ac18d47366eca761e5957a2b2697545455eef6f5d6d6737a393d38f47a6948b22ade428b6356f3d9250b6e156c16f8b68ddfaa0c3f8553cab8b3f1d25b7bdccbfeb293d5183139ce64fcf1764c923c9937b67e0423c0f33ab5143f8a5fcaa19541c1aefb2c8ff0ceba468e3a092572678e11cac2ae06c2470c10deca387fbb01ad3e9240f93bd9424544025a8bd758473cb2b24fa7353528850a1299d68041de8d29dd983d542a467f35d385dccfefaf88fac0a9143a5bb84db3f7c6d9407fd925ef2022b907ed7ed37229118ed52bf8d421a086a3cdf72a43e9a0dc2cf4ce9a83e02307f15dfe8a766ae2877562e5a0a73bc245ef28956465d012b9dd79350873d5eda7510c0976ae64937d14acab21a25689aa1a0bb70d1e9f2ebe6feb2bd32b32726b115757fc6d7a7ae42348d7c409562437df62751d30ef227aa6d70d838269956ebd3f3eeff96e4e3b5d7276656b011c7cf6c893e89ab7af7feafbfb88ac94613be33611b624488e41f2a3243af3642cd0d6bbf06c6674dd614638ddead7632c5f83c989be4c63b9d366edd4fb7b6af8b35a3d4277c1a150f3695029f0e09bc73276483247595b00fa370b5161451e5605bf1b8148bfa7e75009d60c0a9a813ea09a0c7f6a3e8237655d5c1027f5c1e66026b8f5bd387ae15161fa33e34942b7af7967fa0f992d0f1cd5d89dc8aa3e73166a4e07501985c109e3c79f7449d89893fb0756439d2078d0ff5b22911dccbdba9efca9c05ceadc8206b262b0e42c3118f1fd62a904d59ef0557c33e4e1f628797d913b5ee813c97ac2ea60f8e727266841c92bde1577d0f34bc2f28d76a35ae0fc174e9014663d83ff78ab227d3f7482699e29797e14e2d5173e4f5077a389371156b04bf45c3d09ab3a"}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x37e, 0xc8a, 0xa15, 0xcd]}) [ 1774.129785] FAULT_INJECTION: forcing a failure. [ 1774.129785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1774.132317] CPU: 1 PID: 11683 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1774.133771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.135480] Call Trace: [ 1774.136035] dump_stack+0x107/0x167 [ 1774.136805] should_fail.cold+0x5/0xa [ 1774.137645] _copy_from_user+0x2e/0x1b0 [ 1774.138488] input_event_from_user+0x1dd/0x290 [ 1774.139443] ? input_devices_seq_show+0xfe0/0xfe0 [ 1774.140462] evdev_write+0x257/0x420 [ 1774.141275] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1774.142364] ? security_file_permission+0x24e/0x570 [ 1774.143409] do_iter_write+0x482/0x670 [ 1774.144224] ? import_iovec+0x83/0xb0 [ 1774.145021] vfs_writev+0x1ae/0x5e0 [ 1774.145822] ? vfs_iter_write+0xa0/0xa0 [ 1774.146648] ? __fget_files+0x26d/0x480 [ 1774.147478] ? lock_downgrade+0x6d0/0x6d0 [ 1774.148330] ? find_held_lock+0x2c/0x110 [ 1774.149226] ? __fget_files+0x296/0x480 [ 1774.150061] ? __fget_light+0xea/0x290 [ 1774.150874] do_writev+0x283/0x300 [ 1774.151614] ? vfs_writev+0x5e0/0x5e0 [ 1774.152409] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1774.153444] do_syscall_64+0x33/0x40 [ 1774.154231] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1774.155288] RIP: 0033:0x7f701ebafb19 [ 1774.156060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.159896] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1774.161490] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1774.162972] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1774.164455] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.165956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1774.167422] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:24:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) clone3(&(0x7f0000000100)={0x20000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080, 0x0, 0x800000, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) io_submit(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xda3}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() kcmp(r4, r3, 0x2, r2, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3, 0x2}, &(0x7f0000000040)='Z.;\xf9\xf6F\xee\x80#', 0x0) 04:24:55 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 10) 04:24:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:24:56 executing program 1: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f0000000240)=""/260, 0x104}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sync_file_range(r1, 0x3d6, 0x9, 0x0) [ 1774.479160] FAULT_INJECTION: forcing a failure. [ 1774.479160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1774.481757] CPU: 1 PID: 11708 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1774.483188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.484881] Call Trace: [ 1774.485480] dump_stack+0x107/0x167 [ 1774.486233] should_fail.cold+0x5/0xa [ 1774.487025] _copy_from_user+0x2e/0x1b0 [ 1774.487851] input_event_from_user+0x1dd/0x290 [ 1774.488804] ? input_devices_seq_show+0xfe0/0xfe0 [ 1774.489829] evdev_write+0x257/0x420 [ 1774.490609] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1774.491678] ? security_file_permission+0x24e/0x570 [ 1774.492724] do_iter_write+0x482/0x670 [ 1774.493582] ? import_iovec+0x83/0xb0 [ 1774.494385] vfs_writev+0x1ae/0x5e0 [ 1774.495141] ? vfs_iter_write+0xa0/0xa0 [ 1774.495959] ? __fget_files+0x26d/0x480 [ 1774.496781] ? lock_downgrade+0x6d0/0x6d0 [ 1774.497656] ? find_held_lock+0x2c/0x110 [ 1774.498517] ? __fget_files+0x296/0x480 [ 1774.499358] ? __fget_light+0xea/0x290 [ 1774.500170] do_writev+0x283/0x300 [ 1774.500899] ? vfs_writev+0x5e0/0x5e0 [ 1774.501723] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1774.502736] do_syscall_64+0x33/0x40 [ 1774.503510] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1774.504564] RIP: 0033:0x7f701ebafb19 [ 1774.505380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.509173] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1774.510724] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1774.512183] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1774.513654] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.515092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.516540] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:24:56 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0xfd, 0x4}, 0x8) write$rfkill(r0, &(0x7f0000000080)={0x800, 0x1, 0x1, 0x0, 0x1}, 0x8) write$rfkill(r0, &(0x7f0000000040)={0x36e6, 0x9, 0x1, 0x0, 0x1}, 0x8) 04:24:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:24:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$SG_SET_TIMEOUT(r0, 0x31e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x44, 0x0, 0x2, 0x0, 0x3, 0x3e, 0x8db1, 0xe0, 0x40, 0xee, 0x3f, 0xae, 0x38, 0x2, 0x101, 0x2, 0x1000}, [{0x60000000, 0x9a6, 0x1, 0x59e, 0xffff, 0x0, 0x3}, {0x7, 0x7fffffff, 0x2, 0x6, 0x1, 0x7ff, 0x7}], "0b7adf3af47848f138ec1b0d8677dd3d4cf51a449ad567adab7b92aa3660a043c9c2dbf43bfa914772ff602da416d0adb0ccb80cad5adfe5e1558a556708c8bf1d1efaff9771dcd9115d525cc0f15bc5c369ba15caec3d82000f15a23c846ef2e58ce5b634ddf0a5f9469a1413a39904c84c6fc900d92cf3782ad9096e07148ee04e7c31c357cd91", ['\x00', '\x00']}, 0x338) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) getxattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000800)=""/225, 0xe1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000540), 0x40010, &(0x7f0000000680)={'trans=unix,', {[{@access_uid={'access', 0x3d, r3}}, {@access_uid={'access', 0x3d, r4}}, {@access_client}, {@cache_mmap}], [{@euid_gt={'euid>', r5}}]}}) write$P9_RVERSION(r0, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x5752, 0x6, '9P2000'}, 0x13) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) 04:24:56 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 11) [ 1774.849896] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1774.965250] FAULT_INJECTION: forcing a failure. [ 1774.965250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1774.967730] CPU: 1 PID: 11726 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1774.969180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.970919] Call Trace: [ 1774.971473] dump_stack+0x107/0x167 [ 1774.972247] should_fail.cold+0x5/0xa [ 1774.973053] _copy_from_user+0x2e/0x1b0 [ 1774.973923] input_event_from_user+0x1dd/0x290 [ 1774.974885] ? input_devices_seq_show+0xfe0/0xfe0 [ 1774.976165] evdev_write+0x257/0x420 [ 1774.977166] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1774.978541] ? security_file_permission+0x24e/0x570 [ 1774.979872] do_iter_write+0x482/0x670 [ 1774.980781] ? import_iovec+0x83/0xb0 [ 1774.981591] vfs_writev+0x1ae/0x5e0 [ 1774.982380] ? vfs_iter_write+0xa0/0xa0 [ 1774.983234] ? __fget_files+0x26d/0x480 [ 1774.984081] ? lock_downgrade+0x6d0/0x6d0 [ 1774.984946] ? find_held_lock+0x2c/0x110 [ 1774.985845] ? __fget_files+0x296/0x480 [ 1774.986693] ? __fget_light+0xea/0x290 [ 1774.987506] do_writev+0x283/0x300 [ 1774.988257] ? vfs_writev+0x5e0/0x5e0 [ 1774.989070] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1774.990102] do_syscall_64+0x33/0x40 [ 1774.990894] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1774.991949] RIP: 0033:0x7f701ebafb19 [ 1774.992731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.996559] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1774.998193] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1774.999690] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1775.001188] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1775.002704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1775.004195] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:24:56 executing program 3: openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x101502, 0x0) r0 = io_uring_setup(0x1c02, &(0x7f0000000100)={0x0, 0x5c90, 0x37, 0x0, 0x117}) r1 = io_uring_setup(0x638c, &(0x7f0000000080)={0x0, 0x46d2, 0x4b, 0x7, 0xc4, 0x0, r0}) close(r1) 04:24:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, 0x0, 0x0) 04:24:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x0, 0xfffffffe, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$netlink(0x10, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x80000) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setpipe(r4, 0x407, 0xfffffffffffffff8) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) setxattr$trusted_overlay_nlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={'U-', 0xa987}, 0x16, 0x2) unshare(0x48020200) 04:24:56 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 12) 04:24:57 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x267}}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="626c6f636b3d3078303030303030303030303030303030302c646f6e745f61707072616973652c646f6e745f61707072616973652c66736e616d653d5b2a295b2c0062a207973c8eaf3879d40e8bdae45b81ea2f9fabaeca72d308452cffe254325066750ff20d48acebb4132b78925ae6fc6a174a44397d3a2181c117206d6335620f51b013a657e682ab6fc268c3be6110690270"]) 04:24:57 executing program 4: timer_create(0x2, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) timerfd_settime(r2, 0x1, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_gettime(r3, &(0x7f0000000080)) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, &(0x7f00000000c0)) 04:24:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, 0x0, 0x0) [ 1775.407338] FAULT_INJECTION: forcing a failure. [ 1775.407338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.409955] CPU: 1 PID: 11744 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1775.411385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1775.413099] Call Trace: [ 1775.413685] dump_stack+0x107/0x167 [ 1775.414432] should_fail.cold+0x5/0xa [ 1775.415232] _copy_from_user+0x2e/0x1b0 [ 1775.416079] input_event_from_user+0x1dd/0x290 [ 1775.417050] ? input_devices_seq_show+0xfe0/0xfe0 [ 1775.418092] evdev_write+0x257/0x420 [ 1775.418887] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1775.419987] ? security_file_permission+0x24e/0x570 [ 1775.421037] do_iter_write+0x482/0x670 [ 1775.421882] ? import_iovec+0x83/0xb0 [ 1775.422681] vfs_writev+0x1ae/0x5e0 [ 1775.423440] ? vfs_iter_write+0xa0/0xa0 [ 1775.424262] ? __fget_files+0x26d/0x480 [ 1775.425101] ? lock_downgrade+0x6d0/0x6d0 [ 1775.425959] ? find_held_lock+0x2c/0x110 [ 1775.426842] ? __fget_files+0x296/0x480 [ 1775.427680] ? __fget_light+0xea/0x290 [ 1775.428493] do_writev+0x283/0x300 [ 1775.429261] ? vfs_writev+0x5e0/0x5e0 [ 1775.430068] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1775.431076] do_syscall_64+0x33/0x40 [ 1775.431861] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1775.432917] RIP: 0033:0x7f701ebafb19 [ 1775.433727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1775.437617] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1775.439259] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1775.440771] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1775.442262] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1775.443762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1775.445264] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1775.767158] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1789.218047] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:25:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x810, 0xffffffffffffffff, 0x40000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x10040, 0xaf) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) dup2(r2, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1c0}}, @NFCTH_TUPLE={0x94, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1d}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x50) 04:25:20 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012900)) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x1) 04:25:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000080)="9e838763029c3f9a5b972698a6401d38d20734d788982aa71f918e4aa41275ac3eb1792dc1cd8ab3536ac9d6fb49a496827017615294c364731b719a6af33dd68944952a2ebb1c50df79896381044ec713bf043bfac4a7d511", 0x59}], 0x2000000, &(0x7f0000000200)={[{@shortname_mixed}, {@numtail}, {@utf8no}, {@shortname_win95}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '])]\':'}}, {@dont_hash}, {@fowner_eq}, {@context={'context', 0x3d, 'system_u'}}]}) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)="373a8da315f7ffe4e173faa4c0a2ddbf361bef0301e89fceab6bf07c13f96cdb22870ae318e93fb19a5fd7ed4b50a869b881b765350877f85c6a7ab792", 0x3d, 0x3) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$nfs4(&(0x7f0000001400), &(0x7f0000001440)='./file0\x00', 0x8, 0x1, &(0x7f0000002480)=[{&(0x7f0000001480)="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", 0x1000}], 0x2001020, &(0x7f00000024c0)={[{':+@$'}, {'user.incfs.metadata\x00'}, {'sysadm_u'}, {'\'/}*%-+[,-{'}, {}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@measure}, {@audit}, {@fowner_gt={'fowner>', 0xee00}}]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "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", "f78d6bef89c54da1c7f3c580a5e390a126287cac9dba03505ff30d70257478ca8d2794749c9e6774ac98a23ceefe8c2a6182342573a8c89f6a027992db670d0ec569ec730b74eb64ef0d4a0c6b42ecad7359d005bff4f3ab738d4361f40e708445f3698051f712b8f96a1553668ebc770dbf293333c56a170c8cee636bff56107f295c1d1e9edf7b14b4092d92c28f78e04bf3f96b96a1662940796176ec1424baab8874d52cb78c56efcf57417015dc8111bc0407c280322d27926f3560158ea29a98d384391ddbd44321c6dd75e823d17414c293fd0f611b1aae803912151a8d9e238de788a05cbddcdf03e5cf9468b7e0162555193ade624e21475a3a322dd3e585a3baf80cc2f7e433cc95859655ac29d597b71bd1753969eb6bacc9b3fc23e448ebb7b763fe0db96ef05390e55646bb90dc5f0f08aa3b0be51372502a6f88d982918d971652c4cb288868f89886b9b1b7b7fc0467cd7d2eb2eba04bc27d03bf770739e392699022cc7a0acd4582202ea8b6d39b1beda2845cff12909966af67249460932a564daef125f5b30635643792258161e4405f56f4dfe60ddf55674103f8c02d49bf2ee7f9db287c1677f34edb3ff7e7e64998d4584a1c71d047dbc91df06c02ecc9565e7879ad01c2a9627f144223f2085de981bd719f39dd94d3be5e2513cc62d79cfff847faae19317fc9f3128e246c65c14fe12e964f8a512c4796a65130414a86da253e400afde2ce8b5101a7040627bc463196a0809ed4a2f68ef34b17d886bd63992db5ea6330a7561d951c8f5bc04c35dcc0ce7f9fedb733005b77df45d75f1ddcceef9cef2cdb2ae7ad1db1d7d5bc63b7b1194362901424a1417c4aa62fc143af58ce31ede8a57f6b14c23d34f25d9e93f2ee8397d3aab4a344543b10c88544c04bfe9fbbfbe9e48d983d28339559c740cd8c02c2cc9e51aa9e9a6cc6d44eaa625f22d3ba53ae3747c2edb3d8bd4d7148ede998015b6a5cce2d3609a0e0b4ae27bed8d8e9dd0705fc50b5d719f95645c1e478031242d2bf9c33e0026e1d11f3af50342fb2bedfc6b7c9bcb4328b1815606f330ed3d3dd073ec93e45b1c35490a6239eab2c0b63e84c9d68d1626e7118495a9e56989f7c665ed63bc4e0da6bdd0d0e0b89a37048b6b821f15b78f4a06be3d340cb05f1cfcbe4041ebdec199c2c39c18f63e857cece595575b2bda7268065360821c9c21161cda2a62974cfbaf02f4c36af980fb9e9bc585d4ebfe098acaf5c22822d11cdee6b22cb253b41abcb8ee682d4dade8e3b9002535de54bd46b58339b280e43d46c751b2f537bf861814fa9c525897b7d5508a6a3013a4402009503abe451be12253f80a6801d69e019eb53ba2f1a218a1212a2c852f7426410ae3a4f723f98452b9a5de3e02d67a8476ab7987f39777965e51e95c443cd7406d3955d14841900e2bf77f60573617311f188ec4986c621b84635b1258f4a97acdbc3956ef308d580d8b8a0559bb9cde992f75c61fffb1e91a882c84321ca5c294fac48e91e772fa6dbcbee533314f399b2de8159fc85bbc3dd73298a22ad687d5acf1119b5149e6474aa85b6fc43814bbea5410504984e626375a7ad513116eb87d0cdd5833b0547dd086f35d47d4331da654786b3d568ea8488b227e58876878b5d6622c291128e9608e298344469b13947cf8a54e96ebc1992cc0729385b183369ec28b59ea01f9685f04930fb88b258643498cdf73e7e3a01bdda727a07730bdad75202c4d52e5766ddd91b7d87245cacd90b6d287cd3c4d7851775872ee915f7b95a4cd7c823047f8a5c989178d766f5691867335147a5ac2bcfc3c1d2bcfeda21eda5f022f0e67d3f510543f8bf6bb39c7e4cfb0ed2d18e90b94ff1fe8fce0bfa6fa3d2babbc58985366133bd0b7983dbfaa8fe3ee670978020df4b2a5409e5ec552dd98cf98c1cb8db4d773e0fa0f97b3e2418fdeb02dd7be8256d5ccba65cfbd9a581fead399e3a8887bd0f23fa92597145ccf1be69cf63e82975e827051b304d7783a14cefa2459e4181b5af491ac04e79905f6be40cba9f3f5bc4cfe84268994d664b3b5ec0bc40d7e4298a65691985376e875d77f3d4b029c8a8370e7ae762aa9ae5aaa10626f91c1d45955a8eafb13091ff6630aac3c225efe8df57f7d4e74f4294f2eef42b010fd6087e92db1c43d6ca2dd1caa780c4a09b910dda12dabad67a5990c84c2d4838a3dabe0fb80a3c0e30033592afcf37946954a6fabb26db169227a82fb56ebe20f8396846668b34e61d389fd95a4ec804d53a90a1d7976014a8e1fd5e669df382535c1cddf52f731b4f92d32f3d414825e52419d336676f46f999d6a4a23317a1f357efc203bdfbd5c313a73001e15c52e3e65ed0437c78e87572cc8a572296fd1d0e9b0686752dd232467ebf182c684ba9ff0f7f5b33756318f5d41669c2b6e3c1a6837429486d319cc8aeb1056d0d72eed0b05b323f9dc03db66565e729a92d6dfa829d55019b3812856932532d0c8193a5d1f2c0b07142431f966e1243f8078fa12227278229d1bdfeae85bbfc553a6aee3be77f03d1e176e9c457bbf0b0c0284dea720faba8b115f9939186279fc23f17e599e60a0d01e35e5a9c7088eab41b8db052d3c793049365eb7fb4cce4454fe14e5f00c0d70cae413c1e64b6e75a7cada1860aefff9365f086aa8a3560b4550f5af7ffe3d5643e3f79506f8f468c1da58fcc6fb4b46a54cb6a65345c83089f8225fabd7261cd8f7fd830b538428f10ef60e1ac3e2476265be2640a7802e128721781f2dca2075e2cd29b78f379df89b9a008fa99588e6103f8b29252e8243f8d4de07003edee304a024ceb8df5ca8112cb43b4a38569b2fb1f34c8d0521f1695ff9dcea2781ed95e740b78f16e8e3643efebb30f2902a2af03a229b28353cc5e896490c1d08f1cf95d6f41fcd33963f554a500053a4069d361b82c6c197968605c655a72554396bf9a99b87f43bd08d5717448973b9e00498f056032adda9cfbe5a827bb16d6988554dfabb6dbba4ecd74297c4496a139800be39f295782eb8a88b461c5c679ecf5b9d2d7d26e038f131e12013bf1056774d22820a623b0e1c49f4bf24aca4691fdfa1fd3f37d7b4108c98c86f1587e052f59337e7d3d18caa09037790c52cd5723ba4901fdfa553d44500db066f7f19a315c0fddc1185f03a28cd67069e0512737a79be5a9f3db7b2f4f519e6bd8b101d87a032e47e0d9b1dfe30ebf2d8bfadb7f8577565fcd702db19b8613fb74ab64581e8d37e03d188d46c24a1f297342f877c56d65e09645fa4fd3b3acfdf36c58cbaa62dc4f6ec20a145086e49dc578f6ce3948e1d69a8674ebfeb166f6aa67c800f2eec7c501d763d9c83224bada7ebe97b8a24858393d7bbf220c2b508dd4d4470b10db01f045a98ab4f42d4d250d8afdd7c7d450ea80d0d6fd975f0977dc727f873ffa7795ad1b75ad051d0e3cd563c21042b00b5a3e3e92177213864e5eac7d7dafebb738cc5c9068c94c5efd07bf414ebeea65d7bac56c279a27789fb8bedece447f62b25064983b4ff085ca36311382cb9f244d3604936ffb8a25d3351d919ddcf868b2925ea12a0cc3ff396830da082f3c71d7f0c811c18f4ce4a3b155bee38ff05941f5e245338e63b503d3d837f39680b1bfc7d22e4fbce477b7d445f02958bf4d04d6d2482f43b699eb23b75a1796f0d21aefd5d558052a690678731602021934f5b01c7489cc54df1483c63d0b6bdf3553381a52c57b414ebc7d2ec23ae254cbac069b0523b2cefbe0a9ce31b64c0caf3a543bfd30b5f9688d8fe1ecb60433edca52e12c3c5809b54c0e9b0d1940bf3d359e838ce9f59d58ad3d1ff2c770755ee5f73a233a3f2e2a5ce7e3015d2865c772879ad1bae40de3ff3787cb25ede741e8c3454e208860edf28bae77b0a617ed66426483ab3d8be28a32aa043ba271c2d42ffba3de6246556c653217b170cf75e4f49b272db0fe1c7e3e978a0d87ad7a89a29158483b9b9fb2fad51007e58debaf7f3a3352e3f45aa79d053447d1579910c36a5e04bf26c4c9df0ced8c0f02b32980052199ceaf8e4becfb315e45ded1abcbcfb8e41832b563e2f7f98e5961e6a52262b7fb9cc8c88b79dbe4ca434b1d4ee07fdd9ce4a5b590b5f4f4309fc2ea11a7556eb8d0afc16838757994939c7b7245688b841453bfe0845d1b3497dacd743e3edfdea24eb31c140e8efbe005c11598784bbe0eb078d76bd5d89410c9af9b61b75c306690bbfe312eee113929560c1b114fc5e73233f18a355f92f93dd2c1b89a42e58091d7c9640b36b7ab1dad9b81b71189c84cc7b7eef4ba46ecadcc0012c11216f1e994b318e3b0c79c280842418403f17a0efc233e80e548f7ed84344f0eb8f36fb33b5770d8a4548647403b141775824369be91d8b087ffe6f5a5d01456d95a8fe5fafae671a9c98477b44687222f2e5ccde8f67cc704609ab6b5c173dd914730fcd667b9a0da897eb3a2dc876895455e52cb9c63b0cf7b4af50be4200ece9a815c5d89d6a61d4cefedc7c0e3ef85b26e6a9be41f928c0f8565b66b471ac091ae7e5a37549b601d4dcccf7e90b3c8ab32826337e35119f9db1558fa2fea3dc7005c6df5052e0fbae9dc75b53766da0ffe617065cc63e53b1ee864aa48194104be4fc0c2d376eb63c6e60824a2e5d69aef35dde56571247677e8524b1e0da1072721f905d7e1bc2bbc4a93c43b35fc51441c467c971a40d92d639a8fdc123fe7ff5e0e33ab0aa5d33039d548799d2f40535da5c706e8894a6c74ad839f98c3b20d25f4f03bdcec2971a8c9d4cbb8353ca0e451602dfe221a98f95ca8e1ae50df2d784c278e06d48c0d14405853cc25cce3d0aed03dc9a7c01769622116baba7939b9f968a198f7a1d3e406ce4e7e138ec045263c96c3322c4ea21648c604895362fdb588e050f1d2ed5610823bfffed8c363e23c2e4e29b97e3471f2e147ae6473fa0ddc13c81b5d45f86439790d87226db6ed22eaf95eae7dd4ed1d0ba51eabbebfcaa8da45f878d79a5baa13d39d56587d304420eeab833e945b466382c379e9a352f2f3f36c057c38fdeac36accafb7a0f965daaf75cdf46ce6f47c976662e1ff1a77ab862b79038370b6a12bd72719325099680a9c9e1102fb8ee3bc83afd22b270ad33c9f3567190f2f3ab1218bfed5dde2e5f623d8d73ea9db95dece272535986943ddc5bf43a03c9d2de4a0caee299c8aa7744ecc7992498f670bc095801f281ea9e11e2e0758a476398c3dfee2f84ad1192897dd9678b41b2528d9a273ba400dad408cb7a403e99d6bf533e6214bf4314fe5b18b88a318845fcc472fd599cb9bdc09d7a76c2110f95a768d0db63f96708de243665250dd844848a7097fca3fc3c808"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000004780)={{0x0, 0x80000000, 0x1ff, 0x3, 0x71d549e7, 0x0, 0x2, 0x3f, 0x2, 0xd57f, 0x0, 0x81, 0x2, 0x4, 0xf4}, 0x10, [0x0, 0x0]}) lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000001380)=@known='user.incfs.metadata\x00', &(0x7f00000013c0)='^)\x00', 0x3, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x4) 04:25:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000380)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000380)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 04:25:20 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 13) 04:25:20 executing program 6: r0 = syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r5, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r4, 0x0) io_uring_enter(r0, 0x2271, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x50a3, &(0x7f00000001c0)={0x0, 0xf0db, 0x4, 0x0, 0x18e, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0012000101000000f89ade2963d3e9eda4775e356ceb7d933c3579ab6256e21a622580839c04cf4b1e09dcc36c0eb52a58f79bc7771d9e753874b5b9f1ef53d1ec251330757afcd36401a0c1e011135a77dccd2e191566756d51d08345fece3807596ca1290b95a19fe188f1f59bd73b10c8d304b81af6c7cc03f4ac3dc024c20b556cb3b76e6037ca826495a896"], 0x20}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) getsockopt$sock_int(r9, 0x1, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) syz_io_uring_submit(r1, r7, &(0x7f00000003c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x9, 0x4, 0x0, 0xd, 0x2}, 0x7) 04:25:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, 0x0, 0x0) 04:25:20 executing program 4: ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'ip_vti0\x00', {0x1}, 0x258}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x80000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000ddddf361b116dd4bb681391964ccf077da010040", 0x1f, 0x6}, {&(0x7f0000000400)="0331af8815e99ee7abde", 0xa, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x59, 0x4}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd2f4655fd2f4655f000000000000040020", 0x17, 0x1500}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1798.814946] FAULT_INJECTION: forcing a failure. [ 1798.814946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.817362] CPU: 1 PID: 11771 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1798.818756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1798.820476] Call Trace: [ 1798.821015] dump_stack+0x107/0x167 [ 1798.821793] should_fail.cold+0x5/0xa [ 1798.822561] _copy_from_user+0x2e/0x1b0 [ 1798.823391] input_event_from_user+0x1dd/0x290 [ 1798.824336] ? input_devices_seq_show+0xfe0/0xfe0 [ 1798.825346] evdev_write+0x257/0x420 [ 1798.826132] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1798.827218] ? security_file_permission+0x24e/0x570 [ 1798.828264] do_iter_write+0x482/0x670 [ 1798.829073] ? import_iovec+0x83/0xb0 [ 1798.829871] vfs_writev+0x1ae/0x5e0 [ 1798.830628] ? vfs_iter_write+0xa0/0xa0 [ 1798.831448] ? __fget_files+0x26d/0x480 [ 1798.832273] ? lock_downgrade+0x6d0/0x6d0 [ 1798.833116] ? find_held_lock+0x2c/0x110 [ 1798.833997] ? __fget_files+0x296/0x480 [ 1798.834816] ? __fget_light+0xea/0x290 [ 1798.835626] do_writev+0x283/0x300 [ 1798.836363] ? vfs_writev+0x5e0/0x5e0 [ 1798.837155] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1798.838166] do_syscall_64+0x33/0x40 [ 1798.838927] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1798.839993] RIP: 0033:0x7f701ebafb19 [ 1798.840763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1798.844568] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1798.846141] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1798.847607] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1798.849072] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1798.850565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1798.852034] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:25:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xfd, 0x8, 0x3, 0x0, 0x1, 0x40863, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xf18, 0x4, @perf_bp={&(0x7f0000000180), 0x6}, 0x14000, 0x2, 0x4, 0x3, 0x80000001, 0x4, 0x8000, 0x0, 0x100, 0x0, 0x1}, 0xffffffffffffffff, 0xb, r0, 0x1) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) close(r1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x53cb4a5fce22c8ec, 0xffffffff9bd88517, 0x0) fallocate(r3, 0x0, 0x0, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) renameat2(r3, &(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file2\x00', 0x6) openat2(r2, &(0x7f0000000040)='./file2\x00', &(0x7f00000000c0)={0x101, 0x14, 0x1}, 0x18) r6 = accept4$unix(r0, 0x0, &(0x7f0000000100), 0x800) sendfile(r6, r1, &(0x7f0000000140)=0x700000000000000, 0x5) [ 1798.942288] SELinux: duplicate or incompatible mount options 04:25:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 04:25:20 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 14) 04:25:20 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(r0, &(0x7f0000000b40)='./file0\x00', 0x10d82, 0x111) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x21) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7, &(0x7f00000006c0)=[{&(0x7f0000000280)="b700d099e538a2bd9293d77a40ed31b165e29c9cf6494b37d88aa4e455e5ffb39ea63c97043440a918b105667f47554832568dedd3ce785f7c6d151a8ee3da095d623cf906c18a168e53e5aa1195d46dc9884048411c3701b01e9bd00c4615d60f0199945063bd21f5dd60b0a2003273", 0x70, 0x80}, {&(0x7f0000000300)="502931b452a207d069e27f8219ddb69c20eb5fc752cd0ca8a71e4558bf07969d91bec698cb41cbf95c962350a94cd0eb7dca8dc3715cb95bd9f6df89345fe1d2a9a59adc6d8357d0f23946679892f36530c0eebfe4e3d28cb78e57fe92a612f526f430c389e2b24b9b89c21fafd09054587fa99bddb0dbff5ca305ae1d2072f4d27de9f834bccec8984d44", 0x8b, 0x2a5b}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000004c0)="bb307e2df2ffc3c081c131c973a3202363e7de027861cce57f8bb177bfd90b31f155544106d49e1274ecccb172d6693d4375c3cd710cea9b9fc851899d1fe843eb3898738d233632d1b46831d4571dd317774a1fe6e4b9a7b853bb74b91736dcbad05984281abb4c83f74a597ebcc206ebef327301c0848cd2e10cbddb62a84f780a6dd70aa03044f23b6166395d2dc547d7eb3a217c5a5fc1cda783224d611e38", 0xa1, 0x659d}, {&(0x7f0000000580)="7ac4d9", 0x3, 0x20}, {&(0x7f00000005c0)="fbd9935256e735395174aad11e9800009f445ddbd92011f42f854102d05938d29b4e06c71b9a7849fbe2f472e415d0d52cd859b2e8d17ccc4e76e7418b1c1d28f58c0f97f3b85c4a70570047c59e11d082392e02af4358ad0953c2729322c0b27f65a404552b327822f68ef1f79f55fca8096e63c25b62cd51a126e5965e5347ae519ca8b0cf796feb609635c1438ad394d4851f52356c2da7ca6fc10da4515033b0", 0xa2, 0x8}, {&(0x7f0000000680)="636cef0620f8edc28ddaadad744879d303b3d7467fac72d71bc82a7f38", 0x1d, 0xffffffff7fffffff}], 0x3040010, &(0x7f0000000780)={[{@dioread_lock}, {@delalloc}, {@noacl}, {@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@grpquota}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}], [{@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '^#:,^'}}]}) execveat(r1, &(0x7f0000000880)='./file1\x00', &(0x7f0000000980)=[&(0x7f00000008c0)='vfat\x00', &(0x7f0000000900)='vfat\x00', &(0x7f0000000940)='$\x00'], &(0x7f0000000a40)=[&(0x7f00000009c0)='vfat\x00', &(0x7f0000000a00)='\x00'], 0x1000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 04:25:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r1, 0x9e46, 0x0) r2 = dup2(0xffffffffffffffff, r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000001680)=[{0x0}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xfffffffffffffff4}, {0x0}, {&(0x7f0000011600)}], 0x0, &(0x7f0000001580)={[{@block_validity}]}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000001500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x48040) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002e00)={0x0, 0x0, "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", "5efa0e1663eb14bdf18f7ef1609f50d8fba61bd82bb33af0b3a82d3d7f6101ede5571df637b9e0975a07f5900f88343a2cb8488d3187c8bd8896fdcda5d181647cff732f21c9df151639662ba1ed2077de934d3001b76def1c2216f3d7fd1d8fc4de90ba6372095f06bab68a6f5b86e4efac99d2c1f3d58a9f327d0875fa57792435f1b47652ac40594b62ee1feb3e0832e5cf409cac712cec4d8afd17ba40742d0ac52835ff9c5f140e8978a1d6e22822c11a183604d4acc38436175133d5485aee363be6ca22516a09883be648dc9c140690fc94d8248a402aa179a550005792de40e3f6508a808de9fbf952922737b8e224299efe0cb5f1447c7ee4a45e9be24a7f747c3c10ed2c9224268509917572ff2153566c00cad6e0507c32fbbd46a5ac19a17ab733fc3c138267a121504f5d11aedf1b80336340ff361e0801e5b497b83c132ef47e92aebc110c2328f285548b2c9c8056f51fd2e6b830ee23a9e5c9905cbf65f9c4a7332018428146a12f7e0ecb8afe67b108298998a1fcc49fed7a2ce25e3777304f7d2b282cdfa205c9eb45c244787655573ed618539671b45a168bd99ebe67ebdfae85c3f98bbf56e59a1b46a7241bf79344c518eabf197be47caf5490fd00c0fe2d9d0c2a4fbf63fafd50da8b8ab688ac97c3bd349b0e3a4e22bc21c72cf69d7ba54da3cd13e28b8ac1d89aa02f5361beac5f2379b00155caf945bf934effc8f94d0850bd5fcb820276c765d113726474a6555c1a9fc6fa42f28b49c430c11b0e3025badb0021022dc627e6ae786d3ce137dc5d4947ecdd4f193963a54a4e5591fec3ff65252fb457cca73249bab68e9e2db8307a519e55518063a290889513e7ae51d818d03ffca58ce46987729fea774f615e97a4833487869c050344deff0b101e19a72a30ffcca5c3b913e50035b9e57af8cdfd600682c95f75e40d588b6b91a402b941b7e992ed63bbda562c560701c5799bf7a94f1bc42bd6a91a2d7afe4efa4f884545fd6a9116811584d28a5f30aaa68124a6388730ee0550de36f7e2f8fab2dd20d9176d34f1fdbd739d2389c82f4bba875456b9948701cfa0cbb275cc35d7c44f922a778c135ef59723ab8c7e8320a1f03513dcf0ad034c9c36c3ce7d2f9143637b630e498387de9d554b5b38d29f5f2b0079950b070bdcfe03eecacb33d5afdb6f2395313e6201a4570447d57b42e30a83ca97a14b1caf85cba3ba3152dfb583e214c850a1b6f8fd8860eac7fecd0a148d86a152a586e43ea69c268ad2c9ffb8f5d39198357c218478413f0a463c22a90fe49784e2d7e8076392e376f6871bf6f0e65b0df6fbf63a02775e5249d4f1dcea9cb223492220d41ad48a281908fae299d8ce2a8fb6d411cb36a387e69c4b4de53278967375b98db421088a58d686232a7024ccf2327ec7338e35b9104d484ed4342ef80d90bc245f7cd10f8b28d77ade39f0d4da2e25eb985ef63be52096ddca77a727e0a45cf65722d82a8aad6f615430102dca398d0325e35b923b642c529dca85cb6a4ab4d53ad0f1a9dc9fb241b68b3a6da6a83a3060c29a2aeeac85b131391ddbf0d1b1006c5151502638a1ae8c86415e071d3022e93f4a0f8d6c7f7c7d2506539a66e6ba1897901081dace2c17bb4dc93854ff517b87d403e71b11eb9544eccafcdbc76fd90940030aac61515e67b13eb72b919f9602c09ca670d8ba4b4167beaf86838b4eea26af2a61a530d89029978dd194c0be9123ec86b1ac7e16205f6b2f92fab310d746c2a18dc67c4cb2d83c50865ab9c26e07838326d4e72aac398341d73fd6529f1fd9bcc98fff38672191b4e8e7e97b677e9788262080caf9fe1caa8448536596acf08b6d66dcdb3508bea9f6282e80b75283d00bd2169adb60fe331b17c3fa07dc55441885066a0bfe77c927be52f8c39920f4972706986f1fc26f764906e2d68ed002b2fc18dca9c5313ae669d5acf8cfd570c729d6c16976ef6153b966e6b7bd7aa1d1cffbdf8c6e8adb78033b0674d062afe105cfa5acc654d41553033f465208d897f7800f2b752a2dfd7f1e7421dfbc45edb6e51cf509fc5b67b05c435033127c5bf4bbcf14920975a8830ceb39b1257d347632b67ae2cf1e710f3a5de51cf5b58669a251a7b994e7501672f550e28dffc337d661e336ba13398ebe4ca6e4fe0a9e1cc5ce86ba307f3712424db1f169aeada67a9ceb8b6bb4d5bc01bd068f989f8309b95898238dd27f95148a091e938cd6ba4b0e54cc7b336384dd508941ab5a572ffd86bea85330b1e24a5230c1eda38c675a3a98030c07854c1dcfcad22449cc1105408944f9f09461e164d91174f19990c78f83d1a6d696dcc1f785225a83e0287d07d2974128ee57de4a414af8dfce246dc56457d9d48f4e3e0cf71eac016123bc5ae01a6dfd0f45b4c5da7041b45e4928ba2c0766fcdffeec70c57105f4e69b436b5e5310198b89999c8e60c17efbd771e0d6682c6f5c639ca37c4933ff4c618ded03441b231dc38bc232e80411c771ffe63e72b56faec0f07c3653ec396015953d1222eee5a5d824c00c438a6ee259680735456ab602c3602c73611bcb53de7f0ac583193c49967a93e0f216494b011fd9b8035320cc32a6ebd1cbbf20535306fde6901d028e1d464b580cc4d22e3e59aac042ea2b708735e9720a7eb7328ca0c15c2ab8f4ef6ec8844d615b4b694cdbfe3ea5ef7e38e8c77811c99ce157756cfc98427a9dfec55d784a08f36655f7c35868d0ca5d3fb252e626968e1164d48e78c4db200192e14601a51712432868bb2c79a289e34615288a53ab72f4b17725d2805e414c65b4aae4409ae2cd1ebd5dade24eb564d2f16f51590801924ef6b7fd4f6043a57398691173dff814051b063ab4581831772003d1153ac09c0847802b5c689fb2eecd34115cf298d9f046328b460e7d5696011c74f41ebfe6629d287d993eba133a0eaf99de98df50418694faec94a18a4c84f35fafd6a89cb3ee52c7924ceaa3373f28f6cd5eca835829b4e934a1a456904d69ed30561663eff40cdf64f0c1223db2d5e7dbdbb92b5dac288b4dc7df8db1f02bce14e600de5522a57422cb776f134c72d096a456739ca384c0c91376de21dc15e6baf6624a95537d8101bb017b408a0582a7133a1b79be0f277cd1e3a64db0b011d4ca60de552ea8447173921e45277a019bc89c0b847807a9a32634d72927ac2f079a1dc3f69bc430442476a3bcb13cb19c51e8cfb7bbbc1c552835d3f3b1a4612f1fe05a38c175e654215528762be5dd4256ef1fe53102ad32c2657fb1da3dfa8362e77f7534b290de572808df2f9daad4b59dbbbed47effe5c6ae1677d7b22be211972bb1cf74983e08b8be4dd7462548b3e76f0eb2d4903947bc996427bc5e4ab9972b99ee66c60b2387492fb40e7530bbc5f8bd58fb4124cfa7c4e59ede4848f6a70d0addb7ee0e660428232b830cc02a2f4cdf74fc5d7775ec44a1b938449c56c5a9c6a3a16b51e61504fb68286ef27ec89188effd3dc3ebe771027574778c25cb6da819806b5234c5d2151634fe723016ca2b312de7e960f1cb060ca08ccb38aaf380f1759feb1ec4339c869ff638fa0173bab9f42d000e81b6560e9762482a634ca4463481f7762ac7b53ab34979426309c3f3eeef89de059c3d9fb53989b44aa0970a03820b740ecb335bbf7e95652f053cd3e194de93bcfbfa4f81f7b3d648ecb275d2cd5f296c22aee1e8250adb269d46b80929f057392fdf51a95b60094ff0b78edd31f9d9faaa6699391950e2938872cb79acd588791d4b4c290294f0a12796e6d5947fdfe3e1d29438bce12847e9939ed7a383aff150ad178b32e369c7e23a323b8faa62192384cab006a267da1ed27a8cd50cf53da651645558c409e2b88594ce622e850d2423d75d4f534651281ad0a4ce3331c276c340e448e4730e6becd1a54fb361cf051879dd373122ab469605b13eb361fce510b26d59ed9b4596c6373bf5e90289c1405b903f768246dc0bb36db152db1d7878664b8814d921b8386b375f631bfc4ac4b8a0510125c0cf189eb3a7a93f4b38f2e08bc619b32826a0010325b8553778ac36001d499ba6ffa86f9228f694fd60d352421844eb365e5ebc9f5e4a467faf5bc42febb24f283421b93b10f35e58ac85a394bd7b376209bc245c5804fe91594ce9f7fdb732ab60fc14e5bb5b2df55ab984c01bcd7953f9b8083715ac3b6e3f28f33dd4e6cbd8d5950fc274d666fb7d4b4028fbc03a93730c394198f9933e6d5a5fda861489019f1080d6f331d549f3c30220a646fb535b06d1bfb334375ae6a2464da57314c0eedfe92f1dc59fa571bf50bd798df7cc71e937700225c965f84e38215fd8b52ccd85c475ffe1d0748c37b5d31d6441efeef58b1fc0e518ae328eac64beb82aa34ce9655321c055e7035764446c89ab1941c08d3e9ec56d73e8be92d7c3c11a27e2df952e04343a0b8d8644994848ace84a45dcf0899e205cb29a879cbb5aa8f5f9514dab283d50e2bd4f11feb8a0fdf0c03f253c468402298c0745212922aa3c9fdc9eb93aecc0f98ba9cee0aad4001e5ed6cee144e4c750a33ba1aacaf6f4169ab2c231276ce56b4d90d14f9ddd36bb90637341bb4ed1116217845a78de53c3053e86e6172172b08aba83616f76b5b19885e51555d215b61c88fbbe01ce8de4e6fadd754263258807fd2e79300e3af7fb201b78d980dec2293b705760e167159eec760d7cf8636fb75da391e568bb6db2625426a384eff4976495042763b66a0abf9a5953f2a88f717272f44932c695901e8fb506828f5aff7d349b768e34f2b04672ccf100c253839b2becc45e06b0ed1a1a8b1706befc4ce816830fcb8e89f3feb38d4365bb98d418e60fb0957c612d6589ac0e443a9aa676ef6200dd60cd085ef2cce586d03a1c6c930c3bdd4bd1dda0e0c472902338a6c1a9eb29467affc6cd68f7d8d8e12724f67dbaefb62c52755651217b6eec95c712bfbc02ec066bdd4a9f83341aa67d9706ab41d5af405d7f299adeea15b2ccfd73b18119a12216adac6aa07083c86f6fa148168c7b22879cef31f3217ed165b0fb3a0260fbe70f8c0ae28f4f407c5c0d6a636b179a74db22d82e0e061037d0ca173729a56e6a5a7e3338485879cde2b89a853b4a22b61171db7f4d8e8b4c8e32b7c018675ef2b575794dac7aa527011a503bae296d5aa6dbe7b675f1ba66baa1bcbc8bc47a8bd436b190196ce87b4b3401bc34e851bb7d7e7f1e73735b13ed26807da5c8db39c94a93b8aa6c642b3ef10abb5cebacf7a28d969c919253fab9f9ae4357cd55042eb072cfe4f8ac9cb1beea5bf233d62fc545a3bdf295f83594c1ab93391597ab25a4c2027a5ecb50a9e4d811775dffdcc6aa0386e6083744"}) pread64(r2, &(0x7f0000000080)=""/35, 0x23, 0x3f) open$dir(&(0x7f0000000040)='./file0\x00', 0x2002, 0x30) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) [ 1799.114316] FAULT_INJECTION: forcing a failure. [ 1799.114316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.116781] CPU: 1 PID: 11800 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1799.118241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1799.119934] Call Trace: [ 1799.120490] dump_stack+0x107/0x167 [ 1799.121267] should_fail.cold+0x5/0xa [ 1799.122088] _copy_from_user+0x2e/0x1b0 [ 1799.122942] input_event_from_user+0x1dd/0x290 [ 1799.123902] ? input_devices_seq_show+0xfe0/0xfe0 [ 1799.124928] evdev_write+0x257/0x420 [ 1799.125717] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1799.126802] ? security_file_permission+0x24e/0x570 [ 1799.127848] do_iter_write+0x482/0x670 [ 1799.128657] ? import_iovec+0x83/0xb0 [ 1799.129470] vfs_writev+0x1ae/0x5e0 [ 1799.130222] ? vfs_iter_write+0xa0/0xa0 [ 1799.131041] ? __fget_files+0x26d/0x480 [ 1799.131862] ? lock_downgrade+0x6d0/0x6d0 [ 1799.132714] ? find_held_lock+0x2c/0x110 [ 1799.133580] ? __fget_files+0x296/0x480 [ 1799.134426] ? __fget_light+0xea/0x290 [ 1799.135237] do_writev+0x283/0x300 [ 1799.135977] ? vfs_writev+0x5e0/0x5e0 [ 1799.136768] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1799.137786] do_syscall_64+0x33/0x40 [ 1799.138554] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1799.139612] RIP: 0033:0x7f701ebafb19 [ 1799.140380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1799.144187] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1799.145769] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1799.147224] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1799.148686] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1799.150158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1799.151616] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1799.602372] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 04:25:36 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 15) 04:25:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x0, 0x3f}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x4b52, &(0x7f0000000040)) 04:25:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x901, 0x180) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, 0x0, 0x37) pwrite64(r3, 0x0, 0x0, 0x0) openat(r1, &(0x7f0000000140)='./file1\x00', 0x20000, 0x20) fallocate(r2, 0x0, 0x0, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 04:25:36 executing program 3: r0 = syz_io_uring_setup(0x5a07, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x31a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100011, r0, 0x8000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r2}}, 0xfffffffc) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) 04:25:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x26142, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f00000010c0)={@dev}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x1b, &(0x7f00000010c0)={@dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@loopback, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x100046, r5}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001, 0xd305, 0x3b02, 0x400, 0x9, 0x200000, r5}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) r6 = fsmount(r1, 0x0, 0xe) r7 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = gettid() kcmp(r8, r7, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xff, 0x6, 0x53, 0x3f, 0x0, 0x0, 0x40000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x1}, 0x100, 0xffff, 0xf8, 0x3, 0x100000001, 0x8001, 0xe15b, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007900000079b6b53ae8d53313eda5548c462cf677b30aee7a4b1dabfe1b084a201c4518c1937f7110c53b762df3d7190066ac3ee5d0f85e6a0a56f84fc089a2c5cb3a780a74c40ad11698d14032fac307872885a59b8353e0e4bd0fbd50785955a9a32d7ec44bcd315f463ce3870e3cfaf52dfedafca778731973a5f5db4e57828ab20c9ad42014db5c41d8a5a2b773ad6f8279850200745306544f72089c9f0801f414c4a5a2f18443d86429ccf45e5cb6634037526199b79b9abc19aa5758c231"], &(0x7f00000000c0)=0x9d) 04:25:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 04:25:36 executing program 1: r0 = syz_io_uring_complete(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), 0xffffffffffffffff) syz_io_uring_setup(0x1030d1, &(0x7f0000000b40)={0x0, 0x4, 0x1, 0x0, 0xe8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) 04:25:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x3cf0e07f9d700b0e, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000240)='./file0/file0\x00', 0x4, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="4fc2831b06ccaf6482d39ecba94748af551d5b2aff1f1952256e0f32dd6001ec9b1df7bc39036bc2bcad7ff2490065ecb40d5d0425391ed0c26f17c50bafac889ce5b4e9ab98224dd5758f5a83b6", 0x4e, 0x40}], 0x145000, &(0x7f0000000340)={[{@data_err_ignore}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, ':'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) openat(r6, &(0x7f0000000200)='./file1\x00', 0x84900, 0x40) sendfile(r5, r3, 0x0, 0x7ffffff9) fallocate(r2, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 1814.559226] FAULT_INJECTION: forcing a failure. [ 1814.559226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1814.562401] CPU: 1 PID: 11834 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1814.564210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1814.566409] Call Trace: [ 1814.567072] dump_stack+0x107/0x167 [ 1814.567965] should_fail.cold+0x5/0xa [ 1814.568902] _copy_from_user+0x2e/0x1b0 [ 1814.569904] input_event_from_user+0x1dd/0x290 [ 1814.571017] ? input_devices_seq_show+0xfe0/0xfe0 [ 1814.572211] evdev_write+0x257/0x420 [ 1814.573128] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1814.574420] ? security_file_permission+0x24e/0x570 [ 1814.575650] do_iter_write+0x482/0x670 [ 1814.576608] ? import_iovec+0x83/0xb0 [ 1814.577542] vfs_writev+0x1ae/0x5e0 [ 1814.578438] ? vfs_iter_write+0xa0/0xa0 [ 1814.579396] ? __fget_files+0x26d/0x480 [ 1814.580367] ? lock_downgrade+0x6d0/0x6d0 [ 1814.581367] ? find_held_lock+0x2c/0x110 [ 1814.582372] ? __fget_files+0x296/0x480 [ 1814.583200] ? __fget_light+0xea/0x290 [ 1814.584006] do_writev+0x283/0x300 [ 1814.584735] ? vfs_writev+0x5e0/0x5e0 [ 1814.585524] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1814.586525] do_syscall_64+0x33/0x40 [ 1814.587288] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1814.588333] RIP: 0033:0x7f701ebafb19 [ 1814.589094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1814.593290] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1814.594862] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1814.596319] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1814.597790] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1814.599244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1814.600703] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:25:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 04:25:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x29, 0x1f, 0x8, 0x3f, 0x77, @local, @loopback, 0x40, 0x1, 0x936, 0x81}}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000043000101000000000000000000000000140001000000000000000000000001"], 0x28}}, 0x0) 04:25:36 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x7e6a673258e52cc5, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{}, {}, 0x0, 0x20005}) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x92, 0x9, 0x20, 0x80, 0x100, 0x2, 0x3e, 0xffffffff, 0x342, 0x40, 0xd8, 0xff, 0x942f, 0x38, 0x2, 0x7, 0x6, 0x45}, [{0x3, 0x1c, 0x7, 0xb9c9, 0x3, 0x2, 0x7fffffff, 0xc92b}, {0x1, 0x0, 0x3, 0xff, 0xffffffffffffffd3, 0x6, 0x100}], "aca4fd1feac29410c467da159e44ca4495dea0dcacb820b24b37d98cd7281cec1bbb6dfb3010657bdcf3445bcd3bbb3a8f3dee2cdbadaf5ae272290bf1e62adb", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7f0) 04:25:36 executing program 3: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x40}, 0xb) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 04:25:36 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 16) 04:25:36 executing program 0: openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x214100, 0x0) 04:25:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x6}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) r4 = openat$cgroup_pressure(r1, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 04:25:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) [ 1815.316339] FAULT_INJECTION: forcing a failure. [ 1815.316339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1815.319038] CPU: 1 PID: 11867 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1815.320558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1815.322407] Call Trace: [ 1815.322963] dump_stack+0x107/0x167 [ 1815.323785] should_fail.cold+0x5/0xa [ 1815.324710] _copy_from_user+0x2e/0x1b0 [ 1815.325525] input_event_from_user+0x1dd/0x290 [ 1815.326550] ? input_devices_seq_show+0xfe0/0xfe0 [ 1815.327617] evdev_write+0x257/0x420 [ 1815.328458] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1815.329569] ? security_file_permission+0x24e/0x570 [ 1815.330682] do_iter_write+0x482/0x670 [ 1815.331560] ? import_iovec+0x83/0xb0 [ 1815.332435] vfs_writev+0x1ae/0x5e0 [ 1815.333260] ? vfs_iter_write+0xa0/0xa0 [ 1815.334221] ? __fget_files+0x26d/0x480 [ 1815.335240] ? lock_downgrade+0x6d0/0x6d0 [ 1815.336258] ? find_held_lock+0x2c/0x110 [ 1815.337268] ? __fget_files+0x296/0x480 [ 1815.338235] ? __fget_light+0xea/0x290 [ 1815.339196] do_writev+0x283/0x300 [ 1815.340085] ? vfs_writev+0x5e0/0x5e0 [ 1815.340969] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1815.342152] do_syscall_64+0x33/0x40 [ 1815.343076] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1815.344298] RIP: 0033:0x7f701ebafb19 [ 1815.345205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1815.349656] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1815.351560] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1815.353248] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1815.355029] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1815.356719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1815.358430] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1829.401042] kmemleak: 9 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:26:01 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) capget(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000140)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) r3 = fcntl$getown(r0, 0x9) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0xb633cc5266828251, 0x80, 0x80, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0xc}, 0x8032, 0x1, 0x5, 0x6, 0x7ff, 0x6, 0x7, 0x0, 0x4}, r1, 0x0, r2, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close(r4) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 04:26:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x2, '\x00', @auto="eb1b48835d983b616264c81212154e9a"}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 04:26:01 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x9da9, 0x19, 0x0, 0x800}, {0x7ff, 0x1, 0x24, 0x10001}, {0x2, 0x5, 0x5, 0xffff}, {0x4, 0x1, 0x4, 0x4}, {0x100, 0x4, 0x4, 0x3}, {0x1, 0x40, 0x3, 0xc7}]}, 0x10) pread64(r0, &(0x7f0000000100)=""/193, 0xc1, 0x8) 04:26:01 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 17) 04:26:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='syz1\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000280)={0x14}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) 04:26:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) 04:26:01 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000380)='system_u:object_r:gpg_agent_exec_t:s0\x00', 0x26) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200, 0xc1, 0x19}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="013604c2cca264eb910103000000a3c48154460a1043bb1d31a12a3a5692718a8a3ad2b41aebb76c059e5524d1dcca80f44cf3bdb3b29486a7e0839087b31d7d8a0ca96d0cd75610a2350c2bd94d6be0285dfbec11e8d3a6b16ffd90cdfc6c131327779f2f0d54b971475a5255e209b14137ce10da8f83db893abd625a6e443b241749a0c23c3d3f24f8ead52966afef9a2b1e4f4195322707ecd465f63da33760f5de7dfeff2f28c19f48d16952c00d81069920bd05d3eb8c8d54fee7075407e2e059de6b1803b3dfd3fb3d861076d0ba256d"], 0x7) 04:26:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000000c0)=0x28) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200, 0x94) syz_emit_ethernet(0x126, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) [ 1839.440971] audit: type=1326 audit(1668831961.100:68): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11882 comm="syz-executor.6" exe="/syz-executor.6" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4ba530b19 code=0x0 [ 1839.450782] FAULT_INJECTION: forcing a failure. [ 1839.450782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1839.453474] CPU: 1 PID: 11894 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1839.454969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.456756] Call Trace: [ 1839.457366] dump_stack+0x107/0x167 [ 1839.458245] should_fail.cold+0x5/0xa [ 1839.459093] _copy_from_user+0x2e/0x1b0 [ 1839.459977] input_event_from_user+0x1dd/0x290 [ 1839.460962] ? input_devices_seq_show+0xfe0/0xfe0 [ 1839.462017] evdev_write+0x257/0x420 [ 1839.462831] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1839.463959] ? security_file_permission+0x24e/0x570 [ 1839.465050] do_iter_write+0x482/0x670 [ 1839.465896] ? import_iovec+0x83/0xb0 [ 1839.466748] vfs_writev+0x1ae/0x5e0 [ 1839.467535] ? vfs_iter_write+0xa0/0xa0 [ 1839.468389] ? __fget_files+0x26d/0x480 [ 1839.469253] ? lock_downgrade+0x6d0/0x6d0 [ 1839.470155] ? find_held_lock+0x2c/0x110 [ 1839.471040] ? __fget_files+0x296/0x480 [ 1839.471920] ? __fget_light+0xea/0x290 [ 1839.472785] do_writev+0x283/0x300 [ 1839.473555] ? vfs_writev+0x5e0/0x5e0 [ 1839.474407] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1839.475454] do_syscall_64+0x33/0x40 [ 1839.476253] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1839.477353] RIP: 0033:0x7f701ebafb19 [ 1839.478157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.482046] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1839.483750] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1839.485271] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1839.486797] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.488316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.489832] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:26:01 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 18) 04:26:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) 04:26:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$SG_SET_TIMEOUT(r0, 0x31e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000080)={0x0, 0xfffffffffffffffd, 0x1000, 0xe2, @buffer={0x0, 0xe0, &(0x7f0000000540)=""/224}, &(0x7f0000000640)="dfc82e33890a471cb9263f3d0561f2df5e8ce0cb814340482bbd9dc790c74c95ecdb01d0ee033615c7d7b037311b5889b76b978a92b069b0ea513d9e68df58c300c410acd464e78578b6a5f832eaa9f70ac44b936b02bfb4f3cfe9e388aca8447a5dc7bcefa6a03e960fed271d1f62b5ebc5274d16bf72ac3b5b59f88891093bcdd39a250db43d6c648f3e2bd22cda3f5686cf19a6dd89f0a6ea6fbc1194e0644a4011a20808388198d89f2c5bd44768a7792de72752493401a0f5a7f13d449af29131b3a06a94db519e619d798fcf34ce837e90088477f233df43fafb9a7042c78ee77d9fb54ee4a845a21ee8b2897c39f1d957094489bf95a17fb5cd7f07b31a677339a160d9aca6b50c4b3649476a166cec0dbb0271f3cb0444fb993aba724f6252079bbdb2aa4d879f7b90604da9b454cca7743f8265c0724eab9487b1dae361ae3f955b7ac9436f521e41cd6a25b131839ddf5ac51109439635cd1075088b59d8e50d9bf930d3f9b8f17076c0042183e6f787ed48da05cb07331a7b8623c3dc0f0aa63d961be8d58605bb21c82bbad7d7d0f0337bcdac13b2f57aa24556605a667b7e415811184b185d50ecca87876c43d88bced37cdeb00e417f08b20cf82f6abe84d7d6f56dcf959d42ff0627f6632312004005675c0b2c8af88d2bc70a0ca0813be5cde9e5d2934266a12550dca7df837ff5a60cf7088f1977acf084ca5d81f7c7312c3f3049de4fc151d4eb1bed8ceaf70a3f7f98d1a7596f45ae5aba3db2ed9c3475d503bcfdd95e948d5614e671e25e4004381ef2e2795a112018ac5e21c1b341c432227233c152b9c843ab8dfe50c4d1eddd7d79cc32a22ea949eddf640ca727767f3748819b97bfefd3946c2559284de324ee71c049b8bd0baddf2253d4fabe030fb1b502394f72053e8f5b66a1bb10ee806d2574eee514e5c8f0cb84ab35d7b9f484520ce5e024994f1aabedd17d3df54be1022fa109f93045e54f29337f2b0d6a8cccd72c61e2bd9ed2207c817ef6841251c7c71d2e4b3ad4fa918931c63eac69f69a36feb6d2cd824ed925475fc5d674d3558fa4d646057090ed4ae88bb7763fe49634ebedbf1498fdf845a94a10662de025f1d08d05ecc67d4da12c558be6911ef96e21e83f797cde39cdba721427a9b546b7f874ced654e5fc631097ac24ac7ec010ca2ce38d590a86b52a053d005ad3a12700415a6de3aa1fc69fb19d7d949289c4027ce998bfb6d9ed200f191a41837c431bd651323f36e773c017dbf730ab8dec51aa0666bf01abc9c8137d24c382006196c0014ce89f3e9bfcfc36d931efc044b5bc4f3996f974686305fae8c2381a87d9f5552c24a9f290fa6d776dc9459af39f17c9fd52c9cb46b120c705123593fff2a8e806817ae12a23bf14126ce7d7cc833ff677f5abd1617965420c597da890b1a1fb292ddcb454a388b7d7efc0ecb2df91a1ce8dddd3c6d5b65f3454eff2d8b4f4a0cb0dc768b6c9812105d3fc76c233d0942de329a15fa26c5bf2429c4a8366af140684887fba09a03ffe0c7b48891d9a991eb2fcc47fe2053eb81cb40eda88771c6858b78c7e7d5c317c31a4b2f1e852154588d0370abeaaf11d15653ae334472a4453fd68c78a5584ef1dfe8155a1af64a74725a7c9d2011b1316228d074662cb1f131e236c7d09d8af4635b5c2b3508844f8769e8f5fcdea1457aabcf2e6e4669926765e81108a7b79200bbab61e99e528c191ce4cb847509b5b3a05e4ab5d2276dc741da0416f24d7b7c838cd4f64ad2696dde183e633ad957f915cc6b19725be67c0307d96501e3790ab898d70d53a4b44d8ca86d2e17d03b8f1ef8dbcd8c2e7b3dd06074500c3c9c020c71e3996b23e9e2d44ea34c00533569ac494f17f0a682874b3d225e019c4e8ddd34839397d96555eadc61ace76b3d2620aed5f64a00aaf9f46ad0b9a7c7d9db2e8f9c7478bb46651fd36c98dc25f5d5695837eee3edbc2d67264604990833b0ed35ccb73c1a6238ccb23399e7c2ea463b67ac97085b88d4389b7617f26c791d73358332af0252999d44e72ba0a3383e75db6030dbd6cef173d3d41fd4b7ea6e16fbe6fd07d254f00637e902aa5bdfd9c4ed68d6fcb245fa9058f64943f8047e926568eb2c3e278883ee5b4be93e859b829cf8d50b196c6d479de7f1c0ddf853fd6118301d1bbb8db2994829139e170aa336383c6025ff53668c5f34a4f464953e48fa585d514b17f24b8280c06d6ff5320b9c6219d34b97f5767a949d2711b2e6747d4e7f6ff14f9d52c3768ec7242916d84ea3562aa7309b3514fd2a56574be15ea7f01322de783661c636bced06d8f8b9cee6713987ccf07c6b7ea93965cd319c953131b2105633514d1bb3cd31f8591390cdf7a462fa247d4c3799c89a9edecd314638f38b552c36bbd9f38427b9fb1bbcf4f9349dcb51751aaa4373bd836d845081852463c2721fbe8331a61e3e1c4a3069914d023b8c7eed31519c2bc7ef1f085f11712490672d7917fa756a3d5f06db95ad1d7009bf5bbee8d6eda1d0f7add1f1695aa0c6463d9ab6930648a4132bcf6e99af732175c3a1ffe0b59ec2a6152fc68efc4f0c483210c43e5ab804e3790edc7fcb289ce2065274ce3be9f3820701e744833119a023e9a56de520377f518dff9a65dc044776c7d569f7d1ecb1fde5a2481a6823e908633cdd65e56644cd1c241e9e60aee8aab1d27348ef135aec533a0a5b1c5c0b93c87bd1dea3120680a485e7b4495b9365bf5ea8024b0f2cecb728976cfa4dd6961a3392d6eebb4da4c38b46d3ed8fcffcf063a1cd5f5649979035b04f99adaece1de6d0394926db9573446f4151dae8b814479b6566fb73d9017c840375ceedb018c5043be2572f8ba610baaa456d2bed357b747392dd72e2398aa7ffb70d4ea6775f8c1f1c17bc67deadd8285c149a2a5d7f7e7d746f9ffa18c730feaf89696ed64c4bc09f53b00eec2c78c4e6df653e8b54cc42d94a7a5c642b1a9743ac7b3d423bb343d77c807aec1d00a0f088b79825aa8366391da89781ab0b55f39ead8fafeb6370f28522fa2a45d8476ddeb0384d082141fb13bf4f25798569a662ea6b2b823fd34e212ef75e7d0d45f301d2862855a2f381999683cf23e5e8f3e6be56ec3e15dc2b61e77b801d533ead9582fb834499fa12d019e5a4e6be255c23e18633ad50b8a64810087e116f481c8a2a0a3cb72046068ab370d6a5068fa7952c35c3d804cd5db01f14a70910f70daa3c39e7b29d9edab12460d1ef04460f6193e7c728ffac3d9df93fd732bf45cb18825950bac3499289ac1ce963d24bfade3458bd8f258cbb90a9d063ba14432a2c08469037e867887e62c86e0dadad554e0cde4685da2680284145f201488a9102f83a1629295524cf1a626c5577a16746c6425eb8b0dc0a4c4967f61b5a8e7769524f8f80a0f243a89a52b0b9321753a610d10c8b52e946de9cbe1b9534adf688693ceff9ce29c6c03820de93003e6f9335bc3b964ac32af0eb24835999c1ed4b5d862c5635f7c8ed6fcd1dd827bb6296ade62850aa7f5057ad2619b3852ec444cea358a6e64fcbf1346332887c7ba4282df2860e85c3681d0b67f6be594fdb3b0aeb847bda5fdc8aacc64d3e761b44d430567d8a897c4a2865f7ec18b2f1c5cf6e844b68f64ef277359965978248f369d6904020f41c607e2f1f5158a52416e386589048e48c883f69bb4ce7bd9a0217ec111ba473caceb80a18d928a7e30a713b4249caf96d03f30a8ac09a010f87dfa97f89a238357cd136f900448dc3b6017113b1cd36253baa46523f3709fa07e0c8388bcb513045f3b7867f297e28e6b8e49c35c8ce3c23c13af0e9263c884a71c5bb78933d95a6574b243def3400b7172b5b66befc73e0c3986ccf9eaf8d508adafd618fd7387cebd79a02e61f959a22ceeaee599295931fa6c2af9f2d2b81beaffa25988a3460fae882d03fce6f8d86ae46483902175cfea0da9beca75d268981e719aa57f5c1b3f62cd3906d13a0c7dfb39b0774ac5c540e0ade9a3e1f15a74592219c119c97128fb3aac4df9ed31d74134760770aa723eef5c467d85cc943195a20a516324c974410b46ddecb344e51c3d3a9334e8be318dbf7dd6ea7549e68f26b4967370afd22e1bd7fefcc181a38fa3a5cfbcacf18fe105cd2907891fa5a2e92e749f1b5e58aaa1c437a3426102768606432e9bea8bc15841cc6c366e3973b120fef5e5475072d0231a0cd9b42abebd491f86264b0c9b779b580ab477d697a14278b06c03a3b8e781a2d26e6b2da5a8e12821ad1173e8843450d733baaf3cb664142e9742fcdb257e43d13b3fafb9fe3e3c25104991bc715e07e2e02c332d9ec930c2d184813242425ae8498841fbe3d5f9210e3217113f50b5bdfaa4eae08144586d503f98a17ce53b90253d45aae3917dbed9ddb75b23c274083b6f10ffa21dd33df17b29be5b42da7b387c42e9dd5fb04f2cce96d814f2a79139f64a4cf5e5d258d66e1eaf4e4aacf2476b322a46b619869ae308698893fc8d335feba792b3e795c38ee384f78f206a75c2842fa777763c2212f90d791c9ed8c4c0231430cd43ef191b8b1853e3c0fc144a225e0f60b7ce3416effd7c7033138ad34c2359e0cd765439ba9c9fbf78946acc8812b475a4cc6b1169c6ab582042507befb5625ef42c80e989dbdb1b16df43c20372984347d66aabf10a6d8946c878579a67423218968b84fbd59a659e125453e2ea998d916ecf0a0a4d2c2d3a30f1f6371714e04880f0ccabb840a1490e5f279299c51a6db19e4aacc39a6eb8f4ac0f3de7036c35c4cd8765e55f1fa86de0a6547582323f490ddc88d27c25b7ade4d19bb48382df0d6a6b3164121bc4e29eb7f284fc6d2f971d174fcb99f22c9d4dbbc5544407d0e2f7c3de4315d58deabe0aa0201e9a239108017d3fcb7515edfea658273af9db9a06975304545709511caadd604ec3022bae4aa84b9629ce3646fbd94912a6d4277e07450ad57a6df5942e63efc9289c7967e31bbf6ac8c702b3106e72402915c02ac3bc0a8be3fc63a453f275bca58c90170caae21ca8884d4e7c35b49397382d1dbb1ec22e88961f7da21657b061b83ee2971f7371f26f528a2beb842c113efd7273c2f2cece00a99c1e9ce0f93c02f69164b42fed90797dc80f6349fdda4905f49b25d241de40f4335bc93b263f91450e5f44d7436602899913d3f23eb3f510cd8e0fcb15d70e013525cd7e897da3ee3f827d71b4c7d8bf87889773c854db7fd7b6b9ccb1d58351db9266a8e6c2c5a9c0af1f02058addc95acf0a433df2d7150c31bfd881a6f14d6941903586eb4807699c6f68f6fbe9434867f6d245201bd99accfaf795421c16a278251f002b2d6e0b8670cd9ed107a05580d6f5a2b0be60074a68124f8b333dc4384016eab76638d323d135272abbc123c7682243ff94a5aba325fec6dda59d9770da45154a666d430db89a32619b21f3c9c66f387ed70c789c33bf33e986da1e133d9ffad1dda90edb3a6e4aef1151258bd4fe3eee6882df1b3f904b036fbc3fcc82fc8c45b0b3b0e5a6935b87a6b84ccec20b6d3ed61cc90a35de3ce17957dc7bfe6c80cf21c51ad7dc3bf85007fff86d3de15fd1fd94baeb3bbd13fdd538e61a225d8e360679ca8379543a6aca2f61187969151b87933125947e22aef7bd6faf458d757d3be5f195043cfd3953d51f04f513b866f8b2739a008183bade87fa3bebf23f75b839f1ea9794eac2e069d267cd6a27d00e2532eaca86a22cbcc6abf5", &(0x7f0000001640)=""/143, 0x0, 0x4, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x44, 0x0, 0x2, 0x0, 0x3, 0x3e, 0x8db1, 0xe0, 0x40, 0xee, 0x3f, 0xae, 0x38, 0x2, 0x101, 0x2, 0x1000}, [{0x60000000, 0x9a6, 0x1, 0x59e, 0xffff, 0x0, 0x3}, {0x7, 0x7fffffff, 0x2, 0x6, 0x1, 0x0, 0x7}], "0b7adf3af47848f138ec1b0d8677dd3d4cf51a449ad567adab7b92aa3660a043c9c2dbf43bfa914772ff602da416d0adb0ccb80cad5adfe5e1558a556708c8bf1d1efaff9771dcd9115d525cc0f15bc5c369ba15caec3d82000f15a23c846ef2e58ce5b634ddf0a5f9469a1413a39904c84c6fc900d92cf3782ad9096e07148ee04e7c31c357cd91", ['\x00', '\x00']}, 0x338) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) 04:26:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) lseek(r0, 0x800, 0x0) pwrite64(r1, &(0x7f00000001c0)="b3", 0x1, 0x8000) sendfile(r1, r0, 0x0, 0xffffffff000) r2 = accept(r0, &(0x7f0000000080)=@phonet, &(0x7f0000000100)=0x80) ioctl$int_in(r2, 0x0, &(0x7f0000000140)=0x3) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x181881, 0x18) 04:26:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f00000000c0)=[{&(0x7f0000010000)="200000000400000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000590300000004", 0x9, 0x800}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="cc460d1c48b8622c6dbc55f293aac03d63f9c13bb008d70c3e68413f2a6425ecb3"]) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setfsuid(r1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private1, @in6=@local}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) r3 = getuid() setresuid(r3, r1, r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@subsystem='cpu'}, {@subsystem='net_cls'}], [{@smackfsroot={'smackfsroot', 0x3d, ')'}}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@uid_eq={'uid', 0x3d, r0}}, {@euid_lt={'euid<', r2}}, {@euid_lt={'euid<', r4}}]}) 04:26:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, 0x0, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x26, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='syz1\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000280)={0x14}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) [ 1839.797254] FAULT_INJECTION: forcing a failure. [ 1839.797254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1839.799797] CPU: 1 PID: 11912 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1839.801225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.802927] Call Trace: [ 1839.803477] dump_stack+0x107/0x167 [ 1839.804236] should_fail.cold+0x5/0xa [ 1839.805029] _copy_from_user+0x2e/0x1b0 [ 1839.805858] input_event_from_user+0x1dd/0x290 [ 1839.806816] ? input_devices_seq_show+0xfe0/0xfe0 [ 1839.807826] evdev_write+0x257/0x420 [ 1839.808598] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1839.809671] ? security_file_permission+0x24e/0x570 [ 1839.810714] do_iter_write+0x482/0x670 [ 1839.811521] ? import_iovec+0x83/0xb0 [ 1839.812308] vfs_writev+0x1ae/0x5e0 [ 1839.813060] ? vfs_iter_write+0xa0/0xa0 [ 1839.813868] ? __fget_files+0x26d/0x480 [ 1839.814692] ? lock_downgrade+0x6d0/0x6d0 [ 1839.815534] ? find_held_lock+0x2c/0x110 [ 1839.816384] ? __fget_files+0x296/0x480 [ 1839.817228] ? __fget_light+0xea/0x290 [ 1839.818090] do_writev+0x283/0x300 [ 1839.818813] ? vfs_writev+0x5e0/0x5e0 [ 1839.819593] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1839.820580] do_syscall_64+0x33/0x40 [ 1839.821349] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1839.822397] RIP: 0033:0x7f701ebafb19 [ 1839.823162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.826893] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1839.828435] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1839.829879] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1839.831330] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.832777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.834244] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:26:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) 04:26:01 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 19) 04:26:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0xa, &(0x7f0000000080)=[{0x7, 0x3}, {0x595, 0x6}, {0x7, 0x7f}, {0x5, 0x80}, {0x3, 0xd6}, {0x100, 0x9}, {0x7, 0x7}, {0x7fc, 0x1}, {0x6, 0x6}, {0x401, 0x8}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$TIOCSBRK(r0, 0x5427) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x5, 0x85a9}) openat(r2, &(0x7f0000000100)='./file1\x00', 0x400000, 0xe7) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000940)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000a40)=0xe8) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf25130000005400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000300020000000800030000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1c00018008000108", @ANYRES32=0x0, @ANYBLOB="080003000300000008000300000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="4c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002007663616e300000000000000000000000080003000200000014000200776730000000000000000000000000003400018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f687372000000005c00018008000300000000001400020065727370616e300000000000000000001400020076657468305f766972745f77696669000800030003000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="08000300020000000800030000000000"], 0x16c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000800) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) dup2(r2, r4) unshare(0x48020200) 04:26:01 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000380), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {0x0, r3}, 0x0, 0x6}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1840.117154] FAULT_INJECTION: forcing a failure. [ 1840.117154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1840.119760] CPU: 1 PID: 11929 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1840.121192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1840.122913] Call Trace: [ 1840.123458] dump_stack+0x107/0x167 [ 1840.124211] should_fail.cold+0x5/0xa [ 1840.125006] _copy_from_user+0x2e/0x1b0 [ 1840.125831] input_event_from_user+0x1dd/0x290 [ 1840.126781] ? input_devices_seq_show+0xfe0/0xfe0 [ 1840.127781] evdev_write+0x257/0x420 [ 1840.128557] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1840.129633] ? security_file_permission+0x24e/0x570 [ 1840.130683] do_iter_write+0x482/0x670 [ 1840.131489] ? import_iovec+0x83/0xb0 [ 1840.132274] vfs_writev+0x1ae/0x5e0 [ 1840.133027] ? vfs_iter_write+0xa0/0xa0 [ 1840.133845] ? __fget_files+0x26d/0x480 [ 1840.134687] ? lock_downgrade+0x6d0/0x6d0 [ 1840.135537] ? find_held_lock+0x2c/0x110 [ 1840.136386] ? __fget_files+0x296/0x480 [ 1840.137224] ? __fget_light+0xea/0x290 [ 1840.138046] do_writev+0x283/0x300 [ 1840.138786] ? vfs_writev+0x5e0/0x5e0 [ 1840.139582] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1840.140583] do_syscall_64+0x33/0x40 [ 1840.141354] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1840.142427] RIP: 0033:0x7f701ebafb19 [ 1840.143197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1840.146976] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1840.148596] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1840.150093] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1840.151582] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1840.153100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1840.154574] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1840.270719] audit: type=1326 audit(1668831961.929:69): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11882 comm="syz-executor.6" exe="/syz-executor.6" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4ba530b19 code=0x0 [ 1853.774343] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:26:23 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008820}, 0x6020001) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="201900d07642da921fd61d12430c6c6b8c0ac5c96e48065e24ecf3bb8ce311", 0x1f, 0x4e3}, {0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1c4, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "ded71f65128675a4a2c6015dffec55bd7bc56425c4273bb7bf"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "774fcdc8422649fe6244f3d44e4a234de303d6f776c3f28f6eb82547f587"}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "a3b50af7b058d2ab450377286110bb84b7cb15887d1ed4b398092af1998b7ee1"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x58}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x300}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc09}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x300408c1}, 0x11) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xa, 0x36d3, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4054) pread64(r1, &(0x7f00000001c0)=""/165, 0xa5, 0x8001) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x44400, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x268, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_EXP={0x220, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0xe0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xe69101c9952ee88b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0x12c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x659}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x40000}]}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) 04:26:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1830c1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x82b80, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0}) 04:26:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) 04:26:23 executing program 6: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./mnt\x00', 0x1a18c1, 0x0) pwrite64(r0, &(0x7f0000000080)='*', 0x1, 0x0) 04:26:23 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) pwrite64(r1, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) r2 = signalfd(r0, &(0x7f0000000000)={[0x80]}, 0x8) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x18) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 04:26:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001d00210c0000000000000000040002000a001680308d090000000000"], 0x20}}, 0x0) 04:26:23 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 20) 04:26:23 executing program 0: ftruncate(0xffffffffffffffff, 0x1000003) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x80400) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x31f, &(0x7f00000002c0)) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x31f, &(0x7f00000002c0)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@loopback, @private1, @empty, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80110244}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x30, 0xb493, 0x4, @mcast2, @private0, 0x40, 0xcad03739fc52ba98, 0x10001, 0x10000}}) unshare(0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000027bd7000fedbdf253200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100000005000000cd46c022dab60cda1ecd94c24053f0cb0bb07f63f30cfdc9f4aa77d1f853107a14"], 0x28}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) [ 1861.580854] FAULT_INJECTION: forcing a failure. [ 1861.580854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.582087] CPU: 1 PID: 11959 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1861.582804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1861.583838] Call Trace: [ 1861.584118] dump_stack+0x107/0x167 [ 1861.584487] should_fail.cold+0x5/0xa [ 1861.584969] _copy_from_user+0x2e/0x1b0 [ 1861.585430] input_event_from_user+0x1dd/0x290 [ 1861.586007] ? input_devices_seq_show+0xfe0/0xfe0 [ 1861.586560] evdev_write+0x257/0x420 [ 1861.586988] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1861.587588] ? security_file_permission+0x24e/0x570 [ 1861.588100] do_iter_write+0x482/0x670 [ 1861.588495] ? import_iovec+0x83/0xb0 [ 1861.588909] vfs_writev+0x1ae/0x5e0 [ 1861.589350] ? vfs_iter_write+0xa0/0xa0 [ 1861.589823] ? __fget_files+0x26d/0x480 [ 1861.590369] ? lock_downgrade+0x6d0/0x6d0 [ 1861.590806] ? find_held_lock+0x2c/0x110 [ 1861.591370] ? __fget_files+0x296/0x480 [ 1861.591821] ? __fget_light+0xea/0x290 [ 1861.592329] do_writev+0x283/0x300 [ 1861.592796] ? vfs_writev+0x5e0/0x5e0 [ 1861.593304] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1861.593832] do_syscall_64+0x33/0x40 [ 1861.594239] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1861.594777] RIP: 0033:0x7f701ebafb19 [ 1861.595169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.597110] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1861.597915] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1861.598678] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1861.599433] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.600192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1861.600962] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:26:23 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x65, 0xa6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f00000000c0)={0x5, 0x6, 0x80, 0xe8}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="25f57dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 04:26:23 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 21) 04:26:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) 04:26:23 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x11) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="9f", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) write(r0, &(0x7f00000013c0)='w', 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000480)=""/143, 0x8f}], 0x7) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x20) 04:26:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000340)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xffff}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x32}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003ae500000800030050bd3975801593c472ce6fcea8d41bf1a7235b6226736d267db8b4e97da6d1ac340482c7ff2b7ebfcd9438ddc9aa09f8f9a31e944d361d61c88ff86e1b284e8c7b9e474a631f37d73cfa15ef55bb327b5efd8b2a54a0a9a66095f375fdd8e5253790d142a284406a8d0873006019130b3b89fbec83", @ANYRES32=r8, @ANYBLOB="04005b000600650000000000"], 0x28}}, 0x0) [ 1861.844464] Process accounting resumed [ 1861.845347] FAULT_INJECTION: forcing a failure. [ 1861.845347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.845366] CPU: 1 PID: 11974 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1861.848536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1861.849357] Call Trace: [ 1861.849633] dump_stack+0x107/0x167 [ 1861.850005] should_fail.cold+0x5/0xa [ 1861.850415] _copy_from_user+0x2e/0x1b0 [ 1861.850819] input_event_from_user+0x1dd/0x290 [ 1861.851281] ? input_devices_seq_show+0xfe0/0xfe0 [ 1861.851773] evdev_write+0x257/0x420 [ 1861.852151] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1861.852679] ? security_file_permission+0x24e/0x570 [ 1861.853192] do_iter_write+0x482/0x670 [ 1861.853589] ? import_iovec+0x83/0xb0 [ 1861.853991] vfs_writev+0x1ae/0x5e0 [ 1861.854365] ? vfs_iter_write+0xa0/0xa0 [ 1861.854767] ? __fget_files+0x26d/0x480 [ 1861.855176] ? lock_downgrade+0x6d0/0x6d0 [ 1861.855611] ? find_held_lock+0x2c/0x110 [ 1861.856031] ? __fget_files+0x296/0x480 [ 1861.856440] ? __fget_light+0xea/0x290 [ 1861.856835] do_writev+0x283/0x300 [ 1861.857212] ? vfs_writev+0x5e0/0x5e0 [ 1861.857600] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1861.858109] do_syscall_64+0x33/0x40 [ 1861.858499] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1861.859030] RIP: 0033:0x7f701ebafb19 [ 1861.859412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.861364] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1861.862128] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1861.862884] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1861.863640] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.864412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1861.865167] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:26:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x9}}}}, ["", "", "", ""]}, 0x28}}, 0x8080) getsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140001001f002500fbfffffff7dbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004851}, 0x4000) [ 1861.895161] Process accounting resumed [ 1862.042861] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1877.297689] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:26:48 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000006a00210c0000000000000000000202001800008014000000fc010000000000000000000000000000f290899ca8a6ea1cb5a014b3b92dae4be6a2227a18568a549326dceb6b70f68d4c64370cf01e0928e96327f4222cbf326261b4b8fe7b3c591a138a82f746685fcaf6413a06e18fa483df53c526eb2df02394ee8cb28f0283f8341dac25b53116b99c27905d06ccbb01413b061394ec44b6aa53d69aad0d853fe0fab4a21a283e"], 0x2c}}, 0x0) 04:26:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@getsadinfo={0x14, 0x23, 0x1}, 0x14}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) 04:26:48 executing program 4: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x2, 0x8, 0x0, 0x4686}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x28, 0x1a, 0xd, 0xa, 0x2, 0x81, 0x2, 0x80}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0x0, 0x0, 0x8f6}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r2, &(0x7f0000002400)=[{&(0x7f0000000140)=""/213, 0xd5}], 0x1, 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3c}, &(0x7f0000000240)=0x40) 04:26:48 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 22) 04:26:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x20}}, 0x0) 04:26:48 executing program 3: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x200, 0x101, 0x5, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f00000003c0)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmode}]}) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$set_timeout(0xf, r0, 0x0) r1 = getegid() setgid(r1) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$revoke(0x3, r0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x3, 0x1, &(0x7f0000000580)=[{&(0x7f0000000480)="e96e7672f57473596e1329e069a40a6c9079fc28158bc5301097c90c9377f978c1a215474835ed00271ccbb8b5886d7a721682ff8bc1535a15a19aaaf93819b258acb40cfe9bdb0eb911243306a10375ea3a48f4e1440d7751dd88d2df3bbd7acc590edf3d48bdaefab823241ccf0977c2564868800719c50bdc762a94f1c071cde81fdd053e1aebb173861451b1e1d8fb9ad6cf702585f3b58812fcbb58bcdb3df52b143384426520e4094e3318f2fa2f7e9160f4cfba12bc37af70d3e1d020e693267a2facf6b772398d2e6c6cb8121a7933312163591813844ae45577abf007", 0xe1, 0x2}], 0x90000, &(0x7f00000005c0)={[{@uni_xlateno}, {@numtail}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@utf8}, {@utf8}, {@fat=@debug}], [{@measure}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x37, 0x37, 0x38, 0x64, 0x64, 0x34, 0x34], 0x2d, [0x64, 0x62, 0x33, 0x35], 0x2d, [0x34, 0x38, 0x38, 0x39], 0x2d, [0x61, 0x36, 0x35, 0x65], 0x2d, [0x35, 0x34, 0x64, 0x37, 0x34, 0x62, 0x36, 0x64]}}}]}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6, 0x2, &(0x7f0000000180)=[{&(0x7f0000000340)="b60e1f6f96b36000", 0x8, 0x185f}, {&(0x7f0000000280)="bb4de63b1d844c7104b26c7004aaa2c3b67d12d13b3dfac4fc7413986117c431d9b0b3ebc47248f630a4555c132edede9d606dc4295b14829faaeeb3339ff78e3df19a107263e4907c416209730ff07a40b286a689f058f5de9bb6103e75af591eb589fe45eb74355ac24f3e9e99773dd63b329bda0c7dcae092d0284d4c29c0b2de67a0d2290d8c491ce5fd26dff7705886ae", 0x93, 0x4a0}], 0x1020011, &(0x7f0000000780)={[{@dmode={'dmode', 0x3d, 0x6}}, {@map_off}, {@nojoliet}, {@check_strict}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_role={'obj_role', 0x3d, '\x17'}}]}) 04:26:48 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x4c42e3, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x446200, 0x0) openat$cgroup_devices(r0, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./fileJ\x00']) kcmp(r4, r3, 0x2, r2, 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x2}) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2, 0xc9, 0x4, 0x6, 0x0, 0x1, 0x20000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x8c30, 0x8, 0x4, 0x4, 0x7, 0x6, 0x707, 0x0, 0x8, 0x0, 0x5}, r4, 0x1, r6, 0x1) acct(0x0) unshare(0x48020200) 04:26:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x801, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d7dd5c2abbbb76991d8998e79398d6b3b5bca1d301202825573f762fa18097aa4880b0ffab4f992ba1fddd54143f07e12149644bc0d76cf93d952f4481d5e536ba195b485e0b59c47f2609e9bd32df3bbebad7445b6e96f80c5", @ANYRESHEX=r0, @ANYBLOB=',afid=0x0000000080000001,access=user,fscache,access=any,privport,version=9p2000,obj_role=-,func=KEXEC_KERNEL_CHECK,\x00']) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl(r1, 0x1, &(0x7f0000001880)="7e8c6540") [ 1886.785973] FAULT_INJECTION: forcing a failure. [ 1886.785973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.787351] CPU: 1 PID: 11999 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1886.788395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1886.789677] Call Trace: [ 1886.790099] dump_stack+0x107/0x167 [ 1886.790677] should_fail.cold+0x5/0xa [ 1886.791279] _copy_from_user+0x2e/0x1b0 [ 1886.791893] input_event_from_user+0x1dd/0x290 [ 1886.792593] ? input_devices_seq_show+0xfe0/0xfe0 [ 1886.793351] evdev_write+0x257/0x420 [ 1886.793942] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1886.794763] ? security_file_permission+0x24e/0x570 [ 1886.795555] do_iter_write+0x482/0x670 [ 1886.796166] ? import_iovec+0x83/0xb0 [ 1886.796762] vfs_writev+0x1ae/0x5e0 [ 1886.797330] ? vfs_iter_write+0xa0/0xa0 [ 1886.797945] ? __fget_files+0x26d/0x480 [ 1886.798585] ? lock_downgrade+0x6d0/0x6d0 [ 1886.799224] ? find_held_lock+0x2c/0x110 [ 1886.799746] ? __fget_files+0x296/0x480 [ 1886.800196] ? __fget_light+0xea/0x290 [ 1886.800634] do_writev+0x283/0x300 [ 1886.801035] ? vfs_writev+0x5e0/0x5e0 [ 1886.801470] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1886.802010] do_syscall_64+0x33/0x40 [ 1886.802424] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1886.803005] RIP: 0033:0x7f701ebafb19 [ 1886.803423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1886.805469] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1886.806324] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1886.807129] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1886.807919] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1886.808718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1886.809506] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1886.845144] 9pnet: Insufficient options for proto=fd [ 1886.849462] EXT4-fs warning (device sda): ext4_block_to_path:105: block 1080396926 > max in inode 16092 04:26:48 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 23) [ 1886.879647] 9pnet: Insufficient options for proto=fd 04:26:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, r2, 0x409, 0xfffffffd, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x4c820) 04:26:48 executing program 0: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x1d0, 0x0, 0x7ffffff9, 0xffffffff, 0x0, "776c2ff3b9000000000000000000002a00", 0x7fff, 0xffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000100)={0x8000, 0x81, 0x7fff}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) dup3(r3, r3, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000000080), 0x8, 0x10000) sendfile(r4, r3, &(0x7f00000002c0)=0x3, 0x401) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000000c0)={0x14}, 0x14) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10040008}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000e2040180000500000000000000e8d908"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2404c890) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x6, 0x2, 0x7, 0x74, 0x0, 0x1ff, 0x100, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000300), 0x4}, 0x20, 0x1, 0x8001, 0x6, 0x5, 0x7, 0xff, 0x0, 0x8001, 0x0, 0xf60}, 0x0, 0x10, r0, 0x1) close(r4) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) 04:26:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x20}}, 0x0) [ 1886.982144] FAULT_INJECTION: forcing a failure. [ 1886.982144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.984224] CPU: 1 PID: 12018 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1886.985302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1886.986724] Call Trace: [ 1886.987115] dump_stack+0x107/0x167 [ 1886.987567] should_fail.cold+0x5/0xa [ 1886.987977] _copy_from_user+0x2e/0x1b0 [ 1886.988408] input_event_from_user+0x1dd/0x290 [ 1886.988892] ? input_devices_seq_show+0xfe0/0xfe0 [ 1886.989408] evdev_write+0x257/0x420 [ 1886.989812] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1886.990380] ? security_file_permission+0x24e/0x570 [ 1886.990941] do_iter_write+0x482/0x670 [ 1886.991378] ? import_iovec+0x83/0xb0 [ 1886.991912] vfs_writev+0x1ae/0x5e0 [ 1886.992319] ? vfs_iter_write+0xa0/0xa0 [ 1886.992757] ? __fget_files+0x26d/0x480 [ 1886.993207] ? lock_downgrade+0x6d0/0x6d0 [ 1886.993664] ? find_held_lock+0x2c/0x110 [ 1886.994146] ? __fget_files+0x296/0x480 [ 1886.994604] ? __fget_light+0xea/0x290 [ 1886.995043] do_writev+0x283/0x300 [ 1886.995441] ? vfs_writev+0x5e0/0x5e0 [ 1886.995871] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1886.996491] do_syscall_64+0x33/0x40 [ 1886.997038] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1886.997611] RIP: 0033:0x7f701ebafb19 [ 1886.998023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1887.000095] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1887.000905] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1887.001703] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1887.002501] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1887.003369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1887.004264] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:26:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1114, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFQA_PAYLOAD={0x1004, 0xa, "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"}, @NFQA_PAYLOAD={0xf1, 0xa, "8bb41ce50fbb9112030a22f88c09209085f9c5a6b4bdf5811ff8e61b9b65a32fc0d166af9350ffb37f2c4711f98012bee4ce4c2c6a7c3d3b2f419a6b478d08d3a65dd0e69938717b91558f68dc1cfa1adf6a86fca24a13f4bbb5b09589a653125f3001eda608571fa227f309f3aecfed8ac1f4ec3d4b192ec2191e25ad45db72be2873b9fa7c19fb0cb2c3ff9ba65ec931126402d8f127a2c5018de7a361763e7607632d817ef0e7f8ee4387bb91de6e8214aaa5973d78f6909f756267dbb99db4d8a14c9533b1c4892d1eba584034654521462fa77a77ff94a0b7d6b2d92fedd74b38dd5a902cdd83b09fded0"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1114}, 0x1, 0x0, 0x0, 0x800}, 0x814) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, 0x15, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@loopback}]}, 0x2c}}, 0x0) 04:26:48 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 24) 04:26:48 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x1cae, 0x6, 0x20}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fadvise64(r1, 0x0, 0x0, 0x1) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x424, 0x3f4, 0x20, 0x70bd2c, 0x25dfdbfc, {0x2, 0x2, 0xb, [0x3, 0x100, 0x401, 0x0, 0x401, 0x1f, 0x1f, 0x58, 0x6, 0x40, 0xfff, 0x3, 0x1, 0x8001, 0xfd, 0x0, 0x1, 0x8, 0x101, 0x3f, 0x1ffc0, 0x8, 0x283e6409, 0x4, 0x800, 0x3, 0x4, 0x9, 0x4, 0x1, 0x180, 0xfffffffa, 0x5, 0x0, 0xffffa3a5, 0xfffffa47, 0x0, 0x1, 0xdbe4, 0xd61, 0x5, 0x9, 0xffff, 0x7, 0xe9, 0x2, 0x0, 0x8, 0x3f, 0x7f, 0x0, 0x8, 0x43b5, 0x4, 0x7f11, 0x3f, 0x1, 0x7, 0x80000001, 0x7ff, 0x5, 0x2, 0xc7f, 0xb27], [0x5, 0x9, 0x0, 0xe8, 0x1, 0x7ca3, 0xf166, 0xffffff58, 0x3, 0x401, 0x4, 0x0, 0x101, 0x1, 0x800, 0x7, 0xfff, 0x82, 0x9, 0xfffffffd, 0xff, 0x9, 0x7fff, 0x1, 0x3, 0x7, 0xfff, 0xf18d, 0x0, 0x8, 0x527, 0x736, 0x80, 0x0, 0x7, 0x7fffffff, 0x100, 0x9, 0x9, 0x7, 0x7f, 0x7f, 0x1ff, 0x2, 0x0, 0x13, 0x6, 0x2, 0x400, 0x0, 0x6, 0x81, 0x10001, 0x40, 0x11b, 0x0, 0x9, 0x81, 0x10000, 0x7, 0x1, 0x1, 0x80, 0xffff], [0x8, 0x100, 0x4, 0x0, 0x7ff, 0x7, 0x4, 0x9, 0x6, 0x56b2, 0x7, 0x800, 0x713, 0x10000, 0x3f, 0x0, 0x6, 0x3, 0x4, 0x9, 0xffff, 0x5e, 0x5, 0x10001, 0x7f, 0x6, 0x1, 0x8, 0x9, 0x5, 0x7, 0x1000, 0x9aa, 0x7, 0x1f, 0x8, 0xffff7c09, 0x9, 0x13, 0x101, 0x4, 0xe21, 0x21, 0x400, 0x560, 0x3, 0x1f, 0x200, 0xffffffff, 0xfff, 0x1, 0x0, 0x6, 0xffffffff, 0x1cb8, 0x81, 0xfffffffe, 0x5, 0x80000000, 0x40, 0x6, 0x1, 0x10001, 0x101], [0x200, 0x1ff, 0x800, 0x2d5, 0xfffffffd, 0x4, 0x3b, 0x2, 0x908, 0x1000, 0x2, 0x1, 0x3ff, 0xc, 0x4, 0x0, 0x1, 0x7, 0x2, 0x4, 0x4, 0x7977, 0x8001, 0x3, 0x1, 0x0, 0x8, 0x0, 0x2b16, 0xfffffff7, 0x400, 0x8001, 0x1, 0x9, 0x2, 0x99a4, 0x80000000, 0x8, 0xfffffff9, 0x22, 0x400, 0x7, 0x3ff, 0x200, 0x10f, 0xf43, 0xfffff001, 0x254, 0xffff, 0xff, 0x925, 0x7, 0x1, 0x0, 0x1f, 0xff, 0x9a89, 0x84fd, 0xfff, 0x8, 0xffffffc1, 0xfffffffb, 0x101, 0x1000], 0x4, ['\xdf7\x00', '\x00']}, ["", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x8041}, 0x24004001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) fallocate(r2, 0x2, 0x2c2, 0x4) ftruncate(r1, 0x1) preadv(r1, &(0x7f0000001900)=[{&(0x7f0000001440)=""/52, 0x34}], 0x1, 0x8144, 0x0) 04:26:48 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfff) r6 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r6, 0x0) r7 = io_uring_setup(0x4b72, &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x5, 0x0, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x6, 0xc, 0x0, {0x0, r8, r6}}, 0x6) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x3ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x200440, 0x190) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x8}}, 0x0) io_uring_enter(r0, 0x124, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}}, 0x30ffd93bf4f297be) 04:26:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x80464c453f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) r4 = syz_io_uring_complete(0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x5) copy_file_range(r1, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000000c0)=0x100, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.procs\x00', 0x0, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xfffffe01}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'syztnl0\x00', &(0x7f00000016c0)={'sit0\x00', 0x0, 0x29, 0x0, 0x1f, 0x8, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x1ff, 0x3f}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 1887.177110] FAULT_INJECTION: forcing a failure. [ 1887.177110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1887.178793] CPU: 1 PID: 12030 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1887.179750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1887.180885] Call Trace: [ 1887.181269] dump_stack+0x107/0x167 [ 1887.181787] should_fail.cold+0x5/0xa [ 1887.181835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12029 comm=syz-executor.6 [ 1887.182289] _copy_from_user+0x2e/0x1b0 [ 1887.182311] input_event_from_user+0x1dd/0x290 [ 1887.185014] ? input_devices_seq_show+0xfe0/0xfe0 [ 1887.185703] evdev_write+0x257/0x420 [ 1887.186243] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1887.187345] ? security_file_permission+0x24e/0x570 [ 1887.188574] do_iter_write+0x482/0x670 [ 1887.189525] ? import_iovec+0x83/0xb0 [ 1887.190451] vfs_writev+0x1ae/0x5e0 [ 1887.191365] ? vfs_iter_write+0xa0/0xa0 [ 1887.192320] ? __fget_files+0x26d/0x480 [ 1887.193284] ? lock_downgrade+0x6d0/0x6d0 [ 1887.194284] ? find_held_lock+0x2c/0x110 [ 1887.195292] ? __fget_files+0x296/0x480 [ 1887.196270] ? __fget_light+0xea/0x290 [ 1887.197226] do_writev+0x283/0x300 [ 1887.198090] ? vfs_writev+0x5e0/0x5e0 [ 1887.199030] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1887.200205] do_syscall_64+0x33/0x40 [ 1887.201109] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1887.202349] RIP: 0033:0x7f701ebafb19 [ 1887.203268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1887.207434] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1887.209099] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1887.210676] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1887.212229] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1887.213793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1887.215352] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1887.225549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12035 comm=syz-executor.6 04:26:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x20}}, 0x0) [ 1887.253172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12037 comm=syz-executor.3 [ 1887.256192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12039 comm=syz-executor.3 04:26:48 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 25) 04:26:48 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30313738333335313800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000003aa2ac8103a046169889a50d8894c561010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000004300000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000e0f4655fe0f4655fe0f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011600)="20000000688aa2d2688aa2d200000000e0f4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011700)="8081000000601020e0f4655fe0f4655fe0f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000e0f4655f00"/160, 0xa0, 0x2600}, {&(0x7f0000011800)="c041000000380000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000020000000", 0x40, 0x2a00}, {&(0x7f0000011900)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x2a80}, {&(0x7f0000011a00)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000001fb537300000000000000000000000000000000000000000000000020000000688aa2d2688aa2d2688aa2d2e0f4655f688aa2d20000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011b00)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000c6914ad800000000000000000000000000000000000000000000000020000000688aa2d2688aa2d2688aa2d2e0f4655f688aa2d20000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011c00)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3031373833333531382f66696c65302f66696c6530000000000000000000000000000000000000000000001f44752800000000000000000000000000000000000000000000000020000000688aa2d2688aa2d2688aa2d2e0f4655f688aa2d20000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011d00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011f00)="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", 0x100, 0x3000}, {&(0x7f0000012000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x10000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012800)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x28000}], 0x0, &(0x7f0000012e00)) mount(&(0x7f0000001700)=@sg0, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='xfs\x00', 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x3, &(0x7f0000000140)=[{&(0x7f0000000480)="f141cb3a35343106370c3629ca3dea51a8562bb047eb35a517a431c5186a9d4b7a8df63ffdb873972b473d27f5f2fc6616b77495c99f235410fbbf608c089312eabbe8d12da70499ecba61f1a1d7812d57c79ea9c11f7a1f1efd6515e904bcb56bd5cdd68652584d91aebf68a5b5c6d0eb379f79d05c07f129f773b38e33bdf9a30b616de098d32b1a02c895b755771e37e862f7f472a8d53aaa23b58d02e49628c61c0e41f6b0d26d0f4189fe7b35dcfe6cb8fe9aa52016ab99e7a4cae2bd750977b1f9044971542031b3d5f65c28474f084c60d2ce0f778f272a65bf2d79da4668b5a2e365da0fcd7b", 0xea, 0x5}, {&(0x7f0000000580)="2f590966f6ac4a8dadc0162e1f9182df74192422ea75a9659e25955cb901dce530a5d70cad6bbefc5e54e3f1ab88a94fde361254a06b110b29a1147b01bc602b09ea0b27d43027227796b42f9d323d47399fbc9ad082c24f5ed7bead0339159d31925508cbf40425b86432248f18f3086cdcfb249591c9e9f000b05d5ab56abd5a57ae899ac0b4adc8166d4cc91a85715b09981db68b48dc5c41cd9bbf16590264f5af471a1477b4bdef0ed932db61d2ce5ca570931a3637c27c27becde721448b010c79b356234d2d52f26a250492de909ca4c29bf46d049b4a465a86", 0xdd, 0x3}, {&(0x7f0000000680)="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", 0x1000, 0xdf1}], 0x1100840, &(0x7f0000001680)={[{'ext4\x00'}, {'ext4\x00'}, {'Y&'}, {'ext4\x00'}, {}, {'ext4\x00'}], [{@pcr={'pcr', 0x3d, 0x7}}, {@subj_user={'subj_user', 0x3d, '*'}}]}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.freeze\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) 04:26:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x214080, 0x49) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x362400, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x40000, 0x0) sendfile(r5, r4, 0x0, 0x7ffffff9) [ 1887.490095] FAULT_INJECTION: forcing a failure. [ 1887.490095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1887.492663] CPU: 1 PID: 12060 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1887.494150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1887.495973] Call Trace: [ 1887.496575] dump_stack+0x107/0x167 [ 1887.497374] should_fail.cold+0x5/0xa [ 1887.498222] _copy_from_user+0x2e/0x1b0 [ 1887.499129] input_event_from_user+0x1dd/0x290 [ 1887.500140] ? input_devices_seq_show+0xfe0/0xfe0 [ 1887.501216] evdev_write+0x257/0x420 [ 1887.502042] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1887.503210] ? security_file_permission+0x24e/0x570 [ 1887.504317] do_iter_write+0x482/0x670 [ 1887.505194] ? import_iovec+0x83/0xb0 [ 1887.506032] vfs_writev+0x1ae/0x5e0 [ 1887.506859] ? vfs_iter_write+0xa0/0xa0 [ 1887.507736] ? __fget_files+0x26d/0x480 [ 1887.508620] ? lock_downgrade+0x6d0/0x6d0 [ 1887.509525] ? find_held_lock+0x2c/0x110 [ 1887.510435] ? __fget_files+0x296/0x480 [ 1887.511333] ? __fget_light+0xea/0x290 [ 1887.512202] do_writev+0x283/0x300 [ 1887.512987] ? vfs_writev+0x5e0/0x5e0 [ 1887.513830] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1887.514912] do_syscall_64+0x33/0x40 [ 1887.515729] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1887.516844] RIP: 0033:0x7f701ebafb19 [ 1887.517661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1887.521652] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1887.523339] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1887.524904] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1887.526466] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1887.528030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1887.529596] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1887.562103] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 04:27:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x51d2c0, 0xc3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f323293930a3d", @ANYRESHEX=r1]) 04:27:07 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000140), 0x8) 04:27:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="de", 0x1}], 0x1) lsetxattr$security_evm(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000200)=ANY=[@ANYBLOB="4a9ede537cb237c1502cecff4bdc40b910329c3849f568ef03c019581e5f62d1c36a59aa4902832440bcc2b9f52a0dcc32801e1def16168af4b9f9b2c0ac75417accf564d46248aefd0388486d79a6c2af3c590fdd9ae28c3e464360597ac3e7995ce8ef6a33602a"], 0x7, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendfile(r3, r0, 0x0, 0x7ffffffc) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) 04:27:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000004f00)={0xa, 0x4e23, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9bbb) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/139, 0x8b}], 0x1, 0x8001, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000004f80)) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x84}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000001580)=""/10, 0xa}], 0x3}, 0x3}, {{&(0x7f0000001600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/122, 0x7a}, {&(0x7f0000001700)=""/35, 0x23}, {&(0x7f0000001740)=""/171, 0xab}, {&(0x7f0000001800)=""/30, 0x1e}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001840)=""/112, 0x70}, {&(0x7f00000018c0)=""/216, 0xd8}], 0x7, &(0x7f0000001a40)=""/200, 0xc8}, 0xaef00000}, {{&(0x7f0000001b40)=@hci, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001bc0)=""/116, 0x74}, {&(0x7f0000001c40)=""/201, 0xc9}, {&(0x7f0000002e00)=""/197, 0xc5}, {&(0x7f0000002f00)=""/217, 0xd9}], 0x4, &(0x7f0000003000)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004080)=""/221, 0xdd}, {&(0x7f0000004180)=""/172, 0xac}, {&(0x7f0000004240)=""/186, 0xba}, {&(0x7f0000004300)=""/65, 0x41}, {&(0x7f0000004380)=""/202, 0xca}], 0x5, &(0x7f0000004500)=""/106, 0x6a}, 0xc5}, {{&(0x7f0000004580)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004600)=""/161, 0xa1}, {&(0x7f00000046c0)=""/43, 0x2b}, {&(0x7f0000004700)=""/135, 0x87}, {&(0x7f00000047c0)=""/1, 0x1}, {&(0x7f0000004800)=""/131, 0x83}, {&(0x7f00000048c0)=""/74, 0x4a}, {&(0x7f0000004940)=""/234, 0xea}, {&(0x7f0000004a40)=""/100, 0x64}, {&(0x7f0000004ac0)=""/180, 0xb4}, {&(0x7f0000004b80)=""/115, 0x73}], 0xa, &(0x7f0000004cc0)=""/16, 0x10}, 0x80}], 0x6, 0x40, &(0x7f0000004e80)={0x77359400}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x2f, 0x20040000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x50, r3, 0x0) 04:27:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}}, 0x0) 04:27:07 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x8000}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file1\x00'}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xcd1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(0xffffffffffffffff, r3) r4 = getuid() mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x62000, &(0x7f0000000300)={'trans=virtio,', {[{@privport}, {@posixacl}, {@afid={'afid', 0x3d, 0xff}}, {@privport}], [{@fowner_lt}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_gt={'fowner>', r4}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@euid_lt}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6044e2, 0x43) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r5, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x20000) sendfile(r1, r5, 0x0, 0x80000001) 04:27:07 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 26) 04:27:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x8000}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) [ 1905.610327] FAULT_INJECTION: forcing a failure. [ 1905.610327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1905.612149] CPU: 1 PID: 12090 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1905.612894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1905.613795] Call Trace: [ 1905.614089] dump_stack+0x107/0x167 [ 1905.614485] should_fail.cold+0x5/0xa [ 1905.614910] _copy_from_user+0x2e/0x1b0 [ 1905.615358] input_event_from_user+0x1dd/0x290 [ 1905.615849] ? input_devices_seq_show+0xfe0/0xfe0 [ 1905.616395] evdev_write+0x257/0x420 [ 1905.616804] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1905.617395] ? security_file_permission+0x24e/0x570 [ 1905.617949] do_iter_write+0x482/0x670 [ 1905.618385] ? import_iovec+0x83/0xb0 [ 1905.618805] vfs_writev+0x1ae/0x5e0 [ 1905.619199] ? vfs_iter_write+0xa0/0xa0 [ 1905.619634] ? __fget_files+0x26d/0x480 [ 1905.620066] ? lock_downgrade+0x6d0/0x6d0 [ 1905.620539] ? find_held_lock+0x2c/0x110 [ 1905.620981] ? __fget_files+0x296/0x480 [ 1905.621450] ? __fget_light+0xea/0x290 [ 1905.621868] do_writev+0x283/0x300 [ 1905.622283] ? vfs_writev+0x5e0/0x5e0 [ 1905.622761] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1905.623472] do_syscall_64+0x33/0x40 [ 1905.623914] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1905.624695] RIP: 0033:0x7f701ebafb19 [ 1905.625207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1905.627329] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1905.628216] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1905.629034] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1905.629864] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.630684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1905.631519] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1905.652262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12099 comm=syz-executor.2 04:27:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$unix(0x1, 0x1, 0x0) r5 = signalfd4(r0, &(0x7f0000000040)={[0xe4]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x1d}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x5}, 0x0) r6 = dup3(r0, r3, 0x0) io_uring_enter(r6, 0x1, 0x0, 0x0, 0x0, 0x0) 04:27:07 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 27) [ 1905.706584] 9pnet: Insufficient options for proto=fd [ 1905.736096] audit: type=1326 audit(1668832027.395:70): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12080 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f5f1a5b19 code=0x0 [ 1905.781221] audit: type=1326 audit(1668832027.440:71): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12080 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f5f1a5b19 code=0x0 [ 1905.872205] FAULT_INJECTION: forcing a failure. [ 1905.872205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1905.873492] CPU: 1 PID: 12113 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1905.874272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1905.875242] Call Trace: [ 1905.875548] dump_stack+0x107/0x167 [ 1905.875959] should_fail.cold+0x5/0xa [ 1905.876394] _copy_from_user+0x2e/0x1b0 [ 1905.876849] input_event_from_user+0x1dd/0x290 [ 1905.877359] ? input_devices_seq_show+0xfe0/0xfe0 [ 1905.877911] evdev_write+0x257/0x420 [ 1905.878332] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1905.878936] ? security_file_permission+0x24e/0x570 [ 1905.879504] do_iter_write+0x482/0x670 [ 1905.879943] ? import_iovec+0x83/0xb0 [ 1905.880356] vfs_writev+0x1ae/0x5e0 [ 1905.880770] ? vfs_iter_write+0xa0/0xa0 [ 1905.881214] ? __fget_files+0x26d/0x480 [ 1905.881665] ? lock_downgrade+0x6d0/0x6d0 [ 1905.882127] ? find_held_lock+0x2c/0x110 [ 1905.882593] ? __fget_files+0x296/0x480 [ 1905.883055] ? __fget_light+0xea/0x290 [ 1905.883501] do_writev+0x283/0x300 [ 1905.883900] ? vfs_writev+0x5e0/0x5e0 [ 1905.884330] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1905.884847] do_syscall_64+0x33/0x40 [ 1905.885262] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1905.885842] RIP: 0033:0x7f701ebafb19 [ 1905.886261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1905.888332] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1905.889180] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1905.889976] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1905.890769] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.891568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1905.892339] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1905.945168] attempt to access beyond end of device [ 1905.945168] loop6: rw=0, want=148, limit=128 [ 1906.013657] attempt to access beyond end of device [ 1906.013657] loop6: rw=1, want=2044, limit=128 [ 1919.427492] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:27:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./mnt\x00', 0x8000, 0x82) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') 04:27:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5de4832662090500000000002100c44efb47a796d74f9d53502a56d410c7492a47e039c986af04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d17756821174b429d5342d41e33fc112d7333e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68ccbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d838c032f46ff003a61369e", @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRESOCT], 0xfdef) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r3, 0x2, 0x1, 0x68, 0x7}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0xe3ff, 0x8000) 04:27:30 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) pwrite64(r0, &(0x7f00000000c0)="fe", 0x1, 0x7c80) fadvise64(r0, 0x0, 0x7c80, 0x4) 04:27:30 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x10000}, 0x26, 0x82000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x5000) fork() r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = gettid() kcmp(r3, r2, 0x2, r1, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x20000, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x642, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x46642, 0x10000, 0x800, 0x3, 0x6, 0x0, 0x1, 0x0, 0x33, 0x0, 0x4534995}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup2(r0, r0) 04:27:30 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{r0, r1+60000000}, {r2, r3+60000000}}, &(0x7f0000000280)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = gettid() kcmp(r7, r6, 0x2, r5, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x3, 0x6, 0x9, 0x7, 0x0, 0xa61, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x120, 0xffff, 0x0, 0x1, 0x400, 0x2, 0x1, 0x0, 0x7ff, 0x0, 0x97bcf10}, r6, 0xffffffffffffffff, r4, 0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0\x00', 0x0, 0x1177820, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') perf_event_open(0x0, 0x0, 0x0, r8, 0x2) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 04:27:30 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 28) 04:27:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x28}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 04:27:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}}, 0x0) [ 1928.473776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12133 comm=syz-executor.2 [ 1928.501248] FAULT_INJECTION: forcing a failure. [ 1928.501248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1928.504177] CPU: 1 PID: 12137 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1928.505604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1928.507336] Call Trace: [ 1928.507893] dump_stack+0x107/0x167 [ 1928.508656] should_fail.cold+0x5/0xa [ 1928.509455] _copy_from_user+0x2e/0x1b0 [ 1928.510289] input_event_from_user+0x1dd/0x290 [ 1928.511241] ? input_devices_seq_show+0xfe0/0xfe0 [ 1928.512261] evdev_write+0x257/0x420 [ 1928.513048] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1928.514141] ? security_file_permission+0x24e/0x570 [ 1928.515187] do_iter_write+0x482/0x670 [ 1928.515994] ? import_iovec+0x83/0xb0 [ 1928.516782] vfs_writev+0x1ae/0x5e0 [ 1928.517536] ? vfs_iter_write+0xa0/0xa0 [ 1928.518345] ? __fget_files+0x26d/0x480 [ 1928.519181] ? lock_downgrade+0x6d0/0x6d0 [ 1928.520026] ? find_held_lock+0x2c/0x110 [ 1928.520980] ? __fget_files+0x296/0x480 [ 1928.521835] ? __fget_light+0xea/0x290 [ 1928.522791] do_writev+0x283/0x300 [ 1928.523535] ? vfs_writev+0x5e0/0x5e0 [ 1928.524477] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1928.525470] do_syscall_64+0x33/0x40 [ 1928.526382] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1928.527460] RIP: 0033:0x7f701ebafb19 [ 1928.528221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1928.531927] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1928.533475] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1928.534922] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1928.536376] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1928.537825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1928.539314] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:27:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1007, 0x4}) 04:27:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}}, 0x0) 04:27:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000010000041b000000", @ANYRES32, @ANYBLOB="05000000000000002e2f66696c653000"]) 04:27:30 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 29) 04:27:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00090000000000001e00ac1513f60000000000004f17000000000000100000ac141c02000000000000009ea902edbfa5000000000000000200000000000000ba862638d7d785ec5a6732a55b0351a0d88082ea6dfb175324a7cfbf238b2d495749e34fe3f220ec0ebea7c6fc7718c3a505ecf2b3b44419deaaffd2617f81680322075ec11b56c12bc2b34894179d22cbfe65c3f5d44e400e8ad664773b6e29b0c09ed2a6262d36323591", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000003f0000000000000014000e00"/188], 0x104}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x1081030000000000) [ 1928.863177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12161 comm=syz-executor.2 04:27:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x95758de7d941058b) link(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 1928.896545] FAULT_INJECTION: forcing a failure. [ 1928.896545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1928.899021] CPU: 1 PID: 12163 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1928.900454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1928.902136] Call Trace: [ 1928.902681] dump_stack+0x107/0x167 [ 1928.903457] should_fail.cold+0x5/0xa [ 1928.904241] _copy_from_user+0x2e/0x1b0 [ 1928.905079] input_event_from_user+0x1dd/0x290 [ 1928.906018] ? input_devices_seq_show+0xfe0/0xfe0 [ 1928.907021] evdev_write+0x257/0x420 [ 1928.907817] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1928.908890] ? security_file_permission+0x24e/0x570 [ 1928.909939] do_iter_write+0x482/0x670 [ 1928.910757] ? import_iovec+0x83/0xb0 [ 1928.911558] vfs_writev+0x1ae/0x5e0 [ 1928.912302] ? vfs_iter_write+0xa0/0xa0 [ 1928.913114] ? __fget_files+0x26d/0x480 [ 1928.913930] ? lock_downgrade+0x6d0/0x6d0 [ 1928.914781] ? find_held_lock+0x2c/0x110 [ 1928.915655] ? __fget_files+0x296/0x480 [ 1928.916490] ? __fget_light+0xea/0x290 [ 1928.917300] do_writev+0x283/0x300 [ 1928.918027] ? vfs_writev+0x5e0/0x5e0 [ 1928.918827] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1928.919835] do_syscall_64+0x33/0x40 [ 1928.920601] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1928.921654] RIP: 0033:0x7f701ebafb19 [ 1928.922419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1928.926195] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1928.927769] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1928.929227] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1928.930686] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1928.932146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1928.933613] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:27:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYBLOB="c96f19de8c5de4832662090500000000002100c44efb47a796d74f9d53502a56d410c7492a47e039c986af04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d17756821174b429d5342d41e33fc112d7333e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68ccbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d838c032f46ff003a61369e", @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRESOCT], 0xfdef) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r3, 0x2, 0x1, 0x68, 0x7}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0xe3ff, 0x8000) 04:27:30 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) syslog(0x2, &(0x7f0000000000)=""/102, 0x66) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2}) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x20) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x418080, 0xa0) fallocate(r0, 0x40, 0x40, 0x70000) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x7a7000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x0, 0x20, 0x7, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3f}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "d3cc492ea841"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) 04:27:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001600"], 0x20}}, 0x0) 04:27:30 executing program 3: pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x40002, &(0x7f0000012900)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$9p_xen(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x34002, &(0x7f0000000280)={'trans=xen,', {[{@nodevmap}, {@aname={'aname', 0x3d, 'ext3\x00'}}, {@cache_loose}, {@mmap}, {@msize={'msize', 0x3d, 0x4}}], [{@euid_eq={'euid', 0x3d, r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '--'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, '%\'\\@'}}]}}) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/1186], 0x4a2) r2 = open(&(0x7f0000000800)='./file0\x00', 0x40000, 0x80) openat(r2, &(0x7f00000008c0)='./file0/file0\x00', 0x2002, 0x81) uselib(&(0x7f0000000140)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000840)={0x0, 0x2, 0x48000000000, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000880)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 04:27:30 executing program 0: lstat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{&(0x7f0000000600)="d0", 0x1}, {&(0x7f0000000680)="41c4", 0x2}], 0x0, &(0x7f00000009c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}], [{@smackfsdef={'smackfsdef', 0x3d, '\xf8^:/\'@*)\xe1'}}]}) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)) mkdir(&(0x7f0000000cc0)='./file0/../file0\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) openat(r0, &(0x7f0000000000)='./file0/../file0\x00', 0x102, 0x4) [ 1943.400917] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:28:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001600"], 0x20}}, 0x0) 04:28:00 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) copy_file_range(r0, &(0x7f0000000000)=0xfffffffffffff800, r1, &(0x7f0000000140)=0x200, 0x4, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x1a18c3, 0x0) pwrite64(r2, &(0x7f0000000080)='*', 0x1, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 04:28:00 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x9, 0x0, 0x0, 0xa0d800, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfff) r7 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000753000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, r7, 0x2e7ac000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r7, 0x0) r8 = io_uring_setup(0x4b72, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x5, 0x0, r9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x6, 0xc, 0x0, {0x0, r9, r7}}, 0x6) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r9}}, 0x5) 04:28:00 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 30) 04:28:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/ieee802154', 0x105400, 0x90) statx(r1, &(0x7f0000000100)='./file0\x00', 0x800, 0x7ff, &(0x7f0000000140)) io_setup(0xde, &(0x7f0000000280)=0x0) r3 = dup(r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) io_submit(r2, 0x3, &(0x7f0000000600)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xcf52, r3, &(0x7f00000002c0)="ec1f59a575bdb8a8d0ff7562549d631895c18acaa2ed69f2a02c87a378ed75458af60178370b49c0985184a08c77e5ca73a7beb7eb6a97a789e83547c26ef31cc7032849a5224cd9d1a44cafc3050979967908ee0e17680a3d90ea3b82dc65252abfd07b93d7594f9b3592fd7bf846f90c0d6415e6d32b355544ce6527f44ff24213c6b8e6e8115c09e2e1248afbf07631ba472a79e4f7f6b0130547c749a5ce08d2d1019fc26f4c3ef61b88a6da6bc7d8ef53ced3c4", 0xb6, 0x101, 0x0, 0x1, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x6, r1, &(0x7f00000003c0)="dc4c1fc77bd4812e50460fee4006f5eae4fbd9587cff70a57616e27da74a33c1b4559bd324b6da08b3910d439882f679aa26682064e5967a593e30705af509810b2ef1636acb9d962a1e4408e4ec93517e3407d18a5f4743e68828194efc59508a699fdf67466e75d478d7323e3fca91b872900e2aa3c63a9efa9cf22b9e7215e32dbf65fa29e655005bccdd90d5fa2bc108748ff06022f5f7c88122f2e82e4702321226954df1485fe2713686f03f0732ab1bda1bf27734cc", 0xb9, 0x40, 0x0, 0x6}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0xff00, r4, &(0x7f00000004c0)="1f2b0f1d1013ee204fd40f751c79b6c003345565e5f72f864f0da362418fca83db40fa181722ea4906b2724b37fad4cb58959cd4b468924df9302ab755da362b99bd4139295f404dd7110145ce9b706a39bf52dfb502500f6cf5a98065abf4f04ed5eb577a6d90bdebf4363f58a51c359f9627bdca13168bf3c1aad7fa8cfb559a37a1be682c9cbccd927fc31779e874f91b832163b8a8ebf7a196ccf74bec6c6772ff060cf36794bd12c0e61d8bd9cec5d2ad7a7426bcce88b4cdb2b8f166f82f00c075a06715d2bd", 0xc9, 0xb995, 0x0, 0x2, r0}]) uselib(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 04:28:00 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="a17ca5aade2b227f21cc7a45dea1c3bc721f9f7b352aa0cf75ed99", 0x1b}], 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = fcntl$dupfd(r1, 0x406, r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40440c0}, 0x8000044) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140a000300000000000000000000000000000400"], 0x14}}, 0x0) 04:28:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000200)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x524cc097}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, 0x0, 0x0) dup2(r0, r2) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) r3 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000140)=0x1) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) finit_module(r3, 0x0, 0x0) 04:28:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xe1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x7ff}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x3, 0x5, 0x7, 0x21a9, 0x7fffffff}) openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0), 0x17, 0x10001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) execveat(r1, &(0x7f0000000140)='./file2\x00', &(0x7f0000000300)=[&(0x7f00000001c0)='@\x00', &(0x7f0000000240)='(,@+{&/-}%:*\x00'], &(0x7f0000000400)=[&(0x7f0000000340)='],]}{.+\x00', &(0x7f0000000380)='cgroup.max.descendants\x00', &(0x7f00000003c0)='\x00'], 0x800) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x68001, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) copy_file_range(r7, 0x0, r4, 0x0, 0x10001, 0x0) [ 1959.291344] FAULT_INJECTION: forcing a failure. [ 1959.291344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1959.293209] CPU: 1 PID: 12206 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1959.294259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1959.295534] Call Trace: [ 1959.295947] dump_stack+0x107/0x167 [ 1959.296517] should_fail.cold+0x5/0xa [ 1959.297101] _copy_from_user+0x2e/0x1b0 [ 1959.297716] input_event_from_user+0x1dd/0x290 [ 1959.298412] ? input_devices_seq_show+0xfe0/0xfe0 [ 1959.299166] evdev_write+0x257/0x420 [ 1959.299751] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1959.300554] ? security_file_permission+0x24e/0x570 [ 1959.301329] do_iter_write+0x482/0x670 [ 1959.301932] ? import_iovec+0x83/0xb0 [ 1959.302601] vfs_writev+0x1ae/0x5e0 [ 1959.303178] ? vfs_iter_write+0xa0/0xa0 [ 1959.303871] ? __fget_files+0x26d/0x480 [ 1959.304595] ? lock_downgrade+0x6d0/0x6d0 [ 1959.305261] ? find_held_lock+0x2c/0x110 [ 1959.305866] ? __fget_files+0x296/0x480 [ 1959.306462] ? __fget_light+0xea/0x290 [ 1959.307042] do_writev+0x283/0x300 [ 1959.307591] ? vfs_writev+0x5e0/0x5e0 [ 1959.308164] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1959.308976] do_syscall_64+0x33/0x40 [ 1959.309545] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1959.310528] RIP: 0033:0x7f701ebafb19 [ 1959.311078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1959.313773] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1959.314886] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1959.315945] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1959.317005] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1959.318133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1959.319177] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:28:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001600"], 0x20}}, 0x0) 04:28:01 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 31) 04:28:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0xfffffffa, 0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0xffffffff}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000200)="b5baac866dd77441dd823d516370f397e3aa8d801b32a9c40406601290190a4a14d9e1462990ef2742054a17fc5b828c645c312c7bdd3236631b900a1abeeab4f82da72b905a2bad27427f423fde0fd6d26d12684c2f0707f8a9886be07391405c98513bfa81e7c265a43ec24fd918f768d47c5785420197a8bd79e7d02e71974151c6abb9d625a255e88e8330d968ae05d6649ebf47ce1aee9d735eaed2d79afbb3634fa1ee51228105fab7bb5bc131f3afbca6d51aab7d5fa20616c83c48190d63d531406e4a81a3a629981377bddf0b461eda215360646ac88f6fb49412b91581631ee19c4c71de3925a95a7e5e", 0xef}, {&(0x7f0000000300)="5af85138da559d6d5c23d84a3241705d883b738a8876952db13c7f97a8ec65e795636830890c2bb92824bdaeea9f7790a027d9c7feae52d97a64b167185a27ff4b4aad5a29114be6d86922c213b616f4047e207f6da37feb317b3bae162c40550505d895552dd8d0f8a79c6e7262c84f8095dbfa8bcc922c6a8e1c342196a5d5f64fa82a264ef073862e28209a46283bd262d559edb11e0ac270e1c6a7c79e9a77977fb8061eaef30cbdd0708266c6acb40b70c51a49a493a01415e66bdb59afa270df94f6e3789ad097af12eee9e905924ab69f33b0aa367aad43d9d3eb4911650ecd13210bd822b0d2", 0xea}], 0x2, &(0x7f0000000140)=[@flowinfo={{0x14, 0x29, 0xb, 0xf5}}, @hoplimit={{0x14, 0x29, 0x34, 0xbb}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="ecef0cf70512a6915f3f72dbd5c66c9a33aedd0b09b59a6df0abf05630fd87e680b9d4fa57d45a86c844a8d2808a77e84b7cd017c7a1c89f63ea8110a107e5b5f1d83ff572a2f0410a2dec50fd826f33622d9fae5aad4160aed75d99c7da079dcbe6eddc72dd4dd632af16225b189005560d55d09cc884be8fd3f23ffaa8267e3670861b20df985268543a8a8389abadfea25a684d40078f50ccae14dd2ecc7a9ff545c607f2ab662d61", 0xaa}, {&(0x7f00000004c0)="9bdf4655d4d914013b78cd12f32cfe8088a627c873abea9df1c6575c87b75c2071c80957bd655c178db836dc6d231d4bdbb471153c10bc1fe5f2b676f467a6e0acc2c4b9079d2d85129147c3", 0x4c}, {&(0x7f0000000540)="4a9bcd5f4c6e5de48fabc0d191700e9b3fb2f7829e9babb2cc1fbe24f1014588a4120f85a797830f4b77ff1c1097d5886aa7bb67f1c6d7af1bab34bef091d41886159c31fdccdfeef963ed3a7e9c102b6a2065c7d8dc333747ab7d45de778a0f2948b4b0a4c0b5da22e435b7f5db8899195f82f303b27b5045a2675a01ecd83bdf0a02307de6ae7daa63c63211694e56f062c181a636bbd1c97a08aa9e4e2ca4ad469c62c4f3a7d989cdadaa0f3cfe29508b44f8baf5fa4b9e9c47d83ffe59d4d2ba0e420fa5546eeffbc6455f3f5dbb1ab4a93dcc9d6afb92c7181448cf0ee585410b0e32938fc831707a69", 0xec}, {&(0x7f0000000640)="93ff11827c0fb0b3a83cd8eb106469002476502f298a65bca99d4b2cdbeb56816e013006a8b8fb10cec324a1a4492b", 0x2f}, {&(0x7f0000000680)="51a0e16ca42ef5686b526ece277cf3cb7de5fbcfb9fd92dc5e980bf53348a7e27f5beca07f8ca372478078a57e2d9d0e4a66572b92ba9d5da773584d62206761bbcb51b6e5d33849ee3d", 0x4a}], 0x5, &(0x7f0000000780)=[@tclass={{0x14, 0x29, 0x43, 0xca}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x100}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x0, 0x1, 0x0, [@local]}}}, @dstopts={{0x38, 0x29, 0x37, {0x2f, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1a}}, @jumbo={0xc2, 0x4, 0x19}, @jumbo={0xc2, 0x4, 0x1}]}}}, @hopopts={{0x48, 0x29, 0x36, {0x88, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x77}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x10, {0x2, 0x2, 0x80, 0xfff7, [0x4]}}]}}}], 0x108}}, {{&(0x7f00000008c0)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000900)="3604fb0cc2cc8b22715476bb9ae73e1971919f4cbf569784fd647abde516193fce185501f6a857ce1c64e6aebf8a7bfd2b01886117125bf89ed200468220a22edcf245c7ce80effb38df751d78cf140eff5cd92854a54315f33ead12b5038f4359ff6a7838dcaab3c5887749481d7805c85cfd5f19593e69ed6297a05707122edecad9f772e51a8a7fe391173690da62be386f9c60520937ca8487c87e5a5e1ac173c2456e6288f01a8b3cf7d80cad81c52dbee410c39df08f8d1c73d9f1ff9a8b619ac872dacd1dc0443d", 0xcb}, {&(0x7f0000000a00)="8223370a05f025874a2cc25af917108f467566609100c0ef933d4bfde22054fda6cbc067a96fba25c3d9166a238205e4d4b8cf952707d80c92b3fd596784aab6e30f07342e4b9707c446186b9f1558e1c07d18cb667107ce99a62952d36ab8ac5c797e2bd370b6a0e6236c875f7976d89fc4cc3ae60da323218e8b2e9a32b6fd8af7150c8645d851fcfeabec87b2f563df7878ff80507983cece7bb0e74a5de2de7a9ada6e6ca83f8463afd6563a6eeac2c230090248b1ba3aaa0d1c", 0xbc}], 0x2, &(0x7f0000000b00)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x0, 0x7, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0x20, [0x0, 0x101, 0x6, 0x40, 0x57, 0xfffffffffffffff9]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6a}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @rthdr={{0x78, 0x29, 0x39, {0xff, 0xc, 0x0, 0x41, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, @private1, @remote, @local, @mcast1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x128}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c40)="98973cc1f7ac436fbf4d23520b21169f5bee4fd812657cdefa32a2c017a3eeead9c801cb5c48d3398053d5c733e80b9f430ade720374cbfc8337b2ea80947624123a", 0x42}, {&(0x7f0000000cc0)="084726cd563e922dd31b860ba26bb7c8c0fc1118491164746e5321a7219a347d510a174c40a71008cb33f66dcd617621ad92f0dc6515000ea1c7958416c5eae8eec3b96b195b0db2d97d0e62da21aed952d49b228c26645318", 0x59}, {&(0x7f0000000d40)="ee3d89dd9a2b6f2e34f760d132e76469ddfd9f422b0303674aad3a887f3bf91f72b817512c57e245af79de4502b66d031c6d7445ad4fc5d7335678df421130a3395e5c9ba11d790724ef9aa3547c8d38ad7814538158e36a28b9e0a358cbc7424c0c40d9ecf21d1d67cae3c168aadbb672893b5c830ede373128f16fcc66546441abd2fc4a7082ce20baededdafee701e9584741c2a9653a41", 0x99}, {&(0x7f0000000e00)="7ee6edbf", 0x4}, {&(0x7f0000000e40)="3ec3db746c3e5c75c497ff99a7171e7848289d6e2da662d1452b2c820ab6584ec6d0f52a5cb050d5aa8cdaf337ff035ab2951d7089540e40b7321d06602579bdf0a0d866609305fc247a28270efaee64aeb528aac60e3d7c9b3d07174118d8aba6ee5e5be0fbde2363ff04516b8f521d01559aacc0a8b8c52f4de2cfafc6c0dc19dd067170", 0x85}], 0x5, &(0x7f0000000f80)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x5c, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x401}, @enc_lim={0x4, 0x1, 0x9}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @rthdr={{0x78, 0x29, 0x39, {0x21, 0xc, 0x1, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @dev={0xfe, 0x80, '\x00', 0x25}]}}}], 0xd8}}, {{&(0x7f0000001080)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000003480)=[{&(0x7f00000010c0)="44e4f24a2c06b822172c61e763bc91f481a88fc85aee52ef2e4a9dfc327cb20f359283d99831e3d916258b985dbc51f86ef25ccb87715a8f6bb443afef5cff7167799976b3bc38cb5fa386cf9dc45e1c4129c2d260103f987c32bb9d5c9e127d86909a9f3b62b28a476cf5dbf60005a06a4fb7c413baacd0a06ca2ff77a4f15f5291b721ac7305c3d06f0b", 0x8b}, {&(0x7f0000001180)="67b8c19162434f9c113de289accde2d7851098d464cddaa8f97745689d3ba27385041c8d066281e88fbea0362b362b9a91b1df502cdd5976dca2e59456a1d732c384b35f2cbf148184e8ee761bf0d7b4623486f2cf1f4d6719f9ea9e929f1836b79c87e1ee04cf8daf8cce06100d3a03a60e662d2f3ffca281421630d681bc580efa2f99607f82da7ecc76988544518b757197d974570ba6fa93c81a3cbb1a9a4695d19d3d5e8f0aba1f359a3369d08ee442673a59b12fc91c2c8cb524c57d1016ec5f427780779c147f0c224deb09df08c720c00faf92f718c5d63f0e30099afb87421e90344653812ad270", 0xec}, {&(0x7f0000001280)="9c62d6e6967b3acfc9", 0x9}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)}, {&(0x7f0000003300)="de953e14e53d346ef20258214796b38b85730f6cf799b46ea5d4dd1d01d116497ec04a05eb3e8b0ee38d3d1917ade75d2743c5617ecf50a5d0e6c3211179dbd4a90eb182bb31465c1634ed4e475c4c17e42e0a8a1be401fac12c10714169d6b9a354529d15e86a2920e2e33f32d145f6e194f56c7260dea32c8a870a64bbf4", 0x7f}, {&(0x7f0000003380)="605b28a32310efc4544080b96e74a5556f8986708e8d73c3c92e32672daf66c696e8842dff5ac33da8819c521e31af95910fdab03af015eb13a3d97767a01fed9d35bc2fd5fa4d", 0x47}, {&(0x7f0000003400)="b8440b982baf75f6222f8e84f65dd138e29250a4ed541b470729c5d61748afe0fdf0f9444777ea9c290eb2e132fce721d9c8158538d3", 0x36}, {&(0x7f0000003440)="a257c3e720c00906", 0x8}], 0xa, &(0x7f0000003540)=[@dstopts={{0xd8, 0x29, 0x37, {0x3c, 0x18, '\x00', [@generic={0x7f, 0x70, "4d9327699eec71a71162271a4c4934510ad02b023187bcf96586123aa6ef5218f1e8f1174dcb27809b79fd4459f2af117cfe888d511d5a9556fd6f85b998bbda12960434433a56a43c642cff15ff8f8ac48e13a3eb7e1f4f02a3eb69615583dde79e4724bead43ec2229d0faf745123a"}, @generic={0x1, 0x40, "f7d56c05000cab1f4722e41d73ff233140f11d4e937676dd62ae73a8937f20dbc605fc4ed83eaa63f9381eb4b3f8cb5f7dba44656dd40684ec89745eb1c9792f"}, @jumbo={0xc2, 0x4, 0x81}, @jumbo={0xc2, 0x4, 0x2}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x84, 0xc, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0xd0, 0x200, [0x0, 0x7, 0x7, 0x1, 0x5, 0xd4, 0x2]}}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x7f, 0x1824, [0xfffffffffffffff9]}}, @pad1, @jumbo={0xc2, 0x4, 0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x651a}}, @flowinfo={{0x14}}], 0x180}}], 0x5, 0x90) dup2(r0, r1) 04:28:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{0x0}], 0x1) pread64(r0, &(0x7f0000002680)=""/4138, 0x102a, 0x0) flock(r2, 0x5) [ 1959.511235] Process accounting resumed 04:28:01 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x81, 0x9, 0x3, 0x2, 0x0, 0x1, 0x4000, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc4eb, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff9}, 0x800, 0x0, 0x7fff, 0x1, 0x0, 0x7, 0x8, 0x0, 0x9ac, 0x0, 0x800}, 0xffffffffffffffff, 0xe, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) write$P9_RREADLINK(r1, &(0x7f00000001c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 1959.608875] Process accounting resumed [ 1959.772190] Module has invalid ELF structures 04:28:01 executing program 6: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'macvtap0\x00', {0x2, 0x0, @dev}}) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000001c0)={&(0x7f00000002c0)="18ff151661f4c0fe55f2902ed49bb276b1a89cfe95478915cb567ce0667ee26b81cdfa7fcdf61cca43e743cb085fe0ffa4ae901b3afb69bc4c4e18dedb", 0x3d}, 0x1, 0x0, 0x0, 0x4}, 0x11) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x3, 0x6, 0x3, 0x50, 0x0, 0x4, 0x100, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0x6}, 0x1000, 0x9, 0x3, 0x1, 0x800, 0x1200, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x5, r0, 0x9) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000380)='wg0\x00', 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002, 0x9, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0x3) getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e22, 0x1ff, @mcast2, 0xc9c66b3c}, 0x1c) 04:28:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}}, 0x0) [ 1960.233906] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1960.243429] FAULT_INJECTION: forcing a failure. [ 1960.243429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1960.245075] CPU: 1 PID: 12243 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1960.246028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1960.247165] Call Trace: [ 1960.247546] dump_stack+0x107/0x167 [ 1960.248056] should_fail.cold+0x5/0xa [ 1960.248592] _copy_from_user+0x2e/0x1b0 [ 1960.249293] input_event_from_user+0x1dd/0x290 [ 1960.250002] ? input_devices_seq_show+0xfe0/0xfe0 [ 1960.250684] evdev_write+0x257/0x420 [ 1960.251208] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1960.251952] ? security_file_permission+0x24e/0x570 [ 1960.252652] do_iter_write+0x482/0x670 [ 1960.253186] ? import_iovec+0x83/0xb0 [ 1960.253719] vfs_writev+0x1ae/0x5e0 [ 1960.254230] ? vfs_iter_write+0xa0/0xa0 [ 1960.254790] ? __fget_files+0x26d/0x480 [ 1960.255351] ? lock_downgrade+0x6d0/0x6d0 [ 1960.255942] ? find_held_lock+0x2c/0x110 [ 1960.256515] ? __fget_files+0x296/0x480 [ 1960.257066] ? __fget_light+0xea/0x290 [ 1960.257616] do_writev+0x283/0x300 [ 1960.258110] ? vfs_writev+0x5e0/0x5e0 [ 1960.258651] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1960.259310] do_syscall_64+0x33/0x40 [ 1960.259832] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1960.260543] RIP: 0033:0x7f701ebafb19 [ 1960.261061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1960.263595] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1960.264646] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1960.265638] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1960.266619] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1960.267625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1960.268609] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:28:01 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10800, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010700)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010800)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010900)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546494c45302a001a0000000000001a0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b31002a001b0000000000001b28230000000023287809140b2a3a08000000010000010846494c45322e3b31002a001b0000000000001b28230000000023287809140b2a3a08000000010000010846494c45332e3b3100"/288, 0x120, 0xb800}, {&(0x7f0000010b00)="2200180000000000001800080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012a0020000000000000201a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0xc000}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xc800}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0xd000}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x10000}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00781a822dd02b490e4a0f93ffe2778c03dd3fbc031648b3ab20ac00c6f40e5213d3e64ae274d21abb4952b2e1d71c4c572bc2ba4c5d59c304752d6f3857011ef26d028f8ffd4d2f80b6011102000000fba8e83b81a984a1448e2d8b2613d76f8b08414ec938c80a2234e9cf8654ec891e41fd6a76859ab00c348ab4acef3f7aff56b89cdf52f4019a11bd02ff9da01e381a43bfcc8185ad225000c55033edbaa7f38bcb2c49fc98a0c8793b47294e07098aae3d3783140061d254c2741dc0c4337e731c16f1ff590d955c99f0fd8d013170bea658660d660dcc4584e8184f02e4d1d1535881bf4ac3c203395839e01558633e9aec25395f"]) [ 1960.361390] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1960.363524] ext4 filesystem being mounted at /syzkaller-testdir202822690/syzkaller.o0bXZ6/171/file0 supports timestamps until 2038 (0x7fffffff) [ 1975.068947] kmemleak: 10 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:28:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160001"], 0x20}}, 0x0) 04:28:26 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 32) 04:28:26 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}}}, 0x80, 0x0}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r1, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/99, 0x63}], 0x1}}], 0x1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() kcmp(r4, r3, 0x2, r2, 0xffffffffffffffff) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001e00)={0x13f0, 0x32, 0x200, 0x70bd26, 0x25dfdbfb, {0x13}, [@typed={0xe, 0x29, 0x0, 0x0, @str='net/nfsfs\x00'}, @typed={0x8, 0x37, 0x0, 0x0, @pid=r4}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x1000}, @nested={0x1052, 0x3, 0x0, 0x1, [@generic="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", @generic="80e6640ee66f10a4a74357eb7b0147513e03f3104874ac967d658035e950330334fc5012a99edea9b333cb3514c10257bf5c7ee1b43245c3218b970b485c4dc650b7ffed470f55208d89", @typed={0x4, 0x70}]}, @nested={0xca, 0x55, 0x0, 0x1, [@generic="adcb1cd60f81b70a0e861bc48d981ebd40b4e512564c5787301b7df76c2e499fe1fa08e1db442989be0ea16d3dd2a012d235bdfb792d7a93b7474c125da1779651492e131a1ab9c8aaa1e2bc2ff9f3f2e16b", @generic="cda6f15a81f6c43155523f288084d7d4f4f7fa13e81a8da3ad815794e0d45be5ba81af5c5e45db8731c9af71f69e6d5c12dcdb893aa9d2bb214e4f049784455d67a9c8a8abf5aed6889db802f81bfaad491bc5c653c916661843080ac9ce9a03ff70e8187d3dfcda4bdc371d7a220bfb657dc082"]}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r5}, @nested={0x130, 0x28, 0x0, 0x1, [@generic="fc5184e1ce50f08ea8f478b3cd9052c1c4ad488b8efd45f98e4e387c655e8b482711a80c", @typed={0x8, 0x84, 0x0, 0x0, @fd=r1}, @generic="c32b661e4658e1d8d9ac263d0018579e54e7e5adcbfc4380abb1ed70764d9374f5c82dd3657aa93b36250908f733494310bd448ab8c830c65bb5e1b1721354f2c2c0e2eb0ce36e27c37b7c4444ab6e4ce55687eff44e413d810cd14a850b39d207a9d97e2b5e60f8e07e16f71166c0a6144a4fb8dc3f0e09900bec8eed44063ec6873c188e76ec551c7115a42f229a3e35f94fab49564a3bd30dd10af667d1088ffe581c4614d25569be22be3fa83ad2d397aeceab72805bb964832cc55a6a99a66f4a1b8d13ae3545db4cb5a1b0aa1442e8f5f157f4bb8c0d126bf449d2ff494de6046c4965c8e9", @typed={0x8, 0x82, 0x0, 0x0, @fd=r0}, @typed={0xd, 0x40, 0x0, 0x0, @str='^$\x8e:./()\x00'}]}, @typed={0x4, 0x10}, @generic="3fcc8f36e108439cfeba240e99e38fe06becd43d98fcbf8030a0304476f64d802c0f0c8a28e44d6dad648190abb7a65ad796beab76b92e5f82d15f552b515d002391ca88c280c9e5695ff26cff2915a6062638a015156ad4e771ca5b5abaefc93b3198d2c59c964f98832a86a638a5f466b26b2673b0efd468d1f685b15149a19461b93208fb56f3b5cf6c22ae16647afa45c8051316efa3ce7160d982df513286749282f0c9dcdb140799e8d66fceaef1c3dd0ddd2ef96cbe9e358605346b0926bd417d5af9e6a47a8300d719237ddbb2399a5ec1307c68cdfe2563adacbf8996157616e0f1979c2a89f1e432b4fd07ecca084dfb", @typed={0x61, 0x93, 0x0, 0x0, @binary="0a4376aeda7b7f102e7ba401812d4b032439d27555650075603f05bcd0db711fb698e3deaf4c7db0ab273e7b41ec5f11ccdcc8d5f5f31dfb7c56a6ba67b032fba5b25601be8358f27a128c189200dbd409ace1d3e2542aaec9b3210814"}]}, 0x13f0}, 0x1, 0x0, 0x0, 0x4841}, 0x4084) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/nfsfs\x00') getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000080)=0x2, &(0x7f0000000180)=0x4) dup2(r6, r0) 04:28:26 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=@acquire={0x244, 0x17, 0x8, 0x70bd2b, 0x25dfdbff, {{@in=@rand_addr=0x64010101, 0x4d5, 0xff}, @in6=@private0, {@in6=@empty, @in6=@mcast1, 0x4e22, 0x2, 0x4e21, 0x81, 0xa, 0x80, 0xa0, 0x35, 0x0, r0}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x4e20, 0x0, 0x4e23, 0x100, 0xa, 0x20, 0x80, 0x32, 0x0, 0xffffffffffffffff}, {0x8, 0x1, 0x0, 0x7, 0x6, 0x8, 0xeb, 0x6c8d75d3}, {0xfffffffffffffff7, 0xfffffffffffffff7, 0x8, 0xf7b}, 0x7, 0x6e6bb2, 0x2, 0x0, 0x2, 0x1}, 0x4, 0x80, 0x9, 0x70bd2a}, [@address_filter={0x28, 0x1a, {@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xa, 0x4, 0xc5}}, @sa={0xe4, 0x6, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x4e24, 0x6, 0x4e24, 0x7ff, 0xa, 0x20, 0xa0, 0x89, 0x0, r1}, {@in6=@mcast2, 0x2, 0x3c}, @in6=@empty, {0x89, 0xfa, 0x40, 0x5, 0x2, 0x3, 0x9096, 0xfffffffffffffff8}, {0x1000, 0x7, 0x7, 0xff}, {0x4, 0x0, 0x4}, 0x70bd25, 0x34ff, 0xa, 0x1, 0x8, 0x1}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2a, 0x3}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x10a903, 0x0) dup2(r2, r3) 04:28:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, @in_args={0x1}}, './file0/file1\x00'}) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@loopback, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100046, r6}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={@loopback, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100046, r9}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="24020000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf25040000004400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020065727370616e300000000000000000001400020073797a5f74756e00000000000000000050000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020074756e6c30000000000000000000000008000100", @ANYRESOCT=r3, @ANYBLOB="08000100", @ANYRES16=r0, @ANYBLOB="0800030001000000280001801400020076657468315f746f5f62617461647600080003000000000008000300000000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002007369743000000000000000000000000014000200766c616e30000000000000000000000914000200697036746e6c30000000000000000000140002006d6163736563300000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="20000180140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="900001801400020073797a6b616c6c657230000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f627269646765001400020076657468305f746f5f6272696467650008000100", @ANYRES32=r6, @ANYBLOB="3c000180140002000000000000000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="0800030001000000140002007663616e3000"/28], 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x8d0) setresuid(0x0, r2, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x8, 0x0, &(0x7f00000001c0), 0x80b0, &(0x7f0000000200)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}) unlink(&(0x7f0000000140)='./file0/file1\x00') 04:28:26 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000010000)="601c6d6b646f7366805d8600080801", 0xf, 0x2}, {0x0, 0x0, 0x7ff}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="736d61636b6673726f6f743d7666617427445f86039ba2a8b0191296c244ae498a3cdb23e7d82cab9a1c1ccf38ad545addee66008f8408a1a9cfde8de9bdb1d51e97e897de8ada49c98b06f454b4afecd8aa5fcbad370867e8de69625a2107761583c5006ebcaa609734202b88f93309189f010317883aa8267fd1b9c65b3cf470ee707e3e5136d019a8ef41fb"]) chdir(&(0x7f0000000040)='./file0/file0\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x4282, 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x7, 0x2, 0x5, 0x1}) fallocate(r2, 0x0, 0x0, 0x8008000) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000280)=0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0/file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x26090) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r5, r6], 0x2) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@loopback, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100046, r8}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc4}, 0x4000004) openat(r2, &(0x7f0000000080)='./file0/file0\x00', 0x40001, 0x10) 04:28:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="3e3fc2db0956", 0x6}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x20, 0x2a, 0x878c5bf8df414e27, 0x0, 0x0, {0x3}, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x20}}, 0x12) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000040)=""/193, 0xc1}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r2) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) acct(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44801) 04:28:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f00000001c0)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES64=r1]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x105142, 0x1a1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 1984.876217] FAULT_INJECTION: forcing a failure. [ 1984.876217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1984.878747] CPU: 1 PID: 12274 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1984.880169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1984.881861] Call Trace: [ 1984.882425] dump_stack+0x107/0x167 [ 1984.883222] should_fail.cold+0x5/0xa [ 1984.884020] _copy_from_user+0x2e/0x1b0 [ 1984.884862] input_event_from_user+0x1dd/0x290 [ 1984.885795] ? input_devices_seq_show+0xfe0/0xfe0 [ 1984.886797] evdev_write+0x257/0x420 [ 1984.887569] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1984.888655] ? security_file_permission+0x24e/0x570 [ 1984.889691] do_iter_write+0x482/0x670 [ 1984.890498] ? import_iovec+0x83/0xb0 [ 1984.891285] vfs_writev+0x1ae/0x5e0 [ 1984.892056] ? vfs_iter_write+0xa0/0xa0 [ 1984.892866] ? __fget_files+0x26d/0x480 [ 1984.893683] ? lock_downgrade+0x6d0/0x6d0 [ 1984.894536] ? find_held_lock+0x2c/0x110 [ 1984.895385] ? __fget_files+0x296/0x480 [ 1984.896224] ? __fget_light+0xea/0x290 [ 1984.897029] do_writev+0x283/0x300 [ 1984.897760] ? vfs_writev+0x5e0/0x5e0 [ 1984.898550] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1984.899545] do_syscall_64+0x33/0x40 [ 1984.900326] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1984.901378] RIP: 0033:0x7f701ebafb19 [ 1984.902140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1984.905899] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1984.907454] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1984.908933] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1984.910406] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1984.911898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1984.913374] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:28:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160001"], 0x20}}, 0x0) [ 1984.968759] FAT-fs (loop6): Unrecognized mount option "" or missing value 04:28:26 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 33) [ 1985.079977] FAULT_INJECTION: forcing a failure. [ 1985.079977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1985.082058] CPU: 1 PID: 12294 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 1985.083329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1985.084868] Call Trace: [ 1985.085362] dump_stack+0x107/0x167 [ 1985.086047] should_fail.cold+0x5/0xa [ 1985.086754] _copy_from_user+0x2e/0x1b0 [ 1985.087492] input_event_from_user+0x1dd/0x290 [ 1985.088318] ? input_devices_seq_show+0xfe0/0xfe0 [ 1985.089063] evdev_write+0x257/0x420 [ 1985.089637] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 1985.090449] ? security_file_permission+0x24e/0x570 [ 1985.091220] do_iter_write+0x482/0x670 [ 1985.091812] ? import_iovec+0x83/0xb0 [ 1985.092403] vfs_writev+0x1ae/0x5e0 [ 1985.092952] ? vfs_iter_write+0xa0/0xa0 [ 1985.093576] ? __fget_files+0x26d/0x480 [ 1985.094195] ? lock_downgrade+0x6d0/0x6d0 [ 1985.094843] ? find_held_lock+0x2c/0x110 [ 1985.095491] ? __fget_files+0x296/0x480 [ 1985.096144] ? __fget_light+0xea/0x290 [ 1985.096744] do_writev+0x283/0x300 [ 1985.097295] ? vfs_writev+0x5e0/0x5e0 [ 1985.097889] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1985.098630] do_syscall_64+0x33/0x40 [ 1985.099210] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1985.100012] RIP: 0033:0x7f701ebafb19 [ 1985.100595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1985.103590] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1985.104843] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 1985.106021] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 1985.107179] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 1985.108349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1985.109511] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 1985.127936] FAT-fs (loop6): Unrecognized mount option "" or missing value 04:28:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x0, 0xae, 0x3f, 0x0, 0xcac, 0xc8007, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x4, 0x4, 0x6, 0x0, 0x100, 0x0, 0x6, 0x0, 0x101, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x1) 04:28:26 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_NOP={0x0, 0x5}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000001a40)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}, 0x8001) syz_io_uring_setup(0x1158, &(0x7f0000000000)={0x0, 0x640f, 0x2, 0x3, 0xae}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r5 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x9, 0x0, 0x0, 0xa0d800, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r6, 0x4) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfff) syz_io_uring_submit(r4, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, &(0x7f00000001c0)="9d20a23d0c8394", 0x9, 0x0, 0x1, {0x1}}, 0xf9) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:28:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x10, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='.\x00', 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) readv(r1, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)=""/108, 0x6c}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r2, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x1b) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x2, 0x1000002) 04:28:26 executing program 6: syz_io_uring_setup(0x3134, &(0x7f0000000040), &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x660d, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') io_uring_enter(r0, 0x1a58, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000100)) [ 2000.287917] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:28:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'sit0\x00', &(0x7f00000001c0)=@ethtool_per_queue_op={0x4b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}) sendto$inet(r0, &(0x7f0000000040)="705f74e6486dc3b97384", 0xa, 0x4000, 0x0, 0x0) 04:28:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160001"], 0x20}}, 0x0) 04:28:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001780)={0x1, 0x80, 0xff, 0x1, 0xe0, 0x71, 0x0, 0x6, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000001740)}, 0x8, 0x5, 0x0, 0x6, 0x4, 0xe5, 0x1ff, 0x0, 0x91, 0x0, 0xffffffffffff834d}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r3 = dup3(r2, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) recvmsg$unix(r1, &(0x7f0000001640)={&(0x7f0000000240), 0x6e, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/25, 0x19}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x6, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x1) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x102000, &(0x7f0000001680)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@privport}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@access_uid={'access', 0x3d, r5}}, {@mmap}], [{@permit_directio}, {@permit_directio}]}}) 04:28:51 executing program 6: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400a00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00e60004000000000d0000000000007b828f25ec5b0000"], 0x1c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xfe, 0x4, 0x7, 0x9, 0x0, 0xff, 0x2000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x10008, 0x8, 0x0, 0x7, 0xffffffff, 0x2, 0x803e, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x4, r1, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) write$binfmt_script(r3, 0x0, 0x1030) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff7, 0x100000001}) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000057c0)={0x0, 0x3, 0x2, 0x80000000}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) 04:28:51 executing program 0: rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000014c0)=0x73c, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfff, @mcast1, 0x8000}, 0x1c) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 04:28:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b09339379cac73915d508ab7c", 0x2}, 0x48, 0xfffffffffffffffe) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) keyctl$invalidate(0x15, r1) keyctl$set_timeout(0xf, r1, 0x0) keyctl$chown(0x4, r1, 0x0, 0xee01) r2 = getegid() setgid(r2) keyctl$chown(0x4, r1, 0xee01, r2) pwrite64(r0, 0x0, 0x0, 0xd1) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00', &(0x7f0000000280), 0x60002, &(0x7f00000002c0)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x2}}, {@cache_mmap}, {@aname={'aname', 0x3d, 'logon\x00'}}], [{@subj_type}, {@subj_user={'subj_user', 0x3d, '\'+.)$!'}}, {@subj_type={'subj_type', 0x3d, 'e8dab99234bb312e'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsmagic={'fsmagic', 0x3d, 0x7ff}}, {@subj_role={'subj_role', 0x3d, ')))$\\\xee.[-!]@,'}}, {@dont_measure}, {@uid_lt}, {@measure}]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="00a49e88f7f512fd87", 0x9, 0x800}, {&(0x7f0000000140)="ed41000000080000dff4655fe003655fe0f4655f0000", 0x16, 0x1000002100}], 0x0, &(0x7f00000003c0)={[{@nomblk_io_submit}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 04:28:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x10, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='.\x00', 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) readv(r1, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)=""/108, 0x6c}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r2, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x1b) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x2, 0x1000002) 04:28:51 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 34) [ 2010.211832] FAULT_INJECTION: forcing a failure. [ 2010.211832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2010.211856] CPU: 1 PID: 12355 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2010.211866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2010.211873] Call Trace: [ 2010.211905] dump_stack+0x107/0x167 [ 2010.211936] should_fail.cold+0x5/0xa [ 2010.211964] _copy_from_user+0x2e/0x1b0 [ 2010.221351] input_event_from_user+0x1dd/0x290 [ 2010.221372] ? input_devices_seq_show+0xfe0/0xfe0 [ 2010.221409] evdev_write+0x257/0x420 [ 2010.221438] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2010.221462] ? security_file_permission+0x24e/0x570 [ 2010.221498] do_iter_write+0x482/0x670 [ 2010.221527] ? import_iovec+0x83/0xb0 [ 2010.221553] vfs_writev+0x1ae/0x5e0 [ 2010.221575] ? vfs_iter_write+0xa0/0xa0 [ 2010.221591] ? __fget_files+0x26d/0x480 [ 2010.221615] ? lock_downgrade+0x6d0/0x6d0 [ 2010.221630] ? find_held_lock+0x2c/0x110 [ 2010.221666] ? __fget_files+0x296/0x480 [ 2010.221700] ? __fget_light+0xea/0x290 [ 2010.221726] do_writev+0x283/0x300 [ 2010.221746] ? vfs_writev+0x5e0/0x5e0 [ 2010.221774] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2010.221800] do_syscall_64+0x33/0x40 [ 2010.221820] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2010.221833] RIP: 0033:0x7f701ebafb19 [ 2010.221852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 04:28:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x11}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x1c, 0x0, 0x12, 0x4, 0x8f6, 0x1, 0x15b}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000380), 0x0, 0x400}, {0x0}], 0x1000, &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, 0xffffffffffffffff, 0x10000000) socket$nl_xfrm(0x10, 0x3, 0x6) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 04:28:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./mnt\x00') ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0x6, 0xbf, 0x99, 0x0, 0x3, 0x21, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1, @perf_config_ext={0x5e4, 0x2}, 0x10000, 0x2, 0x81, 0x5, 0x40, 0x2, 0x100, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xa, r1, 0x10) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) socket$nl_audit(0x10, 0x3, 0x9) unlinkat(r0, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') [ 2010.221863] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 04:28:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./mnt/file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) lgetxattr(&(0x7f0000000000)='mnt/encrypted_dir\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) [ 2010.221884] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 04:28:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 1) [ 2010.221896] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2010.221906] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2010.221917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2010.221928] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2010.313794] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:28:52 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 35) 04:28:52 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6cbd696e7465726c656176653d72656c61746936653a302d303a312f302c00e200caa1617c093979ac3ca7c4e680b3fa6a1706cb"]) open$dir(&(0x7f00000000c0)='./file0\x00', 0x282003, 0xad) 04:28:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000014c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[]) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "9fd5ef144997c4721823dba854c667e43845f1e2ebe7220fba3828e2f310c523e575b1c2f6071fe97d998460d178e3554c035b3f3a5cb9867be03bfd91811c07", 0x11}, 0x48, r2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$unlink(0x9, 0x0, 0x0) [ 2010.821376] tmpfs: Unknown parameter 'mpol½interleave' [ 2010.825954] tmpfs: Unknown parameter 'mpol½interleave' [ 2010.858257] FAULT_INJECTION: forcing a failure. [ 2010.858257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2010.860824] CPU: 0 PID: 12384 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2010.862231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2010.863928] Call Trace: [ 2010.864499] dump_stack+0x107/0x167 [ 2010.865245] should_fail.cold+0x5/0xa [ 2010.866046] _copy_from_user+0x2e/0x1b0 [ 2010.866885] __copy_msghdr_from_user+0x91/0x4b0 [ 2010.867835] ? __ia32_sys_shutdown+0x80/0x80 [ 2010.868765] ? perf_trace_lock+0xac/0x490 [ 2010.869643] ? __lock_acquire+0xbb1/0x5b00 [ 2010.870504] sendmsg_copy_msghdr+0xa1/0x160 [ 2010.871400] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2010.872474] ? perf_trace_lock+0xac/0x490 [ 2010.873309] ? SOFTIRQ_verbose+0x10/0x10 [ 2010.874126] ? __lockdep_reset_lock+0x180/0x180 [ 2010.875058] ? perf_trace_lock+0xac/0x490 [ 2010.875889] ? SOFTIRQ_verbose+0x10/0x10 [ 2010.876723] ___sys_sendmsg+0xc6/0x170 [ 2010.877505] ? sendmsg_copy_msghdr+0x160/0x160 [ 2010.878432] ? __fget_files+0x26d/0x480 [ 2010.879224] ? lock_downgrade+0x6d0/0x6d0 [ 2010.880067] ? find_held_lock+0x2c/0x110 [ 2010.880901] ? __fget_files+0x296/0x480 [ 2010.881720] ? __fget_light+0xea/0x290 [ 2010.882528] __sys_sendmsg+0xe5/0x1b0 [ 2010.883290] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2010.884176] ? rcu_read_lock_any_held+0x75/0xa0 [ 2010.885113] ? fput_many+0x2f/0x1a0 [ 2010.885866] ? ksys_write+0x1a9/0x260 [ 2010.886642] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2010.887633] do_syscall_64+0x33/0x40 [ 2010.888387] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2010.889435] RIP: 0033:0x7f7d08ed6b19 [ 2010.890192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2010.893891] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2010.895398] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2010.896837] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2010.898267] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2010.899679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2010.901102] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2010.955686] FAULT_INJECTION: forcing a failure. [ 2010.955686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2010.958208] CPU: 1 PID: 12388 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2010.958219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2010.958226] Call Trace: [ 2010.958252] dump_stack+0x107/0x167 [ 2010.958277] should_fail.cold+0x5/0xa [ 2010.958305] _copy_from_user+0x2e/0x1b0 [ 2010.958332] input_event_from_user+0x1dd/0x290 [ 2010.958352] ? input_devices_seq_show+0xfe0/0xfe0 [ 2010.958393] evdev_write+0x257/0x420 [ 2010.958422] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2010.958445] ? security_file_permission+0x24e/0x570 [ 2010.958482] do_iter_write+0x482/0x670 [ 2010.958511] ? import_iovec+0x83/0xb0 [ 2010.958537] vfs_writev+0x1ae/0x5e0 [ 2010.958559] ? vfs_iter_write+0xa0/0xa0 [ 2010.958574] ? __fget_files+0x26d/0x480 [ 2010.958599] ? lock_downgrade+0x6d0/0x6d0 [ 2010.958614] ? find_held_lock+0x2c/0x110 [ 2010.958650] ? __fget_files+0x296/0x480 [ 2010.958684] ? __fget_light+0xea/0x290 [ 2010.958710] do_writev+0x283/0x300 [ 2010.958730] ? vfs_writev+0x5e0/0x5e0 [ 2010.958758] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2010.958785] do_syscall_64+0x33/0x40 [ 2010.958813] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2010.980809] RIP: 0033:0x7f701ebafb19 [ 2010.980828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2010.980839] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2010.980861] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2010.980872] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2010.980883] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2010.980894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2010.980905] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2011.029589] FAT-fs (loop5): bogus number of reserved sectors [ 2011.029604] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2011.075729] FAT-fs (loop5): bogus number of reserved sectors [ 2011.077290] FAT-fs (loop5): Can't find a valid FAT filesystem 04:29:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000100)=""/27, 0x1b, 0x93) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000040)=0xfffffffa, 0x4) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0xffffffff}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) dup2(r0, r2) 04:29:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$nl_generic(r0, &(0x7f00000014c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f00000001c0)={0x64, 0x1c, 0x400, 0x70bd29, 0x25dfdbfd, {0x19}, [@generic="c45a46654f7dacd7258ab0adabc32095c39d85c236", @nested={0x25, 0x3d, 0x0, 0x1, [@generic="e28cce74824c13916c134b1f6a26b70181dad746511b4b70ae3d07d46c97af35d3"]}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x39, 0x0, 0x0, @u32=0x3f}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044814}, 0x24044855) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140), 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="152368736311880600000000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) 04:29:08 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 36) 04:29:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./mnt\x00') ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0x6, 0xbf, 0x99, 0x0, 0x3, 0x21, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1, @perf_config_ext={0x5e4, 0x2}, 0x10000, 0x2, 0x81, 0x5, 0x40, 0x2, 0x100, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xa, r1, 0x10) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) socket$nl_audit(0x10, 0x3, 0x9) unlinkat(r0, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') 04:29:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fallocate(r0, 0x40, 0x6, 0x6) 04:29:08 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x4, 0xffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2, @ANYRES16, @ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB="e7dbb59c1161a248a2ffa8e5d38d92f69b467af6410bd94bbdea961832ac9b60caac4699b58fe77f1ba56861da5d6384031de9435495febca0249eecaa7a44d7eb7058a23f09684a22e6661ff7ebd25e011b0ec7d4b05f706307c8b760e34e67f89f12bcb99ae93b1cdf7c4d38ab6eaa3c0babf65859e3cf19a4bec3da3c38e6798188b009fa20905cccad741956f3765c0c5d905ca442b66a203591c7d2a525240e77d13304f716058d6d3e7793d40473e4e506cbfd5060e4a8ecc928c16caadc947e5c5a184b4fe2"], 0xfdef) unshare(0x38030600) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(r4, &(0x7f0000000380)='./file0\x00', 0x80040, 0x11) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = open_tree(r0, &(0x7f0000000300)='./file0\x00', 0x81001) openat(r6, &(0x7f0000000340)='./file0\x00', 0x100, 0x104) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) preadv2(r5, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000180)=""/9, 0x9}, {&(0x7f00000001c0)=""/108, 0x6c}], 0x3, 0x400, 0xebcb, 0x0) 04:29:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 2) 04:29:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011700)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r2, 0x627, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000090}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x14}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000005c0)=0x7fff, 0x4) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x800000, &(0x7f0000000340)={'trans=unix,', {[{@aname={'aname', 0x3d, 'iso9660\x00'}}, {@access_any}, {@cache_loose}, {@noextend}, {@access_uid={'access', 0x3d, r0}}, {@access_user}, {@debug={'debug', 0x3d, 0x8}}, {@posixacl}, {@cache_none}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x39, 0x61, 0x36, 0x62, 0x35, 0x31, 0x39], 0x2d, [0x61, 0x65, 0x35, 0x30], 0x2d, [0x32, 0x66, 0x61, 0x66], 0x2d, [0x30, 0x32, 0x63, 0x61], 0x2d, [0x32, 0x32, 0x39, 0x61, 0x33, 0x66, 0x31, 0x62]}}}, {@subj_role={'subj_role', 0x3d, '\'#W:\xfd%'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'iso9660\x00'}}]}}) [ 2027.234834] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2027.248331] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2027.259790] FAULT_INJECTION: forcing a failure. [ 2027.259790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2027.262450] CPU: 1 PID: 12412 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2027.264039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.265836] Call Trace: [ 2027.266389] dump_stack+0x107/0x167 [ 2027.267163] should_fail.cold+0x5/0xa [ 2027.267955] _copy_from_user+0x2e/0x1b0 [ 2027.268899] input_event_from_user+0x1dd/0x290 [ 2027.269977] ? input_devices_seq_show+0xfe0/0xfe0 [ 2027.271008] evdev_write+0x257/0x420 [ 2027.271837] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2027.273106] ? security_file_permission+0x24e/0x570 [ 2027.274220] do_iter_write+0x482/0x670 [ 2027.275113] ? import_iovec+0x83/0xb0 [ 2027.275985] vfs_writev+0x1ae/0x5e0 [ 2027.276832] ? vfs_iter_write+0xa0/0xa0 [ 2027.277739] ? __fget_files+0x26d/0x480 [ 2027.278666] ? lock_downgrade+0x6d0/0x6d0 [ 2027.279661] ? find_held_lock+0x2c/0x110 [ 2027.280588] ? __fget_files+0x296/0x480 [ 2027.281507] ? __fget_light+0xea/0x290 [ 2027.282475] do_writev+0x283/0x300 [ 2027.283200] ? vfs_writev+0x5e0/0x5e0 [ 2027.283988] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2027.284994] do_syscall_64+0x33/0x40 [ 2027.285767] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2027.286816] RIP: 0033:0x7f701ebafb19 [ 2027.287578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2027.291331] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2027.292899] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2027.294349] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2027.295803] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2027.297273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2027.298744] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2027.314143] FAULT_INJECTION: forcing a failure. [ 2027.314143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2027.316809] CPU: 1 PID: 12415 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2027.318328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.320027] Call Trace: [ 2027.320579] dump_stack+0x107/0x167 [ 2027.321328] should_fail.cold+0x5/0xa [ 2027.322120] _copy_from_user+0x2e/0x1b0 [ 2027.323050] iovec_from_user+0x141/0x400 [ 2027.324100] __import_iovec+0x67/0x590 [ 2027.324904] ? __ia32_sys_shutdown+0x80/0x80 [ 2027.325916] ? perf_trace_lock+0xac/0x490 [ 2027.326881] import_iovec+0x83/0xb0 [ 2027.327622] sendmsg_copy_msghdr+0x131/0x160 [ 2027.328632] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2027.329749] ? perf_trace_lock+0xac/0x490 [ 2027.330643] ? __lockdep_reset_lock+0x180/0x180 [ 2027.331574] ? perf_trace_lock+0xac/0x490 [ 2027.332440] ? SOFTIRQ_verbose+0x10/0x10 [ 2027.333270] ___sys_sendmsg+0xc6/0x170 [ 2027.334067] ? sendmsg_copy_msghdr+0x160/0x160 [ 2027.334987] ? __fget_files+0x26d/0x480 [ 2027.335796] ? lock_downgrade+0x6d0/0x6d0 [ 2027.336648] ? find_held_lock+0x2c/0x110 [ 2027.337492] ? __fget_files+0x296/0x480 [ 2027.338311] ? __fget_light+0xea/0x290 [ 2027.339115] __sys_sendmsg+0xe5/0x1b0 [ 2027.339879] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2027.340760] ? rcu_read_lock_any_held+0x75/0xa0 [ 2027.341712] ? fput_many+0x2f/0x1a0 [ 2027.342458] ? ksys_write+0x1a9/0x260 [ 2027.343246] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2027.344235] do_syscall_64+0x33/0x40 [ 2027.345002] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2027.346057] RIP: 0033:0x7f7d08ed6b19 [ 2027.346804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2027.350560] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2027.352077] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2027.353543] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2027.355008] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2027.356488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2027.357935] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2027.403777] isofs_fill_super: root inode is not a directory. Corrupted media? [ 2027.423354] 9pnet: p9_fd_create_unix (12419): problem connecting socket: ./file0: -111 [ 2027.427147] Process accounting resumed 04:29:09 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000440)={{r0}, 0x9, 0x401, 0x10001}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) sendmsg$nl_xfrm(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)=@getae={0x4c, 0x1f, 0x20, 0x70bd2c, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0xa, 0x85214112f556ed61}, @in=@empty, 0xc0d, 0x3500}, [@offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {0x80000001}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}]}, 0x148}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48010000100001000000000000170400000000000000000000000000f70e251019fc7800000097f6874977caf03787537201fe8000000000000000000000000000aa000000000000000000505e2fa5e3b2e24267acfdb9cccfc3ebaf024fe4890aa7f70456080deaf87ca4eb1be1c5378e97000600f930d417feffb563f9db2a9b2678130819406df738152edb2466b2c27133e32cc3740574d4e3fdffe59f253be70f384394691e11c7c4002f590529c874089ac7066e279b75f89d7b2cd71a9242ab5b3afcae9183217cdf6965227031a3589dcac03021ff7cd600be", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRESHEX=r2], 0x148}}, 0x0) dup2(r1, 0xffffffffffffffff) dup(r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS(r4, 0x541b, 0x0) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000001740)={@remote}, 0x14) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'veth0_macvtap\x00', 0x3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000014c0)={{0x96ca, 0x3}, 0x100, './file0\x00'}) [ 2027.470512] isofs_fill_super: root inode is not a directory. Corrupted media? 04:29:09 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 37) [ 2027.511726] Process accounting resumed [ 2027.531645] audit: type=1400 audit(1668832149.190:72): avc: denied { relabelto } for pid=12404 comm="syz-executor.6" name="file1" dev="sda" ino=16099 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 04:29:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 3) 04:29:09 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x3f, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}]}) accept$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x9, 0x2, 0xff, 0x1, 0xff, 0x3}, &(0x7f0000000140)=0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 2027.658638] FAULT_INJECTION: forcing a failure. [ 2027.658638] name failslab, interval 1, probability 0, space 0, times 1 [ 2027.660973] CPU: 1 PID: 12434 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2027.662380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.664086] Call Trace: [ 2027.664652] dump_stack+0x107/0x167 [ 2027.665401] should_fail.cold+0x5/0xa [ 2027.666180] ? __alloc_skb+0x6d/0x620 [ 2027.666963] should_failslab+0x5/0x20 [ 2027.667740] kmem_cache_alloc_node+0x55/0x370 [ 2027.668668] __alloc_skb+0x6d/0x620 [ 2027.669418] netlink_sendmsg+0x98e/0xdf0 [ 2027.670254] ? netlink_unicast+0x7f0/0x7f0 [ 2027.671131] ? netlink_unicast+0x7f0/0x7f0 [ 2027.671998] sock_sendmsg+0x154/0x190 [ 2027.672789] ____sys_sendmsg+0x70d/0x870 [ 2027.673623] ? kernel_sendmsg+0x50/0x50 [ 2027.674429] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2027.675356] ? perf_trace_lock+0xac/0x490 [ 2027.676208] ? __lockdep_reset_lock+0x180/0x180 [ 2027.677170] ? perf_trace_lock+0xac/0x490 [ 2027.678015] ? SOFTIRQ_verbose+0x10/0x10 [ 2027.678847] ___sys_sendmsg+0xf3/0x170 [ 2027.679642] ? sendmsg_copy_msghdr+0x160/0x160 [ 2027.680590] ? lock_downgrade+0x6d0/0x6d0 [ 2027.681439] ? find_held_lock+0x2c/0x110 [ 2027.682276] ? __fget_files+0x296/0x480 [ 2027.683104] ? __fget_light+0xea/0x290 [ 2027.683905] __sys_sendmsg+0xe5/0x1b0 [ 2027.684701] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2027.685577] ? rcu_read_lock_any_held+0x75/0xa0 [ 2027.686557] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2027.687547] do_syscall_64+0x33/0x40 [ 2027.688310] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2027.689380] RIP: 0033:0x7f7d08ed6b19 [ 2027.690144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2027.693936] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2027.695491] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2027.696980] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2027.698453] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2027.699923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2027.701389] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2027.741402] FAULT_INJECTION: forcing a failure. [ 2027.741402] name fail_usercopy, interval 1, probability 0, space 0, times 0 04:29:09 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x8001, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000180)=[r2, r3]}, 0x2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bond_slave_0\x00'}) r4 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x1) dup3(r4, r0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$KDDISABIO(r5, 0x4b37) [ 2027.744285] CPU: 1 PID: 12437 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2027.745881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2027.747586] Call Trace: [ 2027.748132] dump_stack+0x107/0x167 [ 2027.748903] should_fail.cold+0x5/0xa [ 2027.749685] _copy_from_user+0x2e/0x1b0 [ 2027.750507] input_event_from_user+0x1dd/0x290 [ 2027.751438] ? input_devices_seq_show+0xfe0/0xfe0 [ 2027.752452] evdev_write+0x257/0x420 [ 2027.753223] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2027.754301] ? security_file_permission+0x24e/0x570 [ 2027.755335] do_iter_write+0x482/0x670 [ 2027.756145] ? import_iovec+0x83/0xb0 [ 2027.756953] vfs_writev+0x1ae/0x5e0 [ 2027.757712] ? vfs_iter_write+0xa0/0xa0 [ 2027.758519] ? __fget_files+0x26d/0x480 [ 2027.759340] ? lock_downgrade+0x6d0/0x6d0 [ 2027.760185] ? find_held_lock+0x2c/0x110 [ 2027.761037] ? __fget_files+0x296/0x480 [ 2027.761867] ? __fget_light+0xea/0x290 [ 2027.762674] do_writev+0x283/0x300 [ 2027.763401] ? vfs_writev+0x5e0/0x5e0 [ 2027.764195] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2027.765202] do_syscall_64+0x33/0x40 [ 2027.765969] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2027.767016] RIP: 0033:0x7f701ebafb19 [ 2027.767777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2027.771523] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2027.773083] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2027.774537] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2027.775985] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2027.777442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2027.778897] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:29:09 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x1c, 0x0, 0x12, 0x4, 0x0, 0x1, 0x15b}) dup2(0xffffffffffffffff, r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x549, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000040)={[], [{@fsname={'fsname', 0x3d, 'ext4\x00'}}]}) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, 0xffffffffffffffff, 0x10000000) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 04:29:09 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) finit_module(r0, &(0x7f0000000040)='\x00', 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10) 04:29:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x17}}, './file0\x00'}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x800005, 0x0, 0x8000, 0x0, 0xfffffffb}) unshare(0x48020200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000340)) r3 = inotify_init() ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000100)={0x477, 0x5, 0x3ff, 0x0, 0x4}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) [ 2027.898891] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. 04:29:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 4) [ 2027.970194] audit: type=1400 audit(1668832149.629:73): avc: denied { getattr } for pid=286 comm="syz-executor.6" path="/syzkaller-testdir202822690/syzkaller.o0bXZ6/175/file1" dev="sda" ino=16099 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 [ 2027.976803] audit: type=1400 audit(1668832149.629:74): avc: denied { unlink } for pid=286 comm="syz-executor.6" name="file1" dev="sda" ino=16099 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=file permissive=1 04:29:09 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 38) [ 2028.099356] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2028.154750] FAULT_INJECTION: forcing a failure. [ 2028.154750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2028.154772] CPU: 1 PID: 12458 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2028.154783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2028.154790] Call Trace: [ 2028.154817] dump_stack+0x107/0x167 [ 2028.154842] should_fail.cold+0x5/0xa [ 2028.154869] _copy_from_user+0x2e/0x1b0 [ 2028.154895] input_event_from_user+0x1dd/0x290 [ 2028.154925] ? input_devices_seq_show+0xfe0/0xfe0 [ 2028.154962] evdev_write+0x257/0x420 [ 2028.154990] ? evdev_handle_set_keycode_v2+0x130/0x130 04:29:09 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) dup2(r0, r0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 2028.155013] ? security_file_permission+0x24e/0x570 04:29:09 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 39) [ 2028.155050] do_iter_write+0x482/0x670 [ 2028.155079] ? import_iovec+0x83/0xb0 [ 2028.155105] vfs_writev+0x1ae/0x5e0 [ 2028.155127] ? vfs_iter_write+0xa0/0xa0 [ 2028.155143] ? __fget_files+0x26d/0x480 [ 2028.155166] ? lock_downgrade+0x6d0/0x6d0 [ 2028.155182] ? find_held_lock+0x2c/0x110 [ 2028.155218] ? __fget_files+0x296/0x480 [ 2028.155251] ? __fget_light+0xea/0x290 [ 2028.155277] do_writev+0x283/0x300 [ 2028.155297] ? vfs_writev+0x5e0/0x5e0 [ 2028.155324] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2028.155350] do_syscall_64+0x33/0x40 [ 2028.155371] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2028.155384] RIP: 0033:0x7f701ebafb19 [ 2028.155403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.155414] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2028.155435] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2028.155446] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2028.155457] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2028.155468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2028.155479] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2028.170519] FAULT_INJECTION: forcing a failure. [ 2028.170519] name failslab, interval 1, probability 0, space 0, times 0 [ 2028.170538] CPU: 1 PID: 12459 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2028.170548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2028.170554] Call Trace: [ 2028.170575] dump_stack+0x107/0x167 [ 2028.170598] should_fail.cold+0x5/0xa [ 2028.170617] ? create_object.isra.0+0x3a/0xa20 [ 2028.170638] should_failslab+0x5/0x20 [ 2028.170657] kmem_cache_alloc+0x5b/0x360 [ 2028.170683] create_object.isra.0+0x3a/0xa20 [ 2028.170701] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2028.170727] kmem_cache_alloc_node+0x169/0x370 [ 2028.170753] __alloc_skb+0x6d/0x620 [ 2028.170781] netlink_sendmsg+0x98e/0xdf0 [ 2028.170809] ? netlink_unicast+0x7f0/0x7f0 [ 2028.170844] ? netlink_unicast+0x7f0/0x7f0 [ 2028.170865] sock_sendmsg+0x154/0x190 [ 2028.170888] ____sys_sendmsg+0x70d/0x870 [ 2028.170913] ? kernel_sendmsg+0x50/0x50 [ 2028.170929] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2028.170947] ? perf_trace_lock+0xac/0x490 [ 2028.170974] ? __lockdep_reset_lock+0x180/0x180 [ 2028.170990] ? perf_trace_lock+0xac/0x490 [ 2028.171015] ___sys_sendmsg+0xf3/0x170 [ 2028.171035] ? sendmsg_copy_msghdr+0x160/0x160 [ 2028.171061] ? lock_downgrade+0x6d0/0x6d0 [ 2028.171088] ? finish_task_switch+0x126/0x5d0 [ 2028.171107] ? lock_downgrade+0x6d0/0x6d0 [ 2028.171132] ? __fget_files+0x296/0x480 [ 2028.171164] ? __fget_light+0xea/0x290 [ 2028.171191] __sys_sendmsg+0xe5/0x1b0 [ 2028.171208] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2028.171228] ? io_schedule_timeout+0x140/0x140 [ 2028.171271] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2028.171295] do_syscall_64+0x33/0x40 [ 2028.171314] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2028.171326] RIP: 0033:0x7f7d08ed6b19 [ 2028.171344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.171354] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2028.171374] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2028.171386] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2028.171397] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2028.171407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2028.171419] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2028.178256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2028.398140] FAULT_INJECTION: forcing a failure. [ 2028.398140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2028.398161] CPU: 1 PID: 12469 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2028.398172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2028.398178] Call Trace: [ 2028.398205] dump_stack+0x107/0x167 [ 2028.398230] should_fail.cold+0x5/0xa [ 2028.398257] _copy_from_user+0x2e/0x1b0 [ 2028.398283] input_event_from_user+0x1dd/0x290 [ 2028.398304] ? input_devices_seq_show+0xfe0/0xfe0 [ 2028.398345] evdev_write+0x257/0x420 [ 2028.398374] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2028.398397] ? security_file_permission+0x24e/0x570 [ 2028.398434] do_iter_write+0x482/0x670 [ 2028.398462] ? import_iovec+0x83/0xb0 [ 2028.398489] vfs_writev+0x1ae/0x5e0 [ 2028.398511] ? vfs_iter_write+0xa0/0xa0 [ 2028.398526] ? __fget_files+0x26d/0x480 [ 2028.398549] ? lock_downgrade+0x6d0/0x6d0 [ 2028.398565] ? find_held_lock+0x2c/0x110 [ 2028.398600] ? __fget_files+0x296/0x480 [ 2028.398634] ? __fget_light+0xea/0x290 [ 2028.398660] do_writev+0x283/0x300 [ 2028.398680] ? vfs_writev+0x5e0/0x5e0 [ 2028.398707] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2028.398734] do_syscall_64+0x33/0x40 [ 2028.398754] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2028.398768] RIP: 0033:0x7f701ebafb19 [ 2028.398787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.398797] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2028.398819] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2028.398830] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2028.398841] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2028.398852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2028.398863] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:29:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 5) 04:29:24 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x0, 0x20000000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "9ec9a6"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x6}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0771fbbf00"}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000f70300412abd7000ffdbdf2507000000070000002e2f66696c696c070000000000000009da300000"], 0x28}, 0x1, 0x0, 0x0, 0x2004c810}, 0x4000011) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) 04:29:24 executing program 1: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'macvtap0\x00', {0x2, 0x0, @dev}}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x1002, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2, 0x3, 0x9, 0x40, 0x0, 0x9, 0x2001, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x17, 0xeb}, 0x482a, 0x7, 0x200, 0x8, 0xffffffff, 0x7, 0x7, 0x0, 0x6, 0x0, 0xf87c}, 0x0, 0xb, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 04:29:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x4400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x4, 0x3, 0x0, 'queue0\x00', 0x7}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 04:29:24 executing program 3: syz_open_procfs(0x0, &(0x7f0000000300)='oom_score\x00') r0 = syz_io_uring_setup(0x1432, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x2) 04:29:24 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000a40)=""/235, 0xeb}, {&(0x7f0000000940)=""/201, 0xc9}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000600)=""/180, 0xb4}, {&(0x7f00000006c0)=""/98, 0x62}], 0x8, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0x2003) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) shutdown(r2, 0x1) 04:29:24 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 40) 04:29:24 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0xc1e6}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000004c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012180}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300cadc369bae4fef8819a9a3af43c25e609797b8f385ca771cc3754348e9cb0c26f62966b0dd80d2a0790c75dc7eca2aa9fe9a65d9357bab4452c0", @ANYRES32=r9, @ANYBLOB="0c00238006001000ffff0000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x2bc, r5, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x5b}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5, 0x8d3, 0x40, 0x7, 0x7d, 0x8, 0x8001]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x1b, 0x13, 0x16, 0x9, 0x9, 0x36, 0x2]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x1b, 0x2, 0x24, 0x18, 0x1b, 0x24, 0x4, 0x5, 0x2, 0x6c, 0x16, 0x24, 0x5, 0x4, 0x16, 0x4, 0x2, 0x1, 0x36, 0x3, 0x1b, 0x5, 0xc, 0xc, 0x7e]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x0, 0x60, 0xdfe06a25508501fb, 0x16, 0x5, 0x2, 0x60, 0x48, 0x6, 0x24, 0x24, 0x36, 0x2, 0x24, 0x18, 0x4, 0x4, 0x9, 0x1, 0x36, 0x35, 0x5, 0x24, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x1}, {0x2, 0x8}, {0x6, 0x3}, {0x5, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x4}, {0x6, 0x9}, {0x5, 0x7}, {0x6, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x4, 0x4}, {0x7, 0x8}, {0x6, 0x7}, {0x6, 0x2}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0xa}, {0x5}, {0x0, 0x7}, {0x7, 0x3}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x8}, {0x7, 0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {}, {0x6, 0x7}, {0x2, 0x2}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0x1}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x7, 0x9}, {0x6, 0x1}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x48, 0x16, 0x2, 0x14, 0x4, 0xb, 0x18, 0x5, 0xc, 0x4, 0x16, 0x1, 0x1b]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x70cb, 0x3a6, 0xd70b, 0x5f, 0x8, 0x81, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7a8a, 0x8001, 0x80, 0x4, 0x4, 0x7ff, 0x1ff, 0x1]}}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x6, 0x0, 0xc38, 0xfeff, 0x7fff, 0xf9c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x6}, {0x3, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x6, 0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x6, 0x8}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x8}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x8}, {0x5}, {0x6, 0x5}, {0x0, 0x5}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {0x0, 0x5}, {0x2}, {0x2, 0x5}, {0x7, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x4}, {0x5, 0x19}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0xa}, {0x7}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x5, 0x8}, {0x5, 0xb}, {0x1, 0x2}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x8}, {0x2, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41, 0x4, 0x796a, 0x20, 0x3, 0xff, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x36, 0x5, 0x2, 0x36, 0x13, 0x6c, 0x0, 0xb, 0x6, 0xc, 0xc, 0xc, 0xc, 0x36, 0x30, 0x30, 0x1a, 0x6, 0xc, 0x60, 0xb, 0x6c, 0x9, 0xb, 0x30, 0x6]}, @NL80211_TXRATE_HT={0x40, 0x2, [{}, {0x5, 0x3}, {0x5, 0x9}, {0x0, 0x5}, {0x5, 0x3}, {0x5, 0xa}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x9}, {0x7, 0x7}, {0x6, 0x2}, {0x5, 0xa}, {0x7, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x5, 0x9}, {}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x1}, {0x2, 0x4}, {0x6, 0x9}, {0x4, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x4}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x4, 0xa}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x3, 0x9}, {0x5, 0x8}, {0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x1}, {0x6}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x1}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x7}, {}, {0x3, 0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x7, 0x8}]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x1f, 0x4, 0x3, 0x0, 0x8, 0x6716, 0x800]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x400, 0x9, 0x2, 0x2, 0x4, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xe2, 0x4, 0x1, 0x401, 0x3, 0x81]}}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40040}, 0xc080) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x9) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r10, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/105, 0x69}], 0x1, &(0x7f00000003c0)=""/65, 0x41}, 0x0, 0x10062, 0x1, {0x2}}, 0xffffffff) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) [ 2042.799801] FAULT_INJECTION: forcing a failure. [ 2042.799801] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.802283] CPU: 0 PID: 12485 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2042.803729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2042.804882] Call Trace: [ 2042.805261] dump_stack+0x107/0x167 [ 2042.805771] should_fail.cold+0x5/0xa [ 2042.806313] should_failslab+0x5/0x20 [ 2042.806856] __kmalloc_node_track_caller+0x74/0x3f0 [ 2042.807566] ? netlink_sendmsg+0x98e/0xdf0 [ 2042.808157] __alloc_skb+0xb1/0x620 [ 2042.808686] netlink_sendmsg+0x98e/0xdf0 [ 2042.809256] ? netlink_unicast+0x7f0/0x7f0 [ 2042.809848] ? netlink_unicast+0x7f0/0x7f0 [ 2042.810441] sock_sendmsg+0x154/0x190 [ 2042.810982] ____sys_sendmsg+0x70d/0x870 [ 2042.811558] ? kernel_sendmsg+0x50/0x50 [ 2042.812093] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2042.812747] ? perf_trace_lock+0xac/0x490 [ 2042.813329] ? __lockdep_reset_lock+0x180/0x180 [ 2042.813979] ? perf_trace_lock+0xac/0x490 [ 2042.814573] ? SOFTIRQ_verbose+0x10/0x10 [ 2042.815159] ___sys_sendmsg+0xf3/0x170 [ 2042.815729] ? sendmsg_copy_msghdr+0x160/0x160 [ 2042.816370] ? lock_downgrade+0x6d0/0x6d0 [ 2042.816994] ? find_held_lock+0x2c/0x110 [ 2042.817537] ? __fget_files+0x296/0x480 [ 2042.818114] ? __fget_light+0xea/0x290 [ 2042.818676] __sys_sendmsg+0xe5/0x1b0 [ 2042.819228] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2042.819846] ? rcu_read_lock_any_held+0x75/0xa0 [ 2042.820533] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2042.821257] do_syscall_64+0x33/0x40 [ 2042.821776] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2042.822474] RIP: 0033:0x7f7d08ed6b19 [ 2042.822970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 04:29:24 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001e00)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x280, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000300)='./file1\x00', 0x7) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x105142, 0x18) pwrite64(r0, &(0x7f0000000200)=';', 0x1, 0x0) ftruncate(r0, 0xffff) fallocate(0xffffffffffffffff, 0x41, 0xa, 0x1ff) mknodat$null(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xa000, 0x103) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1a30c1, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) write$binfmt_elf64(r2, &(0x7f0000002180)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x2, 0x5, 0x2}) chroot(&(0x7f00000002c0)='./file0\x00') pread64(0xffffffffffffffff, &(0x7f0000000180)=""/18, 0x12, 0x6) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2042.825429] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2042.826583] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2042.827395] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2042.828241] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2042.829573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2042.831110] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 04:29:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 6) [ 2042.864061] FAULT_INJECTION: forcing a failure. [ 2042.864061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2042.865371] CPU: 1 PID: 12491 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2042.865379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2042.865383] Call Trace: [ 2042.865398] dump_stack+0x107/0x167 [ 2042.865411] should_fail.cold+0x5/0xa [ 2042.865426] _copy_from_user+0x2e/0x1b0 [ 2042.865441] input_event_from_user+0x1dd/0x290 [ 2042.865452] ? input_devices_seq_show+0xfe0/0xfe0 [ 2042.865472] evdev_write+0x257/0x420 [ 2042.865488] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2042.865502] ? security_file_permission+0x24e/0x570 [ 2042.865522] do_iter_write+0x482/0x670 [ 2042.865538] ? import_iovec+0x83/0xb0 [ 2042.865552] vfs_writev+0x1ae/0x5e0 [ 2042.865564] ? vfs_iter_write+0xa0/0xa0 [ 2042.865573] ? __fget_files+0x26d/0x480 [ 2042.865586] ? lock_downgrade+0x6d0/0x6d0 [ 2042.865595] ? find_held_lock+0x2c/0x110 [ 2042.865614] ? __fget_files+0x296/0x480 [ 2042.865632] ? __fget_light+0xea/0x290 04:29:24 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 41) [ 2042.865646] do_writev+0x283/0x300 [ 2042.865657] ? vfs_writev+0x5e0/0x5e0 [ 2042.865673] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2042.865688] do_syscall_64+0x33/0x40 [ 2042.865699] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2042.865706] RIP: 0033:0x7f701ebafb19 [ 2042.865717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2042.865722] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2042.865734] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2042.865739] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2042.865746] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2042.865751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2042.865758] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2042.916622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2042.962275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2043.006238] FAULT_INJECTION: forcing a failure. [ 2043.006238] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.006251] CPU: 1 PID: 12510 Comm: syz-executor.2 Not tainted 5.10.154 #1 04:29:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 7) 04:29:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d533000000fc0100000000000000000000000000010900000000000000b20000000000000001000000010000000200000000000000810000000000000044000000000000000400000000000000050000000000000008000000000000000200000000000000020000000000000000080000000000000200000004000000e0ffffff29bd700000000000020000080800000000000000"], 0x2b4}, 0x1, 0x0, 0x0, 0x21}, 0x48015) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0xb4) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000340)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local}, @in6=@private1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0) [ 2043.006256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 04:29:24 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 42) [ 2043.006260] Call Trace: [ 2043.006276] dump_stack+0x107/0x167 [ 2043.006289] should_fail.cold+0x5/0xa [ 2043.006302] ? create_object.isra.0+0x3a/0xa20 [ 2043.006315] should_failslab+0x5/0x20 [ 2043.006325] kmem_cache_alloc+0x5b/0x360 04:29:24 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0xc101, 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syncfs(r1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) creat(&(0x7f0000000200)='./file0\x00', 0x71) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x230, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x204, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1800000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#).\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$%/*@\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x603d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '.pending_reads\x00'}]}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',-]:s,!]-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x500}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "74399a7d37e61dc88eb067b4843ab35b7f92479e0a2c09456995a2d3623fd68a890d6fcc4307bd9fd135d64620b5e881a40eb7eeb5d28b66b03fd3bc5ab16e8f63f136464725301c6e680b2b22271a868e50f4f5b98d19e4d1ab23424680604df136224ffc52776fea185aaf52a6fe63808e05ecfb211bdfce669a58459605490de2725e25f5720a5ee3728bac02f71e2a739aa3dd555ba73e1d4d90ad9092be0c224f3ca42276e447d08a239a2df9e4755fe925a901240806595d1c7b44fa8dee1d7655c300e142dcde186d"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}]}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="2505797e94cb26199002c546ca4175128d14bf36abdc67b111d8faf8cadb627c692e7beac8ea75fc6406ad59d6d242d702836aff6fc3080afe37d4d7f8b7d14ca8fbe834a0786db92751c2dc9ff182dbf6d5e0cd632d6395c20a798967e8efc1d7d0481039e615ede0ed3038b6eaf1960ecb7b8d24a469f19ac6f2d19466d7b5f0d300e7676e346216d28a58872edd8a87f8de005aa0568e951d33eb75cea0c0df3a17049a33b25af82292a3135c4309b3498355d62491707ce5f5e38131858749a0c1fa9bcfdce2de991f5e09e443e90a857952cebc6beeed05bcdeab4d485d3924629018f1536535c9bc1d7b4e94", @ANYRESOCT=r4, @ANYRES64=r3], 0xfdef) fallocate(r0, 0x3, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000240)) [ 2043.006339] create_object.isra.0+0x3a/0xa20 [ 2043.006349] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2043.006364] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 2043.006379] ? netlink_sendmsg+0x98e/0xdf0 [ 2043.006393] __alloc_skb+0xb1/0x620 [ 2043.006408] netlink_sendmsg+0x98e/0xdf0 [ 2043.006425] ? netlink_unicast+0x7f0/0x7f0 [ 2043.006444] ? netlink_unicast+0x7f0/0x7f0 [ 2043.006456] sock_sendmsg+0x154/0x190 [ 2043.006469] ____sys_sendmsg+0x70d/0x870 [ 2043.006482] ? kernel_sendmsg+0x50/0x50 [ 2043.006490] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2043.006502] ? perf_trace_lock+0xac/0x490 [ 2043.006516] ? __lockdep_reset_lock+0x180/0x180 [ 2043.006524] ? perf_trace_lock+0xac/0x490 [ 2043.006533] ? SOFTIRQ_verbose+0x10/0x10 [ 2043.006545] ___sys_sendmsg+0xf3/0x170 [ 2043.006556] ? sendmsg_copy_msghdr+0x160/0x160 [ 2043.006571] ? lock_downgrade+0x6d0/0x6d0 [ 2043.006583] ? find_held_lock+0x2c/0x110 [ 2043.006600] ? __fget_files+0x296/0x480 [ 2043.006617] ? __fget_light+0xea/0x290 [ 2043.006631] __sys_sendmsg+0xe5/0x1b0 [ 2043.006641] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2043.006651] ? rcu_read_lock_any_held+0x75/0xa0 [ 2043.006674] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2043.006688] do_syscall_64+0x33/0x40 [ 2043.006700] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2043.006707] RIP: 0033:0x7f7d08ed6b19 [ 2043.006718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2043.006723] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2043.006735] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2043.006741] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2043.006747] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2043.006752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2043.006758] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2043.006929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2043.028641] FAULT_INJECTION: forcing a failure. [ 2043.028641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2043.028652] CPU: 1 PID: 12514 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2043.028658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2043.028661] Call Trace: [ 2043.028674] dump_stack+0x107/0x167 [ 2043.028690] should_fail.cold+0x5/0xa [ 2043.028705] _copy_from_user+0x2e/0x1b0 [ 2043.028720] input_event_from_user+0x1dd/0x290 [ 2043.028732] ? input_devices_seq_show+0xfe0/0xfe0 [ 2043.028751] evdev_write+0x257/0x420 [ 2043.028766] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2043.028780] ? security_file_permission+0x24e/0x570 [ 2043.028799] do_iter_write+0x482/0x670 [ 2043.028815] ? import_iovec+0x83/0xb0 [ 2043.028829] vfs_writev+0x1ae/0x5e0 [ 2043.028841] ? vfs_iter_write+0xa0/0xa0 [ 2043.028849] ? __fget_files+0x26d/0x480 [ 2043.028862] ? lock_downgrade+0x6d0/0x6d0 [ 2043.028870] ? find_held_lock+0x2c/0x110 [ 2043.028889] ? __fget_files+0x296/0x480 [ 2043.028910] ? __fget_light+0xea/0x290 [ 2043.028926] do_writev+0x283/0x300 [ 2043.028937] ? vfs_writev+0x5e0/0x5e0 [ 2043.028952] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2043.028965] do_syscall_64+0x33/0x40 [ 2043.028979] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2043.028986] RIP: 0033:0x7f701ebafb19 [ 2043.028996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2043.029002] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2043.029013] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2043.029019] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2043.029025] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2043.029031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2043.029037] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2043.160680] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2043.160902] FAULT_INJECTION: forcing a failure. [ 2043.160902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2043.160915] CPU: 1 PID: 12522 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2043.160920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2043.160924] Call Trace: [ 2043.160941] dump_stack+0x107/0x167 [ 2043.160954] should_fail.cold+0x5/0xa [ 2043.160970] _copy_from_user+0x2e/0x1b0 [ 2043.160985] input_event_from_user+0x1dd/0x290 [ 2043.160997] ? input_devices_seq_show+0xfe0/0xfe0 [ 2043.161016] evdev_write+0x257/0x420 [ 2043.161032] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2043.161046] ? security_file_permission+0x24e/0x570 [ 2043.161066] do_iter_write+0x482/0x670 [ 2043.161082] ? import_iovec+0x83/0xb0 [ 2043.161096] vfs_writev+0x1ae/0x5e0 [ 2043.161108] ? vfs_iter_write+0xa0/0xa0 [ 2043.161117] ? __fget_files+0x26d/0x480 [ 2043.161130] ? lock_downgrade+0x6d0/0x6d0 [ 2043.161139] ? find_held_lock+0x2c/0x110 [ 2043.161158] ? __fget_files+0x296/0x480 [ 2043.161180] ? __fget_light+0xea/0x290 [ 2043.161194] do_writev+0x283/0x300 [ 2043.161205] ? vfs_writev+0x5e0/0x5e0 [ 2043.161220] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2043.161235] do_syscall_64+0x33/0x40 [ 2043.161246] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2043.161254] RIP: 0033:0x7f701ebafb19 [ 2043.161264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2043.161270] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2043.161282] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2043.161288] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2043.161294] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2043.161300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2043.161306] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2043.202719] FAULT_INJECTION: forcing a failure. [ 2043.202719] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.202739] CPU: 0 PID: 12524 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2043.202749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2043.202755] Call Trace: [ 2043.202778] dump_stack+0x107/0x167 [ 2043.202801] should_fail.cold+0x5/0xa [ 2043.202822] ? __skb_ext_alloc+0x19/0x90 [ 2043.202843] should_failslab+0x5/0x20 [ 2043.202861] kmem_cache_alloc+0x5b/0x360 [ 2043.202887] __skb_ext_alloc+0x19/0x90 [ 2043.202903] skb_ext_add+0x508/0x670 [ 2043.202922] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 2043.202949] __alloc_skb+0x3c1/0x620 [ 2043.202976] netlink_sendmsg+0x98e/0xdf0 [ 2043.203005] ? netlink_unicast+0x7f0/0x7f0 [ 2043.203040] ? netlink_unicast+0x7f0/0x7f0 [ 2043.203062] sock_sendmsg+0x154/0x190 [ 2043.203084] ____sys_sendmsg+0x70d/0x870 [ 2043.203109] ? kernel_sendmsg+0x50/0x50 [ 2043.203125] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2043.203143] ? perf_trace_lock+0xac/0x490 [ 2043.203169] ? __lockdep_reset_lock+0x180/0x180 [ 2043.203185] ? perf_trace_lock+0xac/0x490 [ 2043.203202] ? SOFTIRQ_verbose+0x10/0x10 [ 2043.203225] ___sys_sendmsg+0xf3/0x170 [ 2043.203245] ? sendmsg_copy_msghdr+0x160/0x160 [ 2043.203276] ? lock_downgrade+0x6d0/0x6d0 [ 2043.203301] ? find_held_lock+0x2c/0x110 [ 2043.203333] ? __fget_files+0x296/0x480 [ 2043.203367] ? __fget_light+0xea/0x290 [ 2043.203403] __sys_sendmsg+0xe5/0x1b0 [ 2043.203423] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2043.203441] ? rcu_read_lock_any_held+0x75/0xa0 [ 2043.203487] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2043.203513] do_syscall_64+0x33/0x40 [ 2043.203534] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2043.203548] RIP: 0033:0x7f7d08ed6b19 [ 2043.203568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2043.203579] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2043.203601] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2043.203613] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2043.203625] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2043.203636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2043.203648] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2043.203992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2043.225857] perf: interrupt took too long (4052 > 4022), lowering kernel.perf_event_max_sample_rate to 49000 04:29:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="7f454c4600040103000000000000000003003e0000000000e5910eebffffff00f3ffffffffffffff000000000000000000020000010038"], 0xaf2) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 04:29:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) mount$cgroup(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x20288a3, &(0x7f0000000300)={[{@noprefix}, {@xattr}], [{@obj_type={'obj_type', 0x3d, '\'.S#'}}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20d315) 04:29:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x6, 0x2e) ftruncate(0xffffffffffffffff, 0x1000003) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r3, 0x1) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) unshare(0x48020200) 04:29:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 8) 04:29:40 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 43) 04:29:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x76, 0xbcf3, 0x2, 0x4}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) 04:29:40 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2c932, 0xffffffffffffffff, 0x10000000) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x401, &(0x7f0000000080), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000180)={0x0, "58dfb1624166935f47b0f1face6ebc6c"}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r1}, {@val={r2}, @actul_num={@void, 0x1, 0xe}}}) 04:29:40 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000010000)="01434430303101004c494e55582020200220202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000be000000000000be000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f00000003c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f", 0x5a, 0x8800}, {&(0x7f0000000040)='V', 0x1}], 0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x7, 0x4, &(0x7f0000000540)=[{&(0x7f0000000180)="ab05306fac36c8fa38d97de3d22fcf8c97057a5ceb4e5401c1d99f339928cecb1a2f6fb39499be3ccfb133104fc885c6c8f46115168b097c029bbfae57b007d3f4f5a049929e08c373e2286e344cb9ff70ba94791d09def8dc3d9a4981e56d727fc9dcfb921f9981485458c665b53df0c4b84726da869965522f6d73e1a15daef26e426093dcc68dd27822f28aa27dbb34d93c67cdeaf400c91e31c4bc5a185661d34bdc84579c3464cdf2b155a99f9b0b85b3b8cf47e10bc6a6e71fc787eea0b005db2d0a3d4d328796c42125c74ab90d813a8a36c5dde5508173627cbb459fc04de9aec40a9ff2f8009a5b1e6b48a5312275a26d27b52c", 0xf8, 0x10001}, {&(0x7f0000000280)="d8f10cbed9feead52110ebd1df62dcb6b924d0d7fe3fed918540b2995b68db797e093989f0bcb5b922362a97619c680870d2700f8c76403ea98b5a", 0x3b, 0x8000}, {&(0x7f0000000440)="9c7214c7b6023b5be4b92a600b7e30bf5b34ba773718320211047e65cda1f48814bde37ed2c7a9fc1bd799c42fa230d461a01d397febefae75156bc1c84438011c2fe8c3b22990383e3789aa124ef00091d76bf5e084a7f9e66bac7402e8df5d068f2edee776d167cb08e4289aabe11e2cc651263974584bbb2f40bb078afc20bbec20d1e94d4f23c107dcc25fb1095152a43d7315c125280e93fd601aceebe549b8e73dfdd1f2cd9e426c04b844d8942095c3ae160ba72bfdae91dafb7e2dd023d1a7a042f3f089695ca99098713c70b39149ae1728e6bbbf120b6b621ffeb7351c23f44a", 0xe5, 0x6}, {&(0x7f00000002c0)="b2e8a9c4086752ec90c20f7e67cfca36e517eaefb802da52091ef1", 0x1b, 0x6}], 0x80, &(0x7f0000000640)={[{@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'none'}}], [{@euid_lt={'euid<', r1}}, {@obj_type={'obj_type', 0x3d, 'iocharset'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'iocharset'}}, {@context={'context', 0x3d, 'system_u'}}]}) r3 = signalfd4(r2, &(0x7f00000005c0)={[0x3]}, 0x8, 0x800) unlinkat(r3, &(0x7f0000000600)='./file0\x00', 0x200) [ 2058.543803] FAULT_INJECTION: forcing a failure. [ 2058.543803] name failslab, interval 1, probability 0, space 0, times 0 [ 2058.546229] CPU: 1 PID: 12542 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2058.547821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2058.549750] Call Trace: [ 2058.550303] dump_stack+0x107/0x167 [ 2058.551059] should_fail.cold+0x5/0xa [ 2058.551841] ? create_object.isra.0+0x3a/0xa20 [ 2058.552785] should_failslab+0x5/0x20 [ 2058.553593] kmem_cache_alloc+0x5b/0x360 [ 2058.554563] create_object.isra.0+0x3a/0xa20 [ 2058.555588] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2058.556634] kmem_cache_alloc+0x159/0x360 [ 2058.557509] __skb_ext_alloc+0x19/0x90 [ 2058.558332] skb_ext_add+0x508/0x670 [ 2058.559110] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 2058.560179] __alloc_skb+0x3c1/0x620 [ 2058.560985] netlink_sendmsg+0x98e/0xdf0 [ 2058.561826] ? netlink_unicast+0x7f0/0x7f0 [ 2058.562743] ? netlink_unicast+0x7f0/0x7f0 [ 2058.563604] sock_sendmsg+0x154/0x190 [ 2058.564377] ____sys_sendmsg+0x70d/0x870 [ 2058.565221] ? kernel_sendmsg+0x50/0x50 [ 2058.566019] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2058.566940] ? perf_trace_lock+0xac/0x490 [ 2058.567791] ? __lockdep_reset_lock+0x180/0x180 [ 2058.568737] ? perf_trace_lock+0xac/0x490 [ 2058.569606] ? SOFTIRQ_verbose+0x10/0x10 [ 2058.570443] ___sys_sendmsg+0xf3/0x170 [ 2058.571241] ? sendmsg_copy_msghdr+0x160/0x160 [ 2058.572173] ? lock_downgrade+0x6d0/0x6d0 [ 2058.573052] ? find_held_lock+0x2c/0x110 [ 2058.573926] ? __fget_files+0x296/0x480 [ 2058.574753] ? __fget_light+0xea/0x290 [ 2058.575562] __sys_sendmsg+0xe5/0x1b0 [ 2058.576343] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2058.577230] ? rcu_read_lock_any_held+0x75/0xa0 [ 2058.578202] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2058.579207] do_syscall_64+0x33/0x40 [ 2058.579981] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2058.581035] RIP: 0033:0x7f7d08ed6b19 [ 2058.581788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2058.585509] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2058.587114] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2058.588582] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2058.590070] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2058.591517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2058.592977] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2058.606854] FAULT_INJECTION: forcing a failure. [ 2058.606854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2058.606870] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2058.611013] CPU: 1 PID: 12549 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2058.611024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2058.611030] Call Trace: [ 2058.611054] dump_stack+0x107/0x167 [ 2058.611078] should_fail.cold+0x5/0xa [ 2058.611105] _copy_from_user+0x2e/0x1b0 [ 2058.611135] input_event_from_user+0x1dd/0x290 [ 2058.617979] ? input_devices_seq_show+0xfe0/0xfe0 [ 2058.618015] evdev_write+0x257/0x420 [ 2058.618044] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2058.618068] ? security_file_permission+0x24e/0x570 [ 2058.618104] do_iter_write+0x482/0x670 [ 2058.622737] ? import_iovec+0x83/0xb0 [ 2058.623550] vfs_writev+0x1ae/0x5e0 [ 2058.624314] ? vfs_iter_write+0xa0/0xa0 [ 2058.625153] ? __fget_files+0x26d/0x480 [ 2058.625967] ? lock_downgrade+0x6d0/0x6d0 [ 2058.626812] ? find_held_lock+0x2c/0x110 [ 2058.627659] ? __fget_files+0x296/0x480 [ 2058.628509] ? __fget_light+0xea/0x290 [ 2058.629329] do_writev+0x283/0x300 [ 2058.630072] ? vfs_writev+0x5e0/0x5e0 [ 2058.630859] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2058.631865] do_syscall_64+0x33/0x40 [ 2058.632640] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2058.633705] RIP: 0033:0x7f701ebafb19 [ 2058.634466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2058.638228] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2058.639794] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2058.641315] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2058.642846] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2058.644335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2058.645816] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:29:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x30f6c0, 0x91) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x5) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000280)='./file1\x00', 0x0) 04:29:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x45f4, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) syz_io_uring_setup(0x4535, &(0x7f00000000c0)={0x0, 0xbc1c, 0x20, 0x0, 0x48, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 04:29:40 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() r5 = fork() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) kcmp(r5, r3, 0x1, r6, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001200)={0x0}, &(0x7f0000001240)=0xc) r8 = getpgrp(r4) r9 = syz_open_procfs(r8, &(0x7f00000011c0)='net/fib_trie\x00') r10 = accept(r9, &(0x7f00000000c0)=@isdn, &(0x7f0000000140)=0x80) getsockopt$inet_tcp_buf(r10, 0x6, 0x1c, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) fchown(r9, 0x0, 0x0) finit_module(r0, &(0x7f0000000080)='net/protocols\x00', 0x4) ioctl$FIONREAD(r9, 0x541b, &(0x7f0000000000)) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000001280)={'\x00', 0x800, 0x401, 0x80, 0x7f, 0x10000, r7}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) [ 2058.896138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:29:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000000380)={0x40001000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x34}, &(0x7f0000000140)=""/185, 0xb9, &(0x7f00000002c0)=""/154, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x3f, 0x4, 0xf7, 0x0, 0x5, 0x22080, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_config_ext={0x5, 0x800}, 0x8a10, 0x1f, 0x101, 0x4, 0x401, 0x6, 0x4, 0x0, 0xffffffff, 0x0, 0x80000000}, r1, 0xd, r0, 0x2) lseek(0xffffffffffffffff, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x2) 04:29:40 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 44) 04:29:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000002ac0)={&(0x7f0000001700)={0x24, @long}, 0x14, &(0x7f0000002a80)={0x0}}, 0x0) [ 2059.181311] FAULT_INJECTION: forcing a failure. [ 2059.181311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2059.183866] CPU: 1 PID: 12584 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2059.183877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2059.183884] Call Trace: [ 2059.183912] dump_stack+0x107/0x167 [ 2059.183936] should_fail.cold+0x5/0xa [ 2059.183966] _copy_from_user+0x2e/0x1b0 [ 2059.189285] input_event_from_user+0x1dd/0x290 [ 2059.189306] ? input_devices_seq_show+0xfe0/0xfe0 [ 2059.189345] evdev_write+0x257/0x420 [ 2059.191555] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2059.192629] ? security_file_permission+0x24e/0x570 [ 2059.193671] do_iter_write+0x482/0x670 [ 2059.194498] ? import_iovec+0x83/0xb0 [ 2059.195293] vfs_writev+0x1ae/0x5e0 [ 2059.196040] ? vfs_iter_write+0xa0/0xa0 [ 2059.196901] ? __fget_files+0x26d/0x480 [ 2059.197715] ? lock_downgrade+0x6d0/0x6d0 [ 2059.198555] ? find_held_lock+0x2c/0x110 [ 2059.199397] ? __fget_files+0x296/0x480 [ 2059.200230] ? __fget_light+0xea/0x290 [ 2059.201047] do_writev+0x283/0x300 [ 2059.201754] ? vfs_writev+0x5e0/0x5e0 [ 2059.202539] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2059.203541] do_syscall_64+0x33/0x40 [ 2059.204305] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2059.205374] RIP: 0033:0x7f701ebafb19 [ 2059.206137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2059.209944] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2059.211532] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2059.213040] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2059.214528] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2059.216028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2059.217470] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2074.909979] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:30:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x76, 0xbcf3, 0x2, 0x4}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) 04:30:05 executing program 6: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x3c7380, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r0, 0x80186803, 0x0) 04:30:05 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 45) 04:30:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 9) 04:30:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x105) 04:30:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00210cebffffff2cffffff040002000800310000000000aa1749f9def314ca894f5e517b4e5178120568d509c6b468c50feac1da4c56a2c91c6531691daf7f66c1f996f065f3f48178f9bf965095cf65c9fbbedeab71b622cad43e7b"], 0x1c}}, 0x0) 04:30:05 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() r5 = fork() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) kcmp(r5, r3, 0x1, r6, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001200)={0x0}, &(0x7f0000001240)=0xc) r8 = getpgrp(r4) r9 = syz_open_procfs(r8, &(0x7f00000011c0)='net/fib_trie\x00') r10 = accept(r9, &(0x7f00000000c0)=@isdn, &(0x7f0000000140)=0x80) getsockopt$inet_tcp_buf(r10, 0x6, 0x1c, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) fchown(r9, 0x0, 0x0) finit_module(r0, &(0x7f0000000080)='net/protocols\x00', 0x4) ioctl$FIONREAD(r9, 0x541b, &(0x7f0000000000)) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000001280)={'\x00', 0x800, 0x401, 0x80, 0x7f, 0x10000, r7}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) 04:30:05 executing program 0: r0 = syz_io_uring_setup(0x4364, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x414}}, './file1\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1001a, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x0) syz_io_uring_setup(0x654e, &(0x7f0000000180)={0x0, 0x917e, 0x2, 0x3, 0x224, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_complete(r6) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 2083.653388] FAULT_INJECTION: forcing a failure. [ 2083.653388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2083.653420] CPU: 0 PID: 12608 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2083.653426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.653430] Call Trace: [ 2083.653447] dump_stack+0x107/0x167 [ 2083.653460] should_fail.cold+0x5/0xa [ 2083.653477] _copy_from_iter_full+0x1ff/0x940 [ 2083.653491] ? __check_object_size+0x319/0x440 [ 2083.653509] netlink_sendmsg+0x86f/0xdf0 [ 2083.653527] ? netlink_unicast+0x7f0/0x7f0 [ 2083.653545] ? netlink_unicast+0x7f0/0x7f0 [ 2083.653558] sock_sendmsg+0x154/0x190 [ 2083.653570] ____sys_sendmsg+0x70d/0x870 [ 2083.653584] ? kernel_sendmsg+0x50/0x50 [ 2083.653592] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2083.653603] ? perf_trace_lock+0xac/0x490 [ 2083.653617] ? __lockdep_reset_lock+0x180/0x180 [ 2083.653626] ? perf_trace_lock+0xac/0x490 [ 2083.653635] ? SOFTIRQ_verbose+0x10/0x10 [ 2083.653647] ___sys_sendmsg+0xf3/0x170 [ 2083.653658] ? sendmsg_copy_msghdr+0x160/0x160 [ 2083.653672] ? lock_downgrade+0x6d0/0x6d0 [ 2083.653685] ? find_held_lock+0x2c/0x110 [ 2083.653701] ? __fget_files+0x296/0x480 [ 2083.653718] ? __fget_light+0xea/0x290 [ 2083.653732] __sys_sendmsg+0xe5/0x1b0 [ 2083.653742] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2083.653752] ? rcu_read_lock_any_held+0x75/0xa0 [ 2083.653774] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2083.653788] do_syscall_64+0x33/0x40 [ 2083.653800] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2083.653807] RIP: 0033:0x7f7d08ed6b19 04:30:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 10) [ 2083.653817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.653823] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2083.653835] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2083.653841] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2083.653847] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2083.653853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2083.653859] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2083.681731] FAULT_INJECTION: forcing a failure. [ 2083.681731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2083.723253] CPU: 1 PID: 12614 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2083.723265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.723272] Call Trace: [ 2083.723301] dump_stack+0x107/0x167 [ 2083.723327] should_fail.cold+0x5/0xa [ 2083.723355] _copy_from_user+0x2e/0x1b0 [ 2083.723391] input_event_from_user+0x1dd/0x290 [ 2083.723413] ? input_devices_seq_show+0xfe0/0xfe0 [ 2083.723451] evdev_write+0x257/0x420 [ 2083.723482] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2083.723508] ? security_file_permission+0x24e/0x570 [ 2083.723547] do_iter_write+0x482/0x670 [ 2083.723577] ? import_iovec+0x83/0xb0 [ 2083.723606] vfs_writev+0x1ae/0x5e0 [ 2083.723629] ? vfs_iter_write+0xa0/0xa0 [ 2083.723646] ? __fget_files+0x26d/0x480 [ 2083.723671] ? lock_downgrade+0x6d0/0x6d0 [ 2083.723688] ? find_held_lock+0x2c/0x110 [ 2083.723726] ? __fget_files+0x296/0x480 [ 2083.723762] ? __fget_light+0xea/0x290 [ 2083.723790] do_writev+0x283/0x300 [ 2083.723812] ? vfs_writev+0x5e0/0x5e0 04:30:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="94d91e75dff99257eb22acb408632372cb019e805767156a1b13d0437ed5dca5a43e71a7586aacdd210fdcf9f9e60889947bbfc0b642bfa2548ed8decb8c75e8ea4b67ff9400d46d12e516ae52ff87e7aca4ae087369b3c895699db51b9a2c65e4ed1c"]) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x4, &(0x7f0000000440)=[{&(0x7f00000000c0)="fe594bfe606895c75d7607252211d9993858c5f060d12f2c90e30b03b345cacc7e8db0b7", 0x24, 0x7}, {&(0x7f0000000240)="bf3f505acdea08e977667a77881c595470c5940c57f7185bdf1008a3b9917f9d54d0b08addcb6cbbf86db059cb3477614392e3b857a2030aaac1e2fc3e81ef3bcf9dc244dbe68373ec6881c554c22afbda3858f1cb813d2355f0febeb23a058a484740b870be45a69781e1b479add85f97b0b64e30f34eeb4f79bf6f925b2a5556e6da2f0824687093aa3763dddb6637322c76ea1425fba38e7d8324c945b3a782a2a3a9cb22ecea971865fec3d82fe30d23ba18959d2bfae985013a93fc02f11adfd81d9b0644890643375736c0f24e62016e8280e43f25183da4990ffd9d4fa4198203186b1f08565b5f73831c2766412dd438f7e3f050e918", 0xfa, 0xfffffffffffffff8}, {&(0x7f0000000340)="fb24bcb66b50077a4e1b1a1b3005d61bc7b29a3573119ddb69013f20f510dd68da6fdce7cc5c56668e8bd3f3dd78bed813f5e1c560c63e846c35fe8b7849a6be5e4bb146df9667d131269beabbd5960b8bef49570f6497ae60ed0b6300d3e1b5797f900ab2b18a02ac2a6f77253563fba33cd00aecf2d0faf21411139dc87438a2e2a0bf5fbd0300b93b713c777ed1daa74127964993497c79bdb9f8e401d8b1ed7665662ac8d9e4e4338f86080d693471d59477de5d17ddde3d4a4d1c57acd442d7b3b231", 0xc5, 0x4}, {&(0x7f0000000140)="ed97fbac9d7fd50113ae32480045a8a5c6cd701d756f7f1c3138bf9ad90fda305c28e8cc1cc85e7d687b9ad6a939b532a12e456f510f78b31eee6878359867da98d2c5988094e8dcdea9e40ec530176265458e7dd488163f4e9e582da5490488e63b662394fe6d3533cabcbffb55e849fa029ad0b2ac2e398b5026", 0x7b, 0x2}], 0x100000, &(0x7f00000004c0)={[{@dax}, {@prjquota}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@user_xattr}, {@nobarrier}, {@nodiscard}, {@sysvgroups}, {@user_xattr}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) [ 2083.723841] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2083.723869] do_syscall_64+0x33/0x40 [ 2083.723890] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2083.723905] RIP: 0033:0x7f701ebafb19 [ 2083.723926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 04:30:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 11) [ 2083.723937] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2083.723960] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2083.723972] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2083.723984] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2083.723995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 04:30:05 executing program 4: r0 = syz_io_uring_setup(0x4364, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) syz_io_uring_complete(r1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 2083.724007] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2083.757030] FAULT_INJECTION: forcing a failure. [ 2083.757030] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.757054] CPU: 1 PID: 12625 Comm: syz-executor.2 Not tainted 5.10.154 #1 04:30:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) [ 2083.757065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.757072] Call Trace: [ 2083.757130] dump_stack+0x107/0x167 [ 2083.757156] should_fail.cold+0x5/0xa [ 2083.757178] ? __alloc_skb+0x6d/0x620 [ 2083.757202] should_failslab+0x5/0x20 [ 2083.757222] kmem_cache_alloc_node+0x55/0x370 [ 2083.757251] __alloc_skb+0x6d/0x620 [ 2083.757281] netlink_dump+0x735/0x1050 [ 2083.757312] ? netlink_insert+0x1640/0x1640 [ 2083.757335] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2083.757372] ? lock_downgrade+0x6d0/0x6d0 [ 2083.757404] __netlink_dump_start+0x649/0x900 [ 2083.757436] rtnetlink_rcv_msg+0x72a/0xb10 [ 2083.757454] ? do_set_master+0x230/0x230 [ 2083.757480] ? rtnetlink_put_metrics+0x510/0x510 04:30:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file1', [{0x20, '-'}, {0x20, '-@$/^^'}, {}, {0x20, ',-&'}, {0x20, '$,\xb9'}], 0xa, "511d79599866d452190a66466802046acdb65249c0d11b9fb9a4a13f643932dbb00b98e378360d53a78268da3710a2e35cb94d3181b7d575b3b033c3aa5415816402110e93c9754cf8e6bdec81ccee6fd10da36b88ea21ecaa45c3322bbfa18110a386a69292a11e2517033cedd2ba23d22765d50510b4aae75d6df0be4399a49b764e285d9b41133c610a5fc9a97fdd723e1fba2f3cc28394d73a9add8157ad4c299c448201c6604e1d8b1caddb982ded620ea1b7d822e5bc6c80719e8e2402b50ca1e5a3cac05771b1852ad108d85fd056e8b2133ef5ab817d825dae0df1ed9e98ab4a3a38ad68c18cf821bfdf730dd7741182e07c5a39"}, 0x115) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x81, r3, &(0x7f0000000380)="38a0d1b929141e667c35e03cce0727e46edf36fb2f10e110125ec8f34cf4b9015cba1abedbb40a44c2b2e9f2504b368427dd293c17a727cbbd00240ccf8ad278eefab1662c70c38f562be0694579dda4c967fd363e867e0961e71edaae353ca83fae4623cd8665a0a849c8c54ae54da055107b3efb714732e4e23aaef0eb001ff6e37d3e89786fca294166e34525a607a33c385ed8bfc3b744b014c6809c3cf4c1ca8d543302d9cb831e7db0d209ed4601fb315e4567c157612fbd82954dcc599cd191d19c", 0xc5, 0x8, 0x0, 0x3, r3}]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)={0x1000000d}) poll(&(0x7f0000000000)=[{r2, 0x2}], 0x1, 0x20) sendfile(r4, r3, 0x0, 0x7ffffff9) [ 2083.757503] ? do_set_master+0x230/0x230 [ 2083.757531] ? __lockdep_reset_lock+0x180/0x180 [ 2083.757563] netlink_rcv_skb+0x14b/0x430 [ 2083.757587] ? rtnetlink_put_metrics+0x510/0x510 [ 2083.757611] ? netlink_ack+0xab0/0xab0 [ 2083.757635] ? netlink_deliver_tap+0x1ae/0xc40 [ 2083.757667] ? netlink_deliver_tap+0x1c4/0xc40 [ 2083.757688] ? is_vmalloc_addr+0x7b/0xb0 [ 2083.757720] netlink_unicast+0x549/0x7f0 [ 2083.757752] ? netlink_attachskb+0x810/0x810 [ 2083.757791] netlink_sendmsg+0x905/0xdf0 [ 2083.757824] ? netlink_unicast+0x7f0/0x7f0 [ 2083.757863] ? netlink_unicast+0x7f0/0x7f0 [ 2083.757887] sock_sendmsg+0x154/0x190 [ 2083.757912] ____sys_sendmsg+0x70d/0x870 [ 2083.757940] ? kernel_sendmsg+0x50/0x50 [ 2083.757957] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2083.757976] ? perf_trace_lock+0xac/0x490 [ 2083.758006] ? __lockdep_reset_lock+0x180/0x180 [ 2083.758023] ? perf_trace_lock+0xac/0x490 [ 2083.758041] ? SOFTIRQ_verbose+0x10/0x10 [ 2083.758067] ___sys_sendmsg+0xf3/0x170 [ 2083.758089] ? sendmsg_copy_msghdr+0x160/0x160 [ 2083.758124] ? lock_downgrade+0x6d0/0x6d0 [ 2083.758149] ? find_held_lock+0x2c/0x110 [ 2083.758183] ? __fget_files+0x296/0x480 [ 2083.758219] ? __fget_light+0xea/0x290 [ 2083.758250] __sys_sendmsg+0xe5/0x1b0 [ 2083.758270] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2083.758289] ? rcu_read_lock_any_held+0x75/0xa0 [ 2083.758337] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2083.758365] do_syscall_64+0x33/0x40 [ 2083.758386] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2083.758400] RIP: 0033:0x7f7d08ed6b19 [ 2083.758424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.758435] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2083.758458] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2083.758470] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2083.758481] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2083.758493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2083.758505] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2084.029793] FAULT_INJECTION: forcing a failure. [ 2084.029793] name failslab, interval 1, probability 0, space 0, times 0 [ 2084.029821] CPU: 1 PID: 12639 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2084.029834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2084.029842] Call Trace: [ 2084.029871] dump_stack+0x107/0x167 [ 2084.029899] should_fail.cold+0x5/0xa [ 2084.029924] ? create_object.isra.0+0x3a/0xa20 [ 2084.029954] should_failslab+0x5/0x20 [ 2084.029975] kmem_cache_alloc+0x5b/0x360 [ 2084.030006] create_object.isra.0+0x3a/0xa20 [ 2084.030029] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2084.030059] kmem_cache_alloc_node+0x169/0x370 [ 2084.030092] __alloc_skb+0x6d/0x620 [ 2084.030124] netlink_dump+0x735/0x1050 [ 2084.030157] ? netlink_insert+0x1640/0x1640 [ 2084.030177] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2084.030219] ? lock_downgrade+0x6d0/0x6d0 [ 2084.030253] __netlink_dump_start+0x649/0x900 [ 2084.030285] rtnetlink_rcv_msg+0x72a/0xb10 [ 2084.030304] ? do_set_master+0x230/0x230 [ 2084.030331] ? rtnetlink_put_metrics+0x510/0x510 [ 2084.030354] ? do_set_master+0x230/0x230 [ 2084.030388] ? __lockdep_reset_lock+0x180/0x180 [ 2084.030422] netlink_rcv_skb+0x14b/0x430 [ 2084.030446] ? rtnetlink_put_metrics+0x510/0x510 [ 2084.030472] ? netlink_ack+0xab0/0xab0 [ 2084.030491] ? netlink_deliver_tap+0x1ae/0xc40 [ 2084.030524] ? netlink_deliver_tap+0x1c4/0xc40 [ 2084.030544] ? is_vmalloc_addr+0x7b/0xb0 [ 2084.030576] netlink_unicast+0x549/0x7f0 [ 2084.030609] ? netlink_attachskb+0x810/0x810 [ 2084.030649] netlink_sendmsg+0x905/0xdf0 [ 2084.030683] ? netlink_unicast+0x7f0/0x7f0 [ 2084.030724] ? netlink_unicast+0x7f0/0x7f0 [ 2084.030748] sock_sendmsg+0x154/0x190 [ 2084.030775] ____sys_sendmsg+0x70d/0x870 [ 2084.030803] ? kernel_sendmsg+0x50/0x50 [ 2084.030821] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2084.030841] ? perf_trace_lock+0xac/0x490 [ 2084.030872] ? __lockdep_reset_lock+0x180/0x180 [ 2084.030889] ? perf_trace_lock+0xac/0x490 [ 2084.030909] ? SOFTIRQ_verbose+0x10/0x10 [ 2084.030935] ___sys_sendmsg+0xf3/0x170 [ 2084.030959] ? sendmsg_copy_msghdr+0x160/0x160 [ 2084.030989] ? lock_downgrade+0x6d0/0x6d0 [ 2084.031015] ? find_held_lock+0x2c/0x110 [ 2084.031050] ? __fget_files+0x296/0x480 [ 2084.031086] ? __fget_light+0xea/0x290 [ 2084.031119] __sys_sendmsg+0xe5/0x1b0 [ 2084.031139] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2084.031158] ? rcu_read_lock_any_held+0x75/0xa0 [ 2084.031208] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2084.031236] do_syscall_64+0x33/0x40 [ 2084.031259] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2084.031274] RIP: 0033:0x7f7d08ed6b19 [ 2084.031294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2084.031306] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2084.031330] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2084.031343] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2084.031355] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2084.031367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2084.031380] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2084.032030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2101.586659] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:30:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 12) 04:30:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200001, 0xb9) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xaaf}}, './file0\x00'}) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) unshare(0x48020200) 04:30:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xfffffffffffffff6}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x803}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/16]) 04:30:33 executing program 1: ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000440)=ANY=[@ANYBLOB="b20a00000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/65728]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x5001, 0x40) r0 = memfd_create(&(0x7f0000000040)='ethtool\x00', 0x0) fadvise64(r0, 0xd11, 0x200, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) 04:30:33 executing program 5: write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x80f3}, @void, @mpls={[{0x8000, 0x0, 0x1}], @llc={@llc={0xfc, 0xfc, 'k', "3c0dfea8d969b2873d0f2f4f38c3a78edcffcd8b64c089fc1a72f26715a4b09078209b831cba4827cdb34a850836e2f1c4ae7b061ba584a58b8a46a44e50e0452d008cf9755c94aca8ea48890dbb363e2815f8402ff044fd6f8b8559a07dd105a731584d0dd49bab505b8f24de1fec4f42716b701636a455"}}}}, 0x83) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r3 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() kcmp(r4, r3, 0x2, r2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x7, 0xb6, 0x9, 0x0, 0x100000000, 0x10422, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x873c, 0x0, @perf_config_ext={0x6, 0x100}, 0x0, 0x8, 0xec5, 0x4, 0x7, 0x20, 0x40, 0x0, 0x9, 0x0, 0x81}, r4, 0xe, 0xffffffffffffffff, 0x8) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '**($!+\\(%\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) 04:30:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5e, 0x8800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x40000}, 0x0, 0xffffffffffffffff, r2, 0xb) umount2(&(0x7f0000000140)='./file0\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) pwrite64(r3, &(0x7f0000000200)=';', 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) r4 = epoll_create(0x7ffd) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000000440)=@newae={0x21c, 0x1e, 0x111, 0x70bd29, 0x25dfdbfc, {{@in6=@private2, 0x4d3, 0x2, 0x3c}, @in=@local, 0x80000001, 0x3505}, [@policy={0xac, 0x7, {{@in6=@local, @in6=@private0, 0x4e22, 0x3, 0x4e22, 0x0, 0x2, 0xa0, 0xa0, 0x6}, {0xbce, 0x7, 0x345a4925, 0x6, 0x1000, 0xffffffffffffffc6, 0x3, 0xd288}, {0x0, 0x0, 0x4, 0x7ff}, 0x9, 0x0, 0x0, 0x1, 0x3}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xc7}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd26}}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00', @in=@remote, 0x2, 0x31}}, @sec_ctx={0x64, 0x8, {0x60, 0x8, 0x0, 0x3f, 0x58, "6a4a79f936aa3b8ae06f8bd9a241d0ccb9e5e1dc6a4c08ae0ce548df5035f46f9d64089d20f798c94a5df4d42243f592058b833f48ce0550779a1e152541e48f39a3b1b8f3bba71a082a0bee54668385358454d1eca33caf"}}, @algo_crypt={0x8a, 0x2, {{'xchacha20-simd\x00'}, 0x210, "1bfd61d8cb4f519cb22f15956882e0734b19ba8cf3127ec5e2cf0ff7cb17003944b812d9371d6a381cced28c29a5d5e83bff75ee9a095d31711bb293ef3d27df49e8"}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000091) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x2, "1f94effb5ae2525ef6f13b4fa59c3b1950d72feb"}, 0x15, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(0xffffffffffffffff, r4) 04:30:33 executing program 3: syz_mount_image$nfs4(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f00000008c0)={[], [{@obj_role={'obj_role', 0x3d, '-]++%('}}]}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) statx(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x8, &(0x7f0000000040)) 04:30:33 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 46) [ 2112.066005] FAULT_INJECTION: forcing a failure. [ 2112.066005] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.068587] CPU: 0 PID: 12669 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2112.070011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.071751] Call Trace: [ 2112.072301] dump_stack+0x107/0x167 [ 2112.073053] should_fail.cold+0x5/0xa [ 2112.073865] should_failslab+0x5/0x20 [ 2112.074658] __kmalloc_node_track_caller+0x74/0x3f0 [ 2112.075690] ? netlink_dump+0x735/0x1050 [ 2112.076523] __alloc_skb+0xb1/0x620 [ 2112.077284] netlink_dump+0x735/0x1050 [ 2112.078101] ? netlink_insert+0x1640/0x1640 [ 2112.078993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2112.079990] ? lock_downgrade+0x6d0/0x6d0 [ 2112.080851] __netlink_dump_start+0x649/0x900 [ 2112.081796] rtnetlink_rcv_msg+0x72a/0xb10 [ 2112.082666] ? do_set_master+0x230/0x230 [ 2112.083504] ? rtnetlink_put_metrics+0x510/0x510 [ 2112.084494] ? do_set_master+0x230/0x230 [ 2112.085338] ? __lockdep_reset_lock+0x180/0x180 [ 2112.086320] netlink_rcv_skb+0x14b/0x430 [ 2112.087160] ? rtnetlink_put_metrics+0x510/0x510 [ 2112.088134] ? netlink_ack+0xab0/0xab0 [ 2112.088932] ? netlink_deliver_tap+0x1ae/0xc40 [ 2112.089885] ? netlink_deliver_tap+0x1c4/0xc40 [ 2112.090827] ? is_vmalloc_addr+0x7b/0xb0 [ 2112.091674] netlink_unicast+0x549/0x7f0 [ 2112.092519] ? netlink_attachskb+0x810/0x810 [ 2112.093471] netlink_sendmsg+0x905/0xdf0 [ 2112.094319] ? netlink_unicast+0x7f0/0x7f0 [ 2112.095216] ? netlink_unicast+0x7f0/0x7f0 [ 2112.096081] sock_sendmsg+0x154/0x190 [ 2112.096883] ____sys_sendmsg+0x70d/0x870 [ 2112.097722] ? kernel_sendmsg+0x50/0x50 [ 2112.098545] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2112.099474] ? perf_trace_lock+0xac/0x490 [ 2112.100337] ? __lockdep_reset_lock+0x180/0x180 [ 2112.101283] ? perf_trace_lock+0xac/0x490 [ 2112.102144] ? SOFTIRQ_verbose+0x10/0x10 [ 2112.102984] ___sys_sendmsg+0xf3/0x170 [ 2112.103789] ? sendmsg_copy_msghdr+0x160/0x160 [ 2112.104737] ? lock_downgrade+0x6d0/0x6d0 [ 2112.105610] ? find_held_lock+0x2c/0x110 [ 2112.106461] ? __fget_files+0x296/0x480 [ 2112.107299] ? __fget_light+0xea/0x290 [ 2112.108113] __sys_sendmsg+0xe5/0x1b0 [ 2112.108901] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2112.109801] ? rcu_read_lock_any_held+0x75/0xa0 [ 2112.110781] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2112.111788] do_syscall_64+0x33/0x40 [ 2112.112554] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2112.113626] RIP: 0033:0x7f7d08ed6b19 [ 2112.114392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.118179] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2112.119728] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2112.121193] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2112.122708] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2112.124172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2112.125639] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2112.167174] FAULT_INJECTION: forcing a failure. [ 2112.167174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2112.169573] CPU: 1 PID: 12675 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2112.170981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.172642] Call Trace: [ 2112.173198] dump_stack+0x107/0x167 [ 2112.173962] should_fail.cold+0x5/0xa [ 2112.174750] _copy_from_user+0x2e/0x1b0 [ 2112.175564] input_event_from_user+0x1dd/0x290 [ 2112.176499] ? input_devices_seq_show+0xfe0/0xfe0 [ 2112.177496] evdev_write+0x257/0x420 [ 2112.178268] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2112.179335] ? security_file_permission+0x24e/0x570 [ 2112.180372] do_iter_write+0x482/0x670 [ 2112.181173] ? import_iovec+0x83/0xb0 [ 2112.181975] vfs_writev+0x1ae/0x5e0 [ 2112.182727] ? vfs_iter_write+0xa0/0xa0 [ 2112.183537] ? __fget_files+0x26d/0x480 [ 2112.184353] ? lock_downgrade+0x6d0/0x6d0 [ 2112.185196] ? find_held_lock+0x2c/0x110 [ 2112.186052] ? __fget_files+0x296/0x480 [ 2112.186878] ? __fget_light+0xea/0x290 [ 2112.187677] do_writev+0x283/0x300 [ 2112.188406] ? vfs_writev+0x5e0/0x5e0 [ 2112.189193] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2112.190201] do_syscall_64+0x33/0x40 [ 2112.190960] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2112.191999] RIP: 0033:0x7f701ebafb19 [ 2112.192756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.196522] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2112.198090] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2112.199547] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2112.201010] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2112.202491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2112.203956] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2112.240800] nfs4: Unknown parameter 'obj_role' [ 2112.245876] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 04:30:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 13) 04:30:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x157) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r1, @ANYBLOB="e8000000000000002e2f66696c653100"]) connect(r3, &(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="00000000000100000016a8a6"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 2112.375411] nfs4: Unknown parameter 'obj_role' [ 2112.414389] EXT4-fs (loop6): re-mounted. Opts: (null) 04:30:34 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 47) 04:30:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x34d1132ed10daaec) inotify_rm_watch(r0, r1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2c932, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x2, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) 04:30:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002a00274e00000000000000000000000007000080999e000050a0d5c900db39005e4f6e462003560bb80cb029028029fa474dc651d6d583fbd95ea0c0cf1dbbdfdcf66ebed55f1a4db385360142602a0ace59bcac82208f47ce119dfef52f2164d72b560597c49d66e7d773ecd4119cdc754cffa01b67f2e91886cc5c60b855d1a2548ea3dd95b76bcccaeef1a778"], 0x1c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000040)=""/193, 0xc1}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r2) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) acct(0x0) unshare(0x48020200) 04:30:34 executing program 5: request_key(0x0, &(0x7f0000000340)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000008601000000000000000000000008380001001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000062462dd55c9c9299ea317c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009ba860a8e331ad89000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e09b00"/643], 0x278) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) add_key$fscrypt_v1(&(0x7f000000a4c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) clone3(&(0x7f0000000080)={0x3040300, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f0000000100)='./file1\x00', 0x80000, 0x80) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 2112.620143] FAULT_INJECTION: forcing a failure. [ 2112.620143] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.622340] CPU: 1 PID: 12692 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2112.623708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.625149] Call Trace: [ 2112.625632] dump_stack+0x107/0x167 [ 2112.626260] should_fail.cold+0x5/0xa [ 2112.626920] ? create_object.isra.0+0x3a/0xa20 [ 2112.627740] should_failslab+0x5/0x20 [ 2112.628508] kmem_cache_alloc+0x5b/0x360 [ 2112.629287] create_object.isra.0+0x3a/0xa20 [ 2112.630191] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2112.631167] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 2112.632180] ? netlink_dump+0x735/0x1050 [ 2112.633032] __alloc_skb+0xb1/0x620 [ 2112.633709] netlink_dump+0x735/0x1050 [ 2112.634481] ? netlink_insert+0x1640/0x1640 [ 2112.635403] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2112.636319] ? lock_downgrade+0x6d0/0x6d0 [ 2112.637126] __netlink_dump_start+0x649/0x900 [ 2112.638021] rtnetlink_rcv_msg+0x72a/0xb10 [ 2112.638891] ? do_set_master+0x230/0x230 [ 2112.639582] ? rtnetlink_put_metrics+0x510/0x510 [ 2112.640576] ? do_set_master+0x230/0x230 [ 2112.641397] ? __lockdep_reset_lock+0x180/0x180 [ 2112.642239] netlink_rcv_skb+0x14b/0x430 [ 2112.642999] ? rtnetlink_put_metrics+0x510/0x510 [ 2112.644394] ? netlink_ack+0xab0/0xab0 [ 2112.645371] ? netlink_deliver_tap+0x1ae/0xc40 [ 2112.646652] ? netlink_deliver_tap+0x1c4/0xc40 [ 2112.647974] ? is_vmalloc_addr+0x7b/0xb0 [ 2112.649002] netlink_unicast+0x549/0x7f0 [ 2112.650036] ? netlink_attachskb+0x810/0x810 [ 2112.651152] netlink_sendmsg+0x905/0xdf0 [ 2112.652184] ? netlink_unicast+0x7f0/0x7f0 [ 2112.653220] ? netlink_unicast+0x7f0/0x7f0 [ 2112.654275] sock_sendmsg+0x154/0x190 [ 2112.655049] ____sys_sendmsg+0x70d/0x870 [ 2112.655880] ? kernel_sendmsg+0x50/0x50 [ 2112.656684] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2112.657613] ? perf_trace_lock+0xac/0x490 [ 2112.658459] ? __lockdep_reset_lock+0x180/0x180 [ 2112.659399] ? perf_trace_lock+0xac/0x490 [ 2112.660233] ? SOFTIRQ_verbose+0x10/0x10 [ 2112.661056] ___sys_sendmsg+0xf3/0x170 [ 2112.661851] ? sendmsg_copy_msghdr+0x160/0x160 [ 2112.662784] ? lock_downgrade+0x6d0/0x6d0 [ 2112.663626] ? find_held_lock+0x2c/0x110 [ 2112.664458] ? __fget_files+0x296/0x480 [ 2112.665280] ? __fget_light+0xea/0x290 [ 2112.666095] __sys_sendmsg+0xe5/0x1b0 [ 2112.666864] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2112.667735] ? rcu_read_lock_any_held+0x75/0xa0 [ 2112.668706] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2112.669691] do_syscall_64+0x33/0x40 [ 2112.670445] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2112.671482] RIP: 0033:0x7f7d08ed6b19 [ 2112.672234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.675939] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2112.677480] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2112.678922] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2112.680355] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2112.681809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2112.683249] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2112.684955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2112.694962] FAULT_INJECTION: forcing a failure. [ 2112.694962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2112.697528] CPU: 1 PID: 12697 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2112.698941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.700644] Call Trace: [ 2112.701189] dump_stack+0x107/0x167 [ 2112.701968] should_fail.cold+0x5/0xa [ 2112.702757] _copy_from_user+0x2e/0x1b0 [ 2112.703589] input_event_from_user+0x1dd/0x290 [ 2112.704533] ? input_devices_seq_show+0xfe0/0xfe0 [ 2112.705539] evdev_write+0x257/0x420 [ 2112.706316] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2112.707377] ? security_file_permission+0x24e/0x570 [ 2112.708402] do_iter_write+0x482/0x670 [ 2112.709203] ? import_iovec+0x83/0xb0 [ 2112.710002] vfs_writev+0x1ae/0x5e0 [ 2112.710745] ? vfs_iter_write+0xa0/0xa0 [ 2112.711549] ? __fget_files+0x26d/0x480 [ 2112.712360] ? lock_downgrade+0x6d0/0x6d0 [ 2112.713197] ? find_held_lock+0x2c/0x110 [ 2112.714052] ? __fget_files+0x296/0x480 [ 2112.714876] ? __fget_light+0xea/0x290 [ 2112.715685] do_writev+0x283/0x300 [ 2112.716413] ? vfs_writev+0x5e0/0x5e0 [ 2112.717204] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2112.718205] do_syscall_64+0x33/0x40 [ 2112.718969] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2112.720012] RIP: 0033:0x7f701ebafb19 [ 2112.720782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.724502] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2112.726097] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2112.727539] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2112.728981] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2112.730434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2112.731875] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:30:34 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 48) 04:30:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 14) 04:30:34 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000180)="47d49350adf933dce92fc63ec89b9a4451673e924807268b2e29fe1a5e7bc17650c442eb8adee0e9e39e959a227b3e2aa607c12f0b1c474176fa4291b26629abc6a5a33ef72919926c9b4e661f0e92bc11d120d412831e2ac496f2f9de1c6fe82309152aba909e578b2b000bb9168c56cccb9011870afbbc674b77fb5f8816bf0ac5692f14f4bc53caf221b35149c02a83b33c72b883b4c23cc6a27b4aebdaf2072a5c4b0dd3e7c6812163") ioctl$HCIINQUIRY(r2, 0x400448dd, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "ffedd6", 0x4}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ftruncate(r4, 0xcef2) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) r7 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000480)="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", 0x126, 0x2}, {&(0x7f0000010900)="7f00000000000000001700080011000008007809060b2a3a0802", 0x1a, 0xb800}, {0x0, 0x0, 0xfffffffffffbff50}], 0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRESHEX=r5, @ANYRESOCT=r7, @ANYRESHEX=r6, @ANYRESHEX, @ANYRES32=r4]) [ 2113.037856] FAULT_INJECTION: forcing a failure. [ 2113.037856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2113.040626] CPU: 1 PID: 12713 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2113.042031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.043693] Call Trace: [ 2113.044232] dump_stack+0x107/0x167 [ 2113.044980] should_fail.cold+0x5/0xa [ 2113.045763] _copy_from_user+0x2e/0x1b0 [ 2113.046574] input_event_from_user+0x1dd/0x290 [ 2113.047501] ? input_devices_seq_show+0xfe0/0xfe0 [ 2113.048493] evdev_write+0x257/0x420 [ 2113.049253] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2113.050326] ? security_file_permission+0x24e/0x570 [ 2113.051347] do_iter_write+0x482/0x670 [ 2113.052149] ? import_iovec+0x83/0xb0 [ 2113.052927] vfs_writev+0x1ae/0x5e0 [ 2113.053680] ? vfs_iter_write+0xa0/0xa0 [ 2113.054482] ? __fget_files+0x26d/0x480 [ 2113.055293] ? lock_downgrade+0x6d0/0x6d0 [ 2113.056126] ? find_held_lock+0x2c/0x110 [ 2113.056962] ? __fget_files+0x296/0x480 [ 2113.057786] ? __fget_light+0xea/0x290 [ 2113.058579] do_writev+0x283/0x300 [ 2113.059299] ? vfs_writev+0x5e0/0x5e0 [ 2113.060077] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2113.061060] do_syscall_64+0x33/0x40 [ 2113.061821] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2113.062854] RIP: 0033:0x7f701ebafb19 [ 2113.063607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.067320] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2113.068853] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2113.070302] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2113.071738] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2113.073175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2113.074619] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2113.116687] FAULT_INJECTION: forcing a failure. [ 2113.116687] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2113.119161] CPU: 1 PID: 12715 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2113.120573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.122258] Call Trace: [ 2113.122798] dump_stack+0x107/0x167 [ 2113.123540] should_fail.cold+0x5/0xa [ 2113.124329] __alloc_pages_nodemask+0x182/0x680 [ 2113.125281] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 2113.126558] alloc_pages_current+0x187/0x280 [ 2113.127469] allocate_slab+0x26f/0x380 [ 2113.128270] ___slab_alloc+0x470/0x700 [ 2113.129059] ? create_object.isra.0+0x3a/0xa20 [ 2113.130013] ? create_object.isra.0+0x3a/0xa20 [ 2113.130969] ? kmem_cache_alloc+0x343/0x360 [ 2113.131856] kmem_cache_alloc+0x343/0x360 [ 2113.132726] create_object.isra.0+0x3a/0xa20 [ 2113.133639] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2113.134685] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 2113.135713] ? netlink_dump+0x735/0x1050 [ 2113.136547] __alloc_skb+0xb1/0x620 [ 2113.137293] netlink_dump+0x735/0x1050 [ 2113.138114] ? netlink_insert+0x1640/0x1640 [ 2113.138991] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2113.139987] ? lock_downgrade+0x6d0/0x6d0 [ 2113.140846] __netlink_dump_start+0x649/0x900 [ 2113.141784] rtnetlink_rcv_msg+0x72a/0xb10 [ 2113.142645] ? do_set_master+0x230/0x230 [ 2113.143481] ? rtnetlink_put_metrics+0x510/0x510 [ 2113.144464] ? do_set_master+0x230/0x230 [ 2113.145301] ? __lockdep_reset_lock+0x180/0x180 [ 2113.146284] netlink_rcv_skb+0x14b/0x430 [ 2113.147113] ? rtnetlink_put_metrics+0x510/0x510 [ 2113.148086] ? netlink_ack+0xab0/0xab0 [ 2113.148882] ? netlink_deliver_tap+0x1ae/0xc40 [ 2113.149842] ? netlink_deliver_tap+0x1c4/0xc40 [ 2113.150777] ? is_vmalloc_addr+0x7b/0xb0 [ 2113.151614] netlink_unicast+0x549/0x7f0 [ 2113.152456] ? netlink_attachskb+0x810/0x810 [ 2113.153368] netlink_sendmsg+0x905/0xdf0 [ 2113.154228] ? netlink_unicast+0x7f0/0x7f0 [ 2113.155106] ? netlink_unicast+0x7f0/0x7f0 [ 2113.155975] sock_sendmsg+0x154/0x190 [ 2113.156754] ____sys_sendmsg+0x70d/0x870 [ 2113.157597] ? kernel_sendmsg+0x50/0x50 [ 2113.158405] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2113.159335] ? perf_trace_lock+0xac/0x490 [ 2113.160198] ? __lockdep_reset_lock+0x180/0x180 [ 2113.161147] ? perf_trace_lock+0xac/0x490 [ 2113.162004] ? SOFTIRQ_verbose+0x10/0x10 [ 2113.162838] ___sys_sendmsg+0xf3/0x170 [ 2113.163637] ? sendmsg_copy_msghdr+0x160/0x160 [ 2113.164574] ? lock_downgrade+0x6d0/0x6d0 [ 2113.165434] ? find_held_lock+0x2c/0x110 [ 2113.166310] ? __fget_files+0x296/0x480 [ 2113.167147] ? __fget_light+0xea/0x290 [ 2113.167954] __sys_sendmsg+0xe5/0x1b0 [ 2113.168739] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2113.169629] ? rcu_read_lock_any_held+0x75/0xa0 [ 2113.170607] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2113.171600] do_syscall_64+0x33/0x40 [ 2113.172367] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2113.173420] RIP: 0033:0x7f7d08ed6b19 [ 2113.174215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.177977] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2113.179533] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2113.180991] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2113.182463] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2113.183920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2113.185378] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2113.193311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:30:34 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x4, 0x2000000000000, 0x7fffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:selinux_config_t:s0\x00', 0x26, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000180)="fa542d85b5cf356bee9af48b7acc4dcefc9c1526ff3c7f0cbd2cfe9e7ca74ee3afc7be72f15484e5c90bb4316f903810cbc6934f5a0b97e38aa588f68fa424b51d203ae4dd0efc75bb7f71862909a6ef89644eefaf6889ab1d353cb7ac32b8d93ad453c0ed14480ea76c117f3ecce2684ce371e4f11f79dd35b1f54e25b7ad265f56294ae1a1b0732a929a5965a953ac5e49865670a0f59201582be50a6b552dd9647efe2f086346a2f50f55110bcecfafc2a3db61debbf8ba08de9323b29c8c7254775da8ad75e7cf884562176ce5", 0xcf) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="ae88ce3171109f996f9aa1ab4e2efbbc28d26c3708e4", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf2503000000080032000900000008000b00020000000800340000000000080034000101000008003a0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000040)=0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="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"/270]) [ 2113.314053] audit: type=1400 audit(1668832234.972:75): avc: denied { relabelfrom } for pid=12717 comm="syz-executor.3" name="" dev="pipefs" ino=40359 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 04:30:34 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 49) 04:30:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 15) 04:30:35 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x3eca, &(0x7f00000003c0)={0x0, 0x952, 0x4, 0x1, 0x209}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r2, r0, 0x80000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x2, 0x2, 0x9, 0x0, 0x0, 0x80002, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1, 0x7a88}, 0x8c88, 0x8e7f, 0x80000001, 0x1, 0x6, 0x7fffffff, 0x9, 0x0, 0xfffffff7, 0x0, 0x6}, 0xffffffffffffffff, 0x2, r1, 0xa) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x112) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xbf) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0xff}}, 0x0, 0x0, 0x24, 0x0, "a7f49a7a6f9ebfba8b3417d77e2044ae897a15ee995be027720a5cc3568d3701c2d5b5e2681542e93336fb2cb6014d3e2a1347d5b12238162bb9e270992f2c7e47be448689ce8d8fd9d21484f034217b"}, 0xd8) writev(0xffffffffffffffff, &(0x7f0000001000), 0x0) openat2(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x280400, 0x0, 0x1c}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0xb28237bc5606e380) open(&(0x7f0000000080)='./file0\x00', 0x30003, 0x2d8) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0xeadcb3d0da45c6dc, 0x80, 0x0, 0x40, 0xf8, 0xff, 0x0, 0x1ff, 0x2068, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_config_ext={0x0, 0x8}, 0x52001, 0x1, 0x4, 0x7, 0xae5, 0x7, 0x2}, 0x0, 0xe, r4, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00230c00000000020000000000000038303275c4610c4841ee85c5d5eb71cc"], 0x1c}}, 0x0) [ 2113.471127] FAULT_INJECTION: forcing a failure. [ 2113.471127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2113.473821] CPU: 1 PID: 12724 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2113.475235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.476929] Call Trace: [ 2113.477498] dump_stack+0x107/0x167 [ 2113.478250] should_fail.cold+0x5/0xa [ 2113.479033] _copy_from_user+0x2e/0x1b0 [ 2113.479851] input_event_from_user+0x1dd/0x290 [ 2113.480782] ? input_devices_seq_show+0xfe0/0xfe0 [ 2113.481791] evdev_write+0x257/0x420 [ 2113.482555] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2113.483628] ? security_file_permission+0x24e/0x570 [ 2113.484660] do_iter_write+0x482/0x670 [ 2113.485491] ? import_iovec+0x83/0xb0 [ 2113.486281] vfs_writev+0x1ae/0x5e0 [ 2113.487029] ? vfs_iter_write+0xa0/0xa0 [ 2113.487837] ? __fget_files+0x26d/0x480 [ 2113.488645] ? lock_downgrade+0x6d0/0x6d0 [ 2113.489488] ? find_held_lock+0x2c/0x110 [ 2113.490329] ? __fget_files+0x296/0x480 [ 2113.491154] ? __fget_light+0xea/0x290 [ 2113.491949] do_writev+0x283/0x300 [ 2113.492669] ? vfs_writev+0x5e0/0x5e0 [ 2113.493452] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2113.494445] do_syscall_64+0x33/0x40 [ 2113.495208] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2113.496248] RIP: 0033:0x7f701ebafb19 [ 2113.497001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.500720] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2113.502265] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2113.503713] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2113.505163] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2113.506617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2113.508087] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2113.525444] FAULT_INJECTION: forcing a failure. [ 2113.525444] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.527773] CPU: 0 PID: 12725 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2113.529202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.530917] Call Trace: [ 2113.531461] dump_stack+0x107/0x167 [ 2113.532213] should_fail.cold+0x5/0xa [ 2113.532997] ? create_object.isra.0+0x3a/0xa20 [ 2113.533936] should_failslab+0x5/0x20 [ 2113.534713] kmem_cache_alloc+0x5b/0x360 [ 2113.535557] create_object.isra.0+0x3a/0xa20 [ 2113.536456] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2113.537495] kmem_cache_alloc+0x159/0x360 [ 2113.538355] __skb_ext_alloc+0x19/0x90 [ 2113.539155] skb_ext_add+0x508/0x670 [ 2113.539911] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 2113.540967] __alloc_skb+0x3c1/0x620 [ 2113.541740] netlink_dump+0x735/0x1050 [ 2113.542538] ? netlink_insert+0x1640/0x1640 [ 2113.543409] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2113.544390] ? lock_downgrade+0x6d0/0x6d0 [ 2113.545234] __netlink_dump_start+0x649/0x900 [ 2113.546161] rtnetlink_rcv_msg+0x72a/0xb10 [ 2113.547018] ? do_set_master+0x230/0x230 [ 2113.547843] ? rtnetlink_put_metrics+0x510/0x510 [ 2113.548794] ? do_set_master+0x230/0x230 [ 2113.549636] ? __lockdep_reset_lock+0x180/0x180 [ 2113.550590] netlink_rcv_skb+0x14b/0x430 [ 2113.551423] ? rtnetlink_put_metrics+0x510/0x510 [ 2113.552373] ? netlink_ack+0xab0/0xab0 [ 2113.553154] ? netlink_deliver_tap+0x1ae/0xc40 [ 2113.554099] ? netlink_deliver_tap+0x1c4/0xc40 [ 2113.555020] ? is_vmalloc_addr+0x7b/0xb0 [ 2113.555845] netlink_unicast+0x549/0x7f0 [ 2113.556668] ? netlink_attachskb+0x810/0x810 [ 2113.557578] netlink_sendmsg+0x905/0xdf0 [ 2113.558404] ? netlink_unicast+0x7f0/0x7f0 [ 2113.559283] ? netlink_unicast+0x7f0/0x7f0 [ 2113.560157] sock_sendmsg+0x154/0x190 [ 2113.560922] ____sys_sendmsg+0x70d/0x870 [ 2113.561767] ? kernel_sendmsg+0x50/0x50 [ 2113.562566] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2113.563491] ? perf_trace_lock+0xac/0x490 [ 2113.564342] ? __lockdep_reset_lock+0x180/0x180 [ 2113.565294] ? perf_trace_lock+0xac/0x490 [ 2113.566130] ? SOFTIRQ_verbose+0x10/0x10 [ 2113.566949] ___sys_sendmsg+0xf3/0x170 [ 2113.567734] ? sendmsg_copy_msghdr+0x160/0x160 [ 2113.568678] ? lock_downgrade+0x6d0/0x6d0 [ 2113.569539] ? find_held_lock+0x2c/0x110 [ 2113.570370] ? __fget_files+0x296/0x480 [ 2113.571193] ? __fget_light+0xea/0x290 [ 2113.571996] __sys_sendmsg+0xe5/0x1b0 [ 2113.572762] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2113.573644] ? rcu_read_lock_any_held+0x75/0xa0 [ 2113.574604] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2113.575582] do_syscall_64+0x33/0x40 [ 2113.576338] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2113.577381] RIP: 0033:0x7f7d08ed6b19 [ 2113.578145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.581860] RSP: 002b:00007f7d0644c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2113.583397] RAX: ffffffffffffffda RBX: 00007f7d08fe9f60 RCX: 00007f7d08ed6b19 [ 2113.584834] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2113.586269] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2113.587680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2113.589109] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2113.591216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:30:35 executing program 0: r0 = getpid() r1 = getpid() r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x9b7}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x3, 0x40, 0x1, 0x0, 0x1, 0x29b00, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x50128, 0x8, 0x7fff, 0x7, 0x1f, 0x7, 0x7, 0x0, 0x5, 0x0, 0x1}, r1, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x6, 0x0, 0x2, 0x0, 0x1ff, 0x8000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x2, 0x3}, 0x4000, 0x2, 0x2, 0x5, 0x9, 0x3, 0x0, 0x0, 0xffff, 0x0, 0x87}, r1, 0xa, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, r2, 0x0) 04:30:35 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 50) 04:30:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) (fail_nth: 16) [ 2113.894613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2113.897857] FAULT_INJECTION: forcing a failure. [ 2113.897857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2113.900949] CPU: 1 PID: 12739 Comm: syz-executor.2 Not tainted 5.10.154 #1 [ 2113.902565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.904473] Call Trace: [ 2113.905142] dump_stack+0x107/0x167 [ 2113.905962] should_fail.cold+0x5/0xa [ 2113.906735] _copy_to_user+0x2e/0x180 [ 2113.907525] simple_read_from_buffer+0xcc/0x160 [ 2113.908480] proc_fail_nth_read+0x198/0x230 [ 2113.909361] ? proc_sessionid_read+0x230/0x230 [ 2113.910295] ? security_file_permission+0x24e/0x570 [ 2113.911308] ? perf_trace_initcall_start+0x101/0x380 [ 2113.912342] ? proc_sessionid_read+0x230/0x230 [ 2113.913268] vfs_read+0x228/0x580 [ 2113.913993] ksys_read+0x12d/0x260 [ 2113.914720] ? __ia32_sys_pwrite64+0x230/0x230 [ 2113.915657] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2113.916643] do_syscall_64+0x33/0x40 [ 2113.917408] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2113.918468] RIP: 0033:0x7f7d08e8969c [ 2113.919225] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2113.922961] RSP: 002b:00007f7d0644c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2113.924489] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00007f7d08e8969c [ 2113.925949] RDX: 000000000000000f RSI: 00007f7d0644c1e0 RDI: 0000000000000004 [ 2113.927397] RBP: 00007f7d0644c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2113.928830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2113.930286] R13: 00007ffc7d5b91ef R14: 00007f7d0644c300 R15: 0000000000022000 [ 2113.943795] FAULT_INJECTION: forcing a failure. [ 2113.943795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2113.946145] CPU: 1 PID: 12740 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2113.947547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.949228] Call Trace: [ 2113.949783] dump_stack+0x107/0x167 [ 2113.950528] should_fail.cold+0x5/0xa [ 2113.951307] _copy_from_user+0x2e/0x1b0 [ 2113.952124] input_event_from_user+0x1dd/0x290 [ 2113.953067] ? input_devices_seq_show+0xfe0/0xfe0 [ 2113.954074] evdev_write+0x257/0x420 [ 2113.954845] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2113.955916] ? security_file_permission+0x24e/0x570 [ 2113.956958] do_iter_write+0x482/0x670 [ 2113.957781] ? import_iovec+0x83/0xb0 [ 2113.958566] vfs_writev+0x1ae/0x5e0 [ 2113.959313] ? vfs_iter_write+0xa0/0xa0 [ 2113.960130] ? __fget_files+0x26d/0x480 [ 2113.960951] ? lock_downgrade+0x6d0/0x6d0 [ 2113.961809] ? find_held_lock+0x2c/0x110 [ 2113.962652] ? __fget_files+0x296/0x480 [ 2113.963473] ? __fget_light+0xea/0x290 [ 2113.964276] do_writev+0x283/0x300 [ 2113.964999] ? vfs_writev+0x5e0/0x5e0 [ 2113.965797] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2113.966779] do_syscall_64+0x33/0x40 [ 2113.967534] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2113.968571] RIP: 0033:0x7f701ebafb19 [ 2113.969328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.973046] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2113.974616] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2113.976060] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2113.977508] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2113.978955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2113.980402] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2128.254102] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:30:59 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 51) 04:30:59 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x7ffd) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x60002004}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup3(r2, r0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000008010200000000000000feacd953baf9be00020000000600024000190000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000801) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5, 0xf9, 0x3, 0x7, 0x1}) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012007606"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) 04:30:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:30:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000200)={0x44004100, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {}, &(0x7f0000000140)=""/49, 0x31, &(0x7f0000000180)=""/32, 0x0}, 0x58) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x1, 0x0, &(0x7f00000002c0), 0x1a5028, &(0x7f00000003c0)=ANY=[@ANYBLOB='discard,auto_da_alloc,pcr=00000000000000000052,fowner=', @ANYRESDEC=r0, @ANYBLOB="529320d1e9f563de7d54fd78ffc05f5396612422802b5c4eb2fe69762b09e685191e1d36cc362466047c5e3082", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x157) fspick(r1, &(0x7f0000000240)='./file0\x00', 0x0) 04:30:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = io_uring_setup(0x49ad, &(0x7f0000000040)={0x0, 0x0, 0x2}) r2 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r5) keyctl$set_timeout(0xf, r5, 0x0) r6 = getegid() setgid(r6) keyctl$chown(0x4, r5, 0xee01, r6) r7 = getpid() newfstatat(0xffffffffffffff9c, &(0x7f0000005140)='./file1\x00', &(0x7f0000005180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresgid(&(0x7f0000005200), &(0x7f0000005240)=0x0, &(0x7f0000005280)) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000053c0)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)="fbdc524c1a53afd5599ff0a5cbc24c9e749e2c035d88219bdcb4234705212c53298388612c20feeedb2610f6b53b7df24e38a4ff559591564c065168f0cf1e224cf31aa977327429f83369208eac4c88e6f0f4e12e936fce64148a19843eaf", 0x5f}, {&(0x7f00000003c0)="5e5a2deaab4d24f6608344de3465955faf9a096e17256d69019fe0c44455aa5e25f5b66fd507bb3c4f8456cc37fa71191e5895bb4796f8cc33666451d240f6d244bc2d0fe06aabec316e38f8282bacf8844f97c6", 0x54}, {&(0x7f0000000440)="39f237575c9e0fd34cd142053ccbf1032e5fd686ae2826ae18c2ca093814e01f8a552089c3182e482e3efd907270af062bd98140411a0885ff2549a79658b3d47733748fac33ceba7860aafe441a3a1dd19146c129ed67e0879a512a28e7776d79e8c39060d795051180fbe9d743dcf97db96a09f4795000f7abb3d7c936d9ac292e90aa87a33d15dc3cf14967eccf98b7e5a3b57b6d6c67aac8e80c007c3279e001f7fd1fc53ad8b69e94472313ee419dedca5d4e4d6093f05026080be8b6c577bfb2e5bfd4b8dfb3a924988a6b08a2e119a4f8dd985d09e6fabe4db8a871c7", 0xe0}, {&(0x7f0000000540)="916568b812d45f8cacbb9eeba6acb795f60c9e20969e436994b5607b6f", 0x1d}], 0x4, &(0x7f00000019c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}], 0x120, 0x2400880c}}, {{&(0x7f0000001b00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000001b80)="a25da79c9a34ad312bb44e01271457e2fbe036dfc396018a303c7fbbed8ba71d35079ba5d5b682fe822e64a684a9426a9f8df0fb04dd4b6e6286d091824e910c65a025391f4bed9eb211f9921e3a6a338208430feb263a0f8f4d793f5bb6ef3d4bae7866bd85c0d575681ad17883c46d59bb0aa2c85d0d167bb90b561280d78ce580ea537643a7b735e9", 0x8a}, {&(0x7f0000001c40)="730b6cada98db927a15d6b877cb2d32dc1f79143d5c02c699a7f0cf8f7c72a40c10385690bb3805dae91f7b99d5e16c03271a880803b361a6af3294f501c605d937d86844e334b4afcdec0c1980deb847ebd47feed962ed5e7d0f07501ca22509bfcc1f4343cb14a6628f74d7f85b274cefc12cff88d803114ba9bc00ffb2f003aa8f018d4f9e98ebe1974e850cb69874c1d0ea98e42cf6c5297f2437e6e7172fba0cf1a23f3a21535705e32065a1f64ad4db2359478e9ea03095f85b7", 0xbd}], 0x2, &(0x7f0000003900)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8, 0x8000}}, {{&(0x7f0000003a00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003c40)=[{&(0x7f00000005c0)="b7c2b2aee90e04afa3167b5a8c6acacdee6301a37ab210be66216e88b00fa923bc402b27b21b1f04510a68104f4cb08e7b81eeb07c828a87cd212d7a054e3a98369d3756351313d1a09abdd4abbd85a0144e91d7e54c586fba733a724e247c4a9b7095ca63b06631863888040c2f3ca19268f23956b7a7a5b362a31bd37c0489fcc0c4f53f375f1c6e4ec1cca7c2d3bb4a3bc92e1954da255c178471dd0397fcfb35d5f3596b3f48ed79f9481771b51eb4864f695a54dbdc9daa3873dcf801f8e9493406917ed8661b00913239e5dfd323855f0000", 0xd5}, {&(0x7f0000003b40)="33c15a5f790f0ea1ddc7bd46ba013de8fdbd092efd64b2035fb63f090fc1c21cedd82380b157", 0x26}, {&(0x7f0000003b80)="451b5a5156eda44944713283447851275bc6acf09aec062951fb710c50f221607967143f0d36eb517bd2c159dad690d62cf3d151a855743d61678d4385332341a5f2b2e73430f3f5b69428bc3464f7776415bdc77fa741a3fb979b293da89e", 0x5f}, {&(0x7f0000003c00)="31bffba2e6e33ba1ced634a077b7ea388c70f6c097ca0403511844ac82c697856763434bf267bfe9efb9e6dc", 0x2c}], 0x4, &(0x7f0000004180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r4, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r1, r3, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, r4, r3, r4, 0xffffffffffffffff]}}], 0x160, 0x24}}, {{&(0x7f0000004300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004800)=[{&(0x7f0000004380)="cee119f403b198f94894156f952b51d885349bd70b0382f7fe9d8cffb0551e50849ed2b841f72d2039bec2b8", 0x2c}, {&(0x7f00000043c0)="40fdc5cf4e5fb6dea96b0e33572af3670092694cf75bb0008f54eba1b6f604dc09f68ce070641bc16a9c472ff8b9ce199a8bb918975dc03fb784157e0a8506df12174e492f0d464128acf0178fe4ef3fe7ac4c2e2db980ddd01f39ecbb5218cb59b73fc1e59494536291a094f817d843df5f69e4fd3f3afc92b28068a06452728aac9c2ab26c00c0004ad0a3a6a455c8bc20a0087ee42b22d219a149ddf9d4e72869083663e1ebc409811dba468c00bd0409a76992db8c6992e45c190480c721689a7d1788e3c95c1f4a3d1530b895d306db55b5ab30", 0xd6}, {&(0x7f00000044c0)="d1a6bc0205a538d493b104bb550968b073215af4af3512a065156c36d933ec0969afc6e1e03e4fec96ac3c8e7bd8e6d5d55a34dd65c1f7b365d723b23ebbc3b476f9fb0dff8296b140d1cc0af5be58d8e0668d02e6b13b4dafa282787915a023989d8a54c855078ae48127b8c938f70a4a856825f2f6a4c9835e672c0f594bd45a5c74c890362cebea8373e4a9a59eec813e52e91da1276a00d6d3f9782459b7f73ad80e613d929a00117d253d2854a014a5693d253aedc5", 0xb8}, {&(0x7f0000004580)="98912ec46301ca29402c7cb0e5c091a74c75d649f850ebd308fbd680d702910939b5c8bfb99bac81b0dc2d002bf79cc7f5b793c55c01a207e3a80014d9d3b5cf4a5c0c10c037e3608212b3f7dbd423eba0706e423b9c5ce0b8e4fa37897ff68c8c1482b6b9c1a13aed86f7f8970c8a493f2147fc09c5d469994e6a46e3301df16c3ec0060fa35eaada48b7d2e335f41d4d8f0b25cd84d246bbf3a0ae64925ac6d0bc8db7a16df5d5232e388ac1814a7a8e7cfb0d9ec1259c3aaae7a58b29b63969b0f65831c90c3ed26bc837a18f52acc7e2ed03b6e38db39fbcf837bf", 0xdd}, {&(0x7f0000004680)="cf95a935f2d723f448eefaab1df6e1463714398ef5fe263291dd7bd71e5418a8dbe67cdfd9b693b0ef44054d04149921eadfd356715419590d2f6c635c31eebf60cd52a768323da72520c7303716c4769ece092b505930a599891f0c6094db9a0630b42577dc6a426c361b8ac075fe683c4a1c0d5a91db8905d8da", 0x7b}, {&(0x7f0000004700)="dca1d0cb93415bdce639d98ccb23a091b6596d77d98c38d67ce7c7ee43fc023e751c24cc8bdae165dfd8ea6070d3e16148a5d5369ae0504cb88f626f1cbead38eb9f4ef20dc4f77340d44b602b75421696151bd9243e2bc3c7e9855841d8efd6ed8053c16905774e88077c79fad43b376544b44297cc2e8bfdeaa3", 0x7b}, {&(0x7f0000004780)="9c79b304eb82a5a279b0de9bb32152a978902141718dee8115586525dbf92a475abf795ac04cb55d2792887bfbe7e405bb9f7bd17113de862a5f1fb9a3e5e8cfd1627bc530442aa7b1cdc9e2ea445c584ee0a5d368066b3f28a78427c4c74832310deabeeec227c0228a313f07d61cba0c711200d72f85553a1d46a8", 0x7c}], 0x7, &(0x7f0000004ac0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r3, r0]}}, @cred={{0x1c}}], 0x150, 0x44800}}, {{0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000004c40)="470ffd2a792fe3f28fdb6393f2219637d173101af19c8392ea8902d1aac825692ddc0bdd55f0248a5792e9c187e55c5d3909655724c122db621142815afce3169bfde697567800341ef0f3652fbf43eacbe9f76f5ac83451986c7a8f58e4ea7e5a100cdc5faf0e482c05c648451368ddd75e1d4da0834b748a50c18e2bdf59cba931d66dbe89473e577d038ae8eee62afa25fc1bfeaa216c15a6bb73f80fd0f7de321c8d6f05d924bdb4d153892302c978ba9f", 0xb3}, {&(0x7f0000004d00)="49f9929ccd4be8b53a4f5755dc0594f81837bfd0790a34bbbc8c11acba35156cf4ba4ca258d3a0ed5e00a93ecc9ff4d553927f5c99fe194cf97e28620cca79a6f60eb2", 0x43}], 0x2, &(0x7f0000004e00)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x98, 0x20000001}}, {{&(0x7f0000004ec0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000004f40), 0x0, &(0x7f00000052c0)=[@rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r4, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}], 0xd0, 0x800}}], 0x6, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@aname={'aname', 0x3d, '\x00'}}, {@msize={'msize', 0x3d, 0xc24}}, {@nodevmap}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7ff}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 04:30:59 executing program 3: mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) mmap$usbmon(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x1000004, 0x13, r0, 0x2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffb000/0x1000)=nil) 04:30:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0xb8) r1 = socket$inet(0x2, 0x3, 0x1) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) dup3(r1, r2, 0x0) r3 = dup(r2) sendfile(r3, r0, &(0x7f0000000000), 0x3) 04:30:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x38) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000340)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xffff}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x60, r2, 0x400, 0x70bd21, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c040}, 0x20040000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000319dd5bd"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x5c, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcac}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @loopback, 0x100}}}}]}]}, 0x5c}}, 0x4000) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYRES16=r0]) [ 2137.509753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2137.564343] FAULT_INJECTION: forcing a failure. [ 2137.564343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2137.566755] CPU: 1 PID: 12762 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2137.568153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2137.569823] Call Trace: [ 2137.570364] dump_stack+0x107/0x167 [ 2137.571095] should_fail.cold+0x5/0xa [ 2137.571874] _copy_from_user+0x2e/0x1b0 [ 2137.572678] input_event_from_user+0x1dd/0x290 [ 2137.573751] ? input_devices_seq_show+0xfe0/0xfe0 [ 2137.574822] evdev_write+0x257/0x420 [ 2137.575674] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2137.576861] ? security_file_permission+0x24e/0x570 [ 2137.578018] do_iter_write+0x482/0x670 [ 2137.578903] ? import_iovec+0x83/0xb0 [ 2137.579767] vfs_writev+0x1ae/0x5e0 [ 2137.580583] ? vfs_iter_write+0xa0/0xa0 [ 2137.581475] ? __fget_files+0x26d/0x480 [ 2137.582386] ? lock_downgrade+0x6d0/0x6d0 [ 2137.583315] ? find_held_lock+0x2c/0x110 [ 2137.584236] ? __fget_files+0x296/0x480 [ 2137.585052] ? __fget_light+0xea/0x290 [ 2137.585838] do_writev+0x283/0x300 [ 2137.586555] ? vfs_writev+0x5e0/0x5e0 [ 2137.587321] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2137.588297] do_syscall_64+0x33/0x40 [ 2137.589042] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2137.590082] RIP: 0033:0x7f701ebafb19 [ 2137.590823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2137.594644] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2137.596344] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2137.597946] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2137.599537] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2137.601128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2137.602734] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2137.604942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40241 sclass=netlink_route_socket pid=12758 comm=syz-executor.4 04:30:59 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/211, 0xd3}, {&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/101, 0x65}], 0x4, 0xf7, 0x10000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:30:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) [ 2137.666156] kernel write not supported for file /snd/seq (pid: 11182 comm: kworker/1:0) [ 2137.675861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12775 comm=syz-executor.4 [ 2137.678935] tmpfs: Unknown parameter '' [ 2137.760597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40241 sclass=netlink_route_socket pid=12778 comm=syz-executor.4 [ 2137.801191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:30:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001440)=ANY=[@ANYBLOB="17d6868cfa08a4dc1c0e616b279ec177d0c574bb5696ec2cb7bf416c131acd574cf7b1c4801ff694f5e34035c440bd83327e7fc7247295a9a7a5878b471d70426a4189c55615fd62829d4da0d3486af161193f3c006b5374f539406b45427db2bc07f21df27506", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r0 = clone3(&(0x7f0000000200)={0x44004100, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgrp(r0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) clone3(&(0x7f0000001340)={0x212000200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0xd}, &(0x7f0000000280)=""/170, 0xaa, &(0x7f0000000340)=""/4096, &(0x7f00000001c0)=[r1, r0, r0], 0x3, {r2}}, 0x58) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1301003, 0x0) setfsuid(r3) clone3(&(0x7f0000000200)={0x44004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) lsetxattr$system_posix_acl(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)='system.posix_acl_access\x00', &(0x7f0000001640)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="00000000cf3b5033266ca2fb304f78205187274d588d6c63e04b6ae70bfb6670153f8822df3dc374587f33efd7d26c340465709bf4ee3fd2ced17bd899e684c486cdcb9e33c433e05a34b72e08c76c3ad036231b6daa7366b5097ac04669bd82b2e47abd873a0b4893ffa5dfcfcfaa97dc39b5ff0e22cd7326ee", @ANYRES32=r5, @ANYBLOB="02000200", @ANYRES16, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="040001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="10000400000000002000030000000000"], 0x84, 0x2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) lstat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r6, r7, r8) [ 2137.818975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12775 comm=syz-executor.4 [ 2137.827571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:30:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3035, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) fcntl$setstatus(r0, 0x4, 0x44400) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x4000}]) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8044c, 0x0) clone3(&(0x7f0000000ac0)={0x134064500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x10000000) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x10000000) syz_open_dev$vcsn(&(0x7f0000000600), 0x1009e, 0xe043) [ 2137.885507] kernel write not supported for file /snd/seq (pid: 11182 comm: kworker/1:0) 04:30:59 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 52) [ 2138.081219] FAULT_INJECTION: forcing a failure. [ 2138.081219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2138.083665] CPU: 1 PID: 12799 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2138.085061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2138.085069] Call Trace: [ 2138.085097] dump_stack+0x107/0x167 [ 2138.085122] should_fail.cold+0x5/0xa [ 2138.085150] _copy_from_user+0x2e/0x1b0 [ 2138.085180] input_event_from_user+0x1dd/0x290 [ 2138.085200] ? input_devices_seq_show+0xfe0/0xfe0 [ 2138.085238] evdev_write+0x257/0x420 [ 2138.092553] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2138.093675] ? security_file_permission+0x24e/0x570 [ 2138.094777] do_iter_write+0x482/0x670 [ 2138.095619] ? import_iovec+0x83/0xb0 [ 2138.096440] vfs_writev+0x1ae/0x5e0 [ 2138.097228] ? vfs_iter_write+0xa0/0xa0 [ 2138.097244] ? __fget_files+0x26d/0x480 [ 2138.097271] ? lock_downgrade+0x6d0/0x6d0 [ 2138.097288] ? find_held_lock+0x2c/0x110 [ 2138.097325] ? __fget_files+0x296/0x480 [ 2138.097369] ? __fget_light+0xea/0x290 [ 2138.102782] do_writev+0x283/0x300 [ 2138.102806] ? vfs_writev+0x5e0/0x5e0 [ 2138.102836] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2138.102866] do_syscall_64+0x33/0x40 [ 2138.102889] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2138.102904] RIP: 0033:0x7f701ebafb19 [ 2138.102927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2138.102939] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2138.102964] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2138.102977] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2138.102990] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2138.103003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2138.103016] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2151.508958] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:31:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 04:31:24 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth0_to_batadv\x00') 04:31:24 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ftruncate(r1, 0x5) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) recvmmsg$unix(r0, &(0x7f0000002e00)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000300)=""/16, 0x10}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/98, 0x62}, {&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/230, 0xe6}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/105, 0x69}, {&(0x7f0000000780)=""/169, 0xa9}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f00000009c0)=""/21, 0x15}], 0xa}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000001e40)=""/242, 0xf2}, {&(0x7f0000000b80)=""/18, 0x12}], 0x2, &(0x7f0000001f40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/65, 0x41}, {&(0x7f0000000d40)=""/4, 0x4}], 0x2, &(0x7f0000002040)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002100), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000002180)=""/221, 0xdd}, {&(0x7f0000002280)=""/124, 0x7c}], 0x2}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002380)=""/57, 0x39}, {&(0x7f00000023c0)=""/43, 0x2b}, {&(0x7f0000002400)=""/176, 0xb0}, {&(0x7f00000024c0)=""/36, 0x24}, {&(0x7f0000002500)=""/41, 0x29}, {&(0x7f0000002540)=""/205, 0xcd}], 0x6, &(0x7f00000026c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f00000027c0), 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002840)=""/171, 0xab}, {&(0x7f0000002900)=""/221, 0xdd}, {&(0x7f0000002a00)=""/232, 0xe8}, {&(0x7f0000002b00)=""/31, 0x1f}, {&(0x7f0000002b40)=""/174, 0xae}, {&(0x7f0000002c00)=""/136, 0x88}], 0x6, &(0x7f0000002d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x7, 0x102, &(0x7f0000002fc0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x14}}}}, ["", ""]}, 0x28}}, 0x4800) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffffff, &(0x7f0000000a00)='./file1\x00', 0x0, &(0x7f0000000e00)=[&(0x7f0000000c00)='-+*\x00', &(0x7f0000000c40)='mptcp_pm\x00', 0x0, 0x0, &(0x7f0000000d00)='mptcp_pm\x00'], 0x800) 04:31:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r0, 0x4, 0xc00) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200002) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x8940, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESOCT=r1]) dup2(0xffffffffffffffff, r1) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2108}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r3, 0x9) ioctl$FS_IOC_FSSETXATTR(r3, 0xc0c0583b, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x3, 0x3, 0x4}}) fdatasync(r1) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) 04:31:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:31:24 executing program 5: ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x4000000000000b3, 0x4000880) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) 04:31:24 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xc90, 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8001, 0x2, @local}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) 04:31:24 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 53) [ 2162.448906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2162.459672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2162.493179] FAULT_INJECTION: forcing a failure. [ 2162.493179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2162.495680] CPU: 1 PID: 12830 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2162.497045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2162.498746] Call Trace: [ 2162.499286] dump_stack+0x107/0x167 [ 2162.500024] should_fail.cold+0x5/0xa [ 2162.500798] _copy_from_user+0x2e/0x1b0 [ 2162.501605] input_event_from_user+0x1dd/0x290 [ 2162.502534] ? input_devices_seq_show+0xfe0/0xfe0 [ 2162.503523] evdev_write+0x257/0x420 [ 2162.504284] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2162.505347] ? security_file_permission+0x24e/0x570 [ 2162.506378] do_iter_write+0x482/0x670 [ 2162.507174] ? import_iovec+0x83/0xb0 [ 2162.507950] vfs_writev+0x1ae/0x5e0 [ 2162.508688] ? vfs_iter_write+0xa0/0xa0 [ 2162.509492] ? __fget_files+0x26d/0x480 [ 2162.510316] ? lock_downgrade+0x6d0/0x6d0 [ 2162.511153] ? find_held_lock+0x2c/0x110 [ 2162.511989] ? __fget_files+0x296/0x480 [ 2162.512806] ? __fget_light+0xea/0x290 [ 2162.513598] do_writev+0x283/0x300 [ 2162.514331] ? vfs_writev+0x5e0/0x5e0 [ 2162.515107] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2162.516084] do_syscall_64+0x33/0x40 [ 2162.516837] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2162.517865] RIP: 0033:0x7f701ebafb19 [ 2162.518625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2162.522321] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2162.523850] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2162.525279] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2162.526717] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2162.528146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2162.529576] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:31:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x452702, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x1, 0x20, 0x5, 0x7fffffff, 0xac, r2}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x50, r0, 0x2205e000) ftruncate(r0, 0x1) 04:31:24 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000140)={"e5c39ef3d2e365d009658b74", &(0x7f0000000080)="c7eb1956daeee153bbaa1c6ca8bb6346aba797951d4727dd2794d7d93e", 0x1d, 0x4, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a3998ce5", 0x1, "5349089e", 0x6, 0x90, 0x78, "2d4212", "670c9618f94b8f9f5a465b2b4a746bace6be8c8fa3571e7b8f8bb01a56341232c1ba00839070dfae7c55b1979a25"}, 0x3, 0x5, 0x7, &(0x7f0000000100)}) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@hsc={0x1, 0x0, "8aa5a4c31d149527d15c"}) 04:31:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:31:24 executing program 4: r0 = syz_io_uring_setup(0x25, &(0x7f0000000080), &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') write$P9_RWALK(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000340)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xffff}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf256000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099003f0000ecc7d743d90600b100ca5000040c002a0072060303030343030600b100ff0f00ee00000000030000002200b10000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8805}, 0x8030) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 04:31:24 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ptrace(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r0 = epoll_create(0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000012000101e33bda473502f7bf284f330c220895467a2b892b750c05d9f57c8ddcfb8aebd119d5b9ed51d4fcb37c7cfd96ebaf31df0f2fd9fc723a2b73a0396a35861d03c59658d4a4c126a0c226a8f662a10c02c6a9191c3616"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000100)={0x4, 0xb1df7f7, 0x5, 0x8, 0x8, [{0x81, 0x38bf362d, 0x4736, '\x00', 0x200}, {0x4, 0x0, 0x2, '\x00', 0x1588}, {0x3, 0x3, 0x100000000, '\x00', 0x8}, {0x30b, 0x7ff, 0x200, '\x00', 0x204}, {0x0, 0x8, 0xf9, '\x00', 0x2208}, {0x7, 0x0, 0x0, '\x00', 0x100}, {0x101, 0x96f, 0x8001, '\x00', 0x80a}, {0xba, 0x1, 0x3, '\x00', 0x1000}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0xb39e, 0x2, 0x2, 0x43d3}]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) [ 2162.762270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2162.769127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2162.804861] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2162.816355] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2162.866249] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2162.887355] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2162.898767] audit: type=1326 audit(1668832284.558:76): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12841 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0470271b19 code=0x0 [ 2163.641905] audit: type=1326 audit(1668832285.301:77): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12841 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0470271b19 code=0x0 04:31:41 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 54) 04:31:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) truncate(&(0x7f0000003200)='./file1\x00', 0x3) creat(&(0x7f0000000000)='./file1\x00', 0x80) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000000), 0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x0, 0x800}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000005, 0x80010, 0xffffffffffffffff, 0xb5062000) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x80) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000efffffff0000"]) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x8000) 04:31:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="664b5a33b3840081e0844acdb2c50973d5a7aed1d835b1df9c2b23b6d01213d0f471e369ac5df5900cd4aa61ca5e43bed942f1b8f223e181cdb8fe523ba4d1b4a3817c0d7bb8a877406e3262cb43c54245ee383af1ab5855c52d6f4b1482686c3fda226c7282255218c1f6463cd6f4c2bcb4bde17d1a2f770625ed73dc95edf70e8598ad16d32b285832de1071296f34"]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) close(r0) 04:31:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) mknodat$loop(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 04:31:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:31:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="2e144d0fa33dc2a03100"]) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x50, 0x6, 0x8, 0x7, 0x0, 0x0, 0x60000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xa7d8, 0x9}, 0xc00, 0xffffffff80000000, 0x8, 0x5, 0x7, 0x6, 0x576, 0x0, 0x101, 0x0, 0x1}, 0x0, 0x9, r1, 0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/167, 0xa7}], 0x1) 04:31:41 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/notes', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') read$hidraw(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2}) move_mount(r1, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00', 0x45) open(&(0x7f0000000100)='./file0\x00', 0x7a1481, 0x14) 04:31:41 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @remote}, &(0x7f0000000180)=0xc) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b00400001200040025bd7000fedbdf25263109034e214e20030000008b5600001100000002000000080000000600000002000000ff0100009ff09d06b40b6f2dabe5c4956b2125067227d1779edf08e940da21aedf5300000000573a68506f2c7e1c7c8ad9f915d20ecbb0191e0b679de4f9dbca682353c584927bb7a148b4cf", @ANYRES32=r2, @ANYBLOB="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"], 0x4b0}}, 0x44000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000000340)) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={r2, @local, @rand_addr=0x64010102}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x10, 0x0}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x0, 0x0, 0x0, 0xffffffff}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) [ 2180.261359] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2180.279841] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2180.295348] FAULT_INJECTION: forcing a failure. [ 2180.295348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2180.298167] CPU: 1 PID: 12875 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2180.299728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2180.301736] Call Trace: [ 2180.302395] dump_stack+0x107/0x167 [ 2180.303278] should_fail.cold+0x5/0xa [ 2180.304398] _copy_from_user+0x2e/0x1b0 04:31:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) [ 2180.305459] input_event_from_user+0x1dd/0x290 [ 2180.306702] ? input_devices_seq_show+0xfe0/0xfe0 [ 2180.307824] evdev_write+0x257/0x420 [ 2180.308686] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2180.309886] ? security_file_permission+0x24e/0x570 [ 2180.311164] do_iter_write+0x482/0x670 [ 2180.312098] ? import_iovec+0x83/0xb0 [ 2180.312984] vfs_writev+0x1ae/0x5e0 [ 2180.313796] ? vfs_iter_write+0xa0/0xa0 [ 2180.314707] ? __fget_files+0x26d/0x480 [ 2180.315596] ? lock_downgrade+0x6d0/0x6d0 [ 2180.316518] ? find_held_lock+0x2c/0x110 [ 2180.317510] ? __fget_files+0x296/0x480 [ 2180.318484] ? __fget_light+0xea/0x290 [ 2180.319428] do_writev+0x283/0x300 [ 2180.320240] ? vfs_writev+0x5e0/0x5e0 [ 2180.321147] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2180.322362] do_syscall_64+0x33/0x40 [ 2180.323246] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2180.324462] RIP: 0033:0x7f701ebafb19 [ 2180.325368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2180.329807] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2180.331665] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2180.333439] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2180.335197] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2180.336956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2180.338729] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:31:42 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000200)="ed713264a7e034a8bb678f63541eabe349059f036a754f21f906d749788a0309c3188ce6d524138d0aae77b0f815c265f25050d056814594fd8b3ec1e7dbd02b1a707ec327f2569693b475fcc50f64f21167a923827c4ad7da394ede157690107b35cf5ae29cbc466a9e1889db34df5a0d92f4df18eec4ad831969b770bd20043e72a4c3f075dc9c03158fe38e1c9e60b1d3842eb11cba7e21ce2e00c4d4ca4f3cba4b0553451c5b118060b599eee594bc3d31b305acc904df4040dca4560a928cb9f1db222269c4f23f2a92", 0xcc, 0x2) umount2(&(0x7f0000000140)='./file0\x00', 0x9) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000001c0)=ANY=[@ANYBLOB="08000000000000029300"]) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) open(&(0x7f0000000180)='./file0\x00', 0x2840, 0x25) [ 2180.408170] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:31:42 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x409becb7bde85c2, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000004c40)={0xa, 0x4e21, 0x2, @private0, 0x600000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000003580), 0x8000, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/224, 0xe0, 0x6) [ 2180.413208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:31:42 executing program 1: chdir(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/9p', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r2, &(0x7f0000002f80)="e1c97353f73cb8b170622cd1648fd630d7200595", 0x14, 0xdffb3f6a, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) copy_file_range(r2, &(0x7f0000000100)=0x5, 0xffffffffffffffff, 0x0, 0xf86, 0x0) write$bt_hci(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="019b04ffc800"], 0x6) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001280), 0x40002, 0x0) r5 = syz_io_uring_setup(0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, r4}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) dup(r0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)='./file0\x00') unlink(&(0x7f00000001c0)='./file1\x00') 04:31:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1f20accb907e7610ef1a88094e45ba4d3c89afe796c7f9d7e734770eb37ba278a6024c211cabaa6b5fdefe73f1ed82ea02e7", 0x32}, {&(0x7f0000000180)="5ae24e41915d6410fca44a552b052fe3e646bb21b0b8802e82b49133ce29b4c70bb399e52a3eef05dd3b5acff7ccb097e9695d97783c070a48f927bd778dab982846e791fa6dc9de0e90e4966a16fef3ce9cf52001649df060845d6a57328e80ab063ec4cbdafd45963418", 0x6b}], 0x2) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='bfs\x00', 0x800, &(0x7f0000000340)='#\x00') fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) stat(&(0x7f00000005c0)='./file1\x00', 0x0) 04:31:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7fffffff) copy_file_range(r2, &(0x7f0000000040)=0x1d, r3, &(0x7f0000000080)=0x6, 0x8, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x1081030000000000) 04:31:42 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 55) 04:31:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) [ 2180.587508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2180.625635] FAULT_INJECTION: forcing a failure. [ 2180.625635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2180.628064] CPU: 1 PID: 12908 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2180.629395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2180.631012] Call Trace: [ 2180.631530] dump_stack+0x107/0x167 [ 2180.632204] should_fail.cold+0x5/0xa [ 2180.632939] _copy_from_user+0x2e/0x1b0 [ 2180.633653] input_event_from_user+0x1dd/0x290 [ 2180.634536] ? input_devices_seq_show+0xfe0/0xfe0 [ 2180.635405] evdev_write+0x257/0x420 [ 2180.636118] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2180.637066] ? security_file_permission+0x24e/0x570 [ 2180.638046] do_iter_write+0x482/0x670 [ 2180.638737] ? import_iovec+0x83/0xb0 [ 2180.639607] vfs_writev+0x1ae/0x5e0 [ 2180.640641] ? vfs_iter_write+0xa0/0xa0 [ 2180.641649] ? __fget_files+0x26d/0x480 [ 2180.642687] ? lock_downgrade+0x6d0/0x6d0 [ 2180.643734] ? find_held_lock+0x2c/0x110 [ 2180.644785] ? __fget_files+0x296/0x480 [ 2180.645810] ? __fget_light+0xea/0x290 [ 2180.646815] do_writev+0x283/0x300 [ 2180.647720] ? vfs_writev+0x5e0/0x5e0 [ 2180.648698] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2180.649926] do_syscall_64+0x33/0x40 [ 2180.650894] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2180.652088] RIP: 0033:0x7f701ebafb19 [ 2180.652928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2180.657049] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2180.658785] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2180.660393] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2180.660406] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2180.660419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2180.660433] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:31:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0xcc6, 0x4, 0x1a, 0x5, "58b31d7ccb2b14a86e7a75ad771a0000b9ae8f085ab0a922a3af20cc85413f8cab1d8dc63e2dfa1c338a5c2e30f0c67db9b91e9a8d3699a8f93df3f7407d4ab7", "055a2c22c2beb0ba840dbf7fbe6c4e0abbd3839239759d686d00e9a616023cd7", [0xad, 0x4183]}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0xfe, 0x4, 0x7f, 0x81, 0x10001, 0x3, 0x3, 0x9, 0x138, 0x38, 0x330, 0x56f99fa3, 0x4, 0x20, 0x2, 0x1f, 0x2, 0x8}, [{0x60000000, 0x7f, 0x8, 0x5, 0x2, 0x9, 0x9, 0x3f}], "dc1c3331e721fbcbf6ceed81baf5c87763d65b2a16bb48596bfc1d380ddd11469233efc381bb13a42d7b2e7ad3af4bffa410e60886ccfe6e7dee330711907f36a70fc259cc9d43bf8e98990c80fd0aa31a84cd4535a9cb715f9b5ef56152d398878522d9dd8cedf888c0f5c59d1d7d9d15bb51367a575b837d8ac792b9f1ee629125a795302a4e7f7071495f9e8aed89cc77d5395ec7dadbf7db4a5e3e1469b9cf9dadc3507f25df93fb5bdf9e8b81ac2eca50cfe9695b6040d9fc6c77266ac05012f16a23d56b27682850c70eef5b52b7d5b89cce021feed48b76951eb061759495342cf499dc5e471314be9c0b04b03bca55f7f48aa575da", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x751) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 04:31:57 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x6, &(0x7f0000000400)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000400f801", 0x17}, {0x0, 0x0, 0xeef}, {&(0x7f0000000180)="bf47232395eb20f2df2e42e1713a4417f09856ba5666ff39517ffddf302f02cd7e2f78e0a0b29a03e8b757ccf2f287f109732099e790ab73dfa2d06836aa23fb8ec2e6fe6e99f8bea74287272cce9c1eebb9dba93afae3f3bbc20658786b", 0x5e, 0xffffffffffffffff}, {&(0x7f0000000280)="c0ced49bd0ea0d05d15f58827397b058aa5ecb5bdafb4f4a7815985aba556d926fe03caaa592a03ff3b2400b11c9e9a48e5b9b7635942ddc6fa9f7cd61ecbafd913042bab1408e2b27fac0ab9df1ecf1e8b660e3dcd5c7a35d994107be6997a65c2ef22319e785b86650fe64fed7b5f79d7b19973a871c808adb485343ad52f0469d7863d968bc9c1fed8669c4fe345d8e661a1f0a5a77db94d656acd9293f268e9e7240aeb8d78a1678ff387d018272bb0e1fad3c9b57a169eda3d70e3685dbe4e002", 0xc3, 0x1}, {&(0x7f0000000100)="222f83dc1bae663714b1c1685e9bdc9408242a81fe1f8b7ecb736ca60e246a6666e37de0fbc86fe705cbeb1d8b696e98308558", 0x33, 0xa7}, {&(0x7f0000000380)="fe140832221fe9e9722d351c06ec7d813a112bc01a6b4ccd0d546d6f16d59c602eca954e3959eae2db0e0d90f7548446a613e5fb872c81729acb662c133809cc8aa3d252fbdf2516e8376c966ce94f4286f695ab16e58f93fc32d1f24c9ddca4", 0x60, 0x7}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x4000000010000, 0x0) truncate(&(0x7f0000003200)='./file1\x00', 0x3) 04:31:57 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r0, 0x406, r0) fdatasync(r2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = fork() tkill(r3, 0x36) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, r3) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x19, 0x4, 0x6, 0x47, 0x0, 0x6, 0x40002, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={&(0x7f0000000000), 0xe}, 0x42009, 0xfffffffffffffffc, 0x4, 0x0, 0x1f, 0xaa15, 0x1f, 0x0, 0x10000, 0x0, 0x63cd}, r5, 0x8, r4, 0x5) 04:31:57 executing program 1: sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc2ad0040b827299}, 0x6004844) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000339078ac141400ac1414bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50009ffc00"], 0x0) 04:31:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x10, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000480)='./file0\x00') syncfs(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syncfs(r2) write$P9_RLERRORu(r2, &(0x7f00000000c0)={0x10, 0x7, 0x2, {{0x3, '#\'%'}, 0x2}}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 04:31:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3cc, 0x11, 0x101, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x35, 0x0, 0x0, @ipv4=@private}]}, @nested={0x25c, 0x81, 0x0, 0x1, [@typed={0xe, 0x33, 0x0, 0x0, @str='*$(:\xa0&::-\x00'}, @generic="255d9cc67d09703a91baffb281e47e9944d4aad7ef37bf77f4bcb534fa53b2", @generic="de43376453d3e1048dbc59120ad87a9b99405e5034f202966ec24f993715eda62b0546fba1f73217db192d9ec845badfd6aa8cb5fcd5f0c5ecbb641d09e355cc8df64f356f102f0f1cf304d213df65617eba9cc426cc2a855631ae3ec133cce2ace55952fc5aa74c7393c6b92c7c2ea67faa7890b90a5c0f2b7396b507adf5b284d907f9c517fc3818a68d8aaf3d1e4f47deaf1b5a770bc64e", @typed={0x8, 0x32, 0x0, 0x0, @u32=0x9}, @generic, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@empty}, @generic="eed10d019914a99b7397a67baaed4bdd13f515a5c8c177eb5782319e7d4aa70bc67374c360cc86bfe1bb1db3937a646548b2779b7d859c1ccef38e1cc9c042efd30234be9a9a1eeb649374a05af5cd20f8c41d380d4ed108b0ace7735726621a8a31bc190c3158e7e5d36248e422", @typed={0x29, 0x7c, 0x0, 0x0, @binary="7558a016c62bb8696cf4bd331f8ceab7c97793f8bec3386d0b2d3c89b9c061dc344e33ae13"}, @generic="de14845b9bd929757ca6d75072ecc65aa7eba384342fbb214fa93ae816b102631ed48e35c821b6bc4abc2ee8ef1ec057ea9585d480fde9ee52acf25582c37f5c053c8e9ec576ca6584293a34f6c00d35bf292a6ca5c45c3e3b95b3b7d7056710d9dbdabb72663e8949ba45170291e32711da773e4d852eb023dc82aec888f941f16a166bb7a17572b3eeab03381dfd3c916b166890f56959a0faaa53ef69e6a66dcd8c8535c3dd831468ad2773f8282356f4e3a9326bdf3fd4864e9aec39bfd6a42d4d88483cd8762449ab1faeff006300911b4e3c54f4ca51bddf420a0bf23aa48d25bbd8e0"]}, @typed={0x82, 0x8f, 0x0, 0x0, @binary="ac8e4b70c32c07e97073ee0d9342e1c10b8dc01e7ffea168ff452f49775d3248ebc515dded3d1817cba1a38c9ab64c0bd54fee7280a2f588adefd4d164258d0e722167c6113dbcabb7a7200596048f19ddf225c0d1bae34239f9c9625ac84bcdfb13c2eb6d00d86cf28f12258414f238f005f5c130e67d8512896a95e517"}, @generic="f20db416bd2e0aa08e3b859ed53ead8bbfcc17d0d8f00dc48d767df0de8fc05d40c149e3f2832c97f44a3298ee8ba19ac9060ace4422473226d37266fdb8c0281c1545062abc6b9d7e1cc9125aeac1d22cade24f659e65a438e0ca6d76f36ef1b6e52174c4c3cc17db2ff772a75ecc21458abc828db82a2a428acc6e91d4e23c3398ff72d5664788ca6873e91f06831991bcf124227ec2bf1544efc93563b422380a305d810b7688305c319491cfe8fb8b43b1409c8022eab2100fec219b7aa6db"]}, 0x3cc}}, 0x0) 04:31:57 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 56) 04:31:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) [ 2195.926792] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2195.936328] FAT-fs (loop6): Unrecognized mount option "äà" or missing value [ 2195.946188] FAULT_INJECTION: forcing a failure. [ 2195.946188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2195.946203] CPU: 1 PID: 12941 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2195.946210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2195.946214] Call Trace: [ 2195.946231] dump_stack+0x107/0x167 [ 2195.946245] should_fail.cold+0x5/0xa [ 2195.946261] _copy_from_user+0x2e/0x1b0 [ 2195.946289] input_event_from_user+0x1dd/0x290 [ 2195.952169] ? input_devices_seq_show+0xfe0/0xfe0 [ 2195.952701] evdev_write+0x257/0x420 [ 2195.953106] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2195.953667] ? security_file_permission+0x24e/0x570 [ 2195.954209] do_iter_write+0x482/0x670 [ 2195.954643] ? import_iovec+0x83/0xb0 [ 2195.954658] vfs_writev+0x1ae/0x5e0 [ 2195.954670] ? vfs_iter_write+0xa0/0xa0 [ 2195.954680] ? __fget_files+0x26d/0x480 [ 2195.954694] ? lock_downgrade+0x6d0/0x6d0 [ 2195.954704] ? find_held_lock+0x2c/0x110 [ 2195.954724] ? __fget_files+0x296/0x480 [ 2195.954749] ? __fget_light+0xea/0x290 [ 2195.958478] do_writev+0x283/0x300 [ 2195.958883] ? vfs_writev+0x5e0/0x5e0 [ 2195.959308] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2195.959850] do_syscall_64+0x33/0x40 [ 2195.960257] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2195.960821] RIP: 0033:0x7f701ebafb19 [ 2195.961231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2195.963283] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2195.964130] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2195.964910] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2195.965696] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2195.966477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2195.967263] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2195.977194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2195.987848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:31:57 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 57) 04:31:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:31:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x17}}, './file0\x00'}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x9, 0x0, 0x7da, 0x0, 0xfffffffb}) unshare(0x48020200) 04:31:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x1000}, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x30, 0x40, 0x8, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7, 0x4, 0xa0}}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="17695fc86dc5359cf865d44bc1c7fce281e6a2d111fbb3446fbfc559e0319defba03507d876cc0eff326a59da624e167055f3811590ff16a7c8483f68e25e1b1121de97f57c77bf912b8d6a3903a8b0d54a09256d83510bf31947762c0dcf649bec98313af0e5ca5f91bd38df2efe02c1bd093046105075521e26e318b1ea6fa8fc0cff072144e937793a2b0a6b9e20af19a063e84f3c7bef1c3c7df1c413f1ee9f4b8eb7c334fca86db9f0c421957674b567bdc666702b11d5adff73a756b4317f2c47ac6780d920c09d369377d5fa36b395c3a2bf0c9ac3cc998f6f0ce8e88ca9f11389d0dcdb283cc5b44257794e14ecf14e58d6589e0dfc1152ef80c8125") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c, 0xd60a90ec059b3234) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000200)="96dc9b33bc6bcf8aa323a3c47e749ea159d07e73fe68ad9b98d02e13b977748ac711bc97676bc08facd863797cdbfc91ba983215afacc33883d3628c677c6169180901d899f374726a9b72a22f7a3bb50a401ebe7473c76bc859a7e3f877a8ad44c1bc4a4601a7353edfd2b1a56de624e734ecf36d9a3d2756edd46eb2b8a36b36695df7078a905558250bad70b5da0aded6978edc27db4a3ef4f88f7a44ede0dbd49aa21e3abf44a4cca2c16fb27ac4f5c9431592153f8cbbd81941d5d58ca8b91e1432", 0xc4) 04:31:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0xd4, 0x3, &(0x7f0000000340)=[{&(0x7f0000000080)="6bd53c3630d01eb954", 0x9, 0xb5e}, {&(0x7f00000000c0)="8ee1187b4f41167ce9f1a2350c5ae4ada0c5d79e7fbbb2f671843598e3f5fa69db492d42c43dfdb9c77c24d1833f5edf", 0x30, 0x5}, {&(0x7f0000000240)="27a806598dc97b27b33242f10265cf8a43c25a1679c913e11616afbdc8c07946a7442801822b214fa806d78fc09895b21f64c54936408782114847754e21cda2f50d7252b39d5f48d4c6566df3fd24e61682d05ca172c8402b41a82344409de3395a3d01f8ca68adc488fc60d0e5c141264fb2bde9c9f13d3dd46f8d1ccf4b5cf97e1c3c6d7dd233d35fd5bedff13abb64a0a37745477643430693c1de8a9d2861f7459a275f98bd91e4a9277ac7a57056009f7f5a998ab62d0d51a05792ec3e807973d53e4994e988a8", 0xca, 0x4}], 0x800c02, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f6d626c6b5f696f5f7375626d69742c6673757569643d36316366373169000e62466f9850cb96363266fc94751667b6db6665633536632c736d61636b66737472616e736d7574653d2f405e2327282c736d61636b6673726f6f743d695f76657273696f6e2c66756e633d4d4f44554c455f434845434b2c6673636f6e746578743d757365725f752c00"]) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x8b082a, &(0x7f00000007c0)={[{@i_version}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) mount(&(0x7f00000004c0)=@filename='./file0/../file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='sysfs\x00', 0x4800, &(0x7f0000000580)=']\\*$\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) linkat(r0, &(0x7f0000000180)='./file0/../file0\x00', r1, &(0x7f0000000480)='./file0/../file0\x00', 0xcc6ac5ecfb4f7ccb) [ 2196.193417] FAULT_INJECTION: forcing a failure. [ 2196.193417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2196.193433] CPU: 1 PID: 12955 Comm: syz-executor.7 Not tainted 5.10.154 #1 04:31:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="3e3fc2db0956", 0x6}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00274e0000000000000000000000000400000009000080999e00009c00000083825e7998707fe2cfaacdd842c9b600394242fabad6e44e54f6528fc8de905ee2cdd4cd07f4e10b06aa0e2aabb42a477904681a6bc6"], 0x24}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r3) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x0) r4 = getegid() setgid(r4) keyctl$chown(0x4, 0x0, 0xee01, r4) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="82080000", @ANYRES32, @ANYBLOB="02000500", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="000100bcdfbd14e2eac7a4b1f3", @ANYRES32=0xee01, @ANYBLOB="040006000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0xee00, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="10000000000000002000010000000000"], 0xac, 0x0) acct(0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000380)=""/204, 0xcc, 0x40000103, 0x0, 0x0) unshare(0x48020200) [ 2196.193439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2196.193443] Call Trace: [ 2196.193461] dump_stack+0x107/0x167 [ 2196.193474] should_fail.cold+0x5/0xa 04:31:57 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 58) [ 2196.193491] _copy_from_user+0x2e/0x1b0 [ 2196.193507] input_event_from_user+0x1dd/0x290 [ 2196.193518] ? input_devices_seq_show+0xfe0/0xfe0 [ 2196.193538] evdev_write+0x257/0x420 [ 2196.193554] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2196.193568] ? security_file_permission+0x24e/0x570 [ 2196.193589] do_iter_write+0x482/0x670 [ 2196.193605] ? import_iovec+0x83/0xb0 [ 2196.193619] vfs_writev+0x1ae/0x5e0 [ 2196.193631] ? vfs_iter_write+0xa0/0xa0 [ 2196.193640] ? __fget_files+0x26d/0x480 [ 2196.193654] ? lock_downgrade+0x6d0/0x6d0 [ 2196.193663] ? find_held_lock+0x2c/0x110 [ 2196.193682] ? __fget_files+0x296/0x480 [ 2196.193700] ? __fget_light+0xea/0x290 [ 2196.193715] do_writev+0x283/0x300 [ 2196.193726] ? vfs_writev+0x5e0/0x5e0 [ 2196.193741] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2196.193756] do_syscall_64+0x33/0x40 [ 2196.193768] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2196.193776] RIP: 0033:0x7f701ebafb19 [ 2196.193787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2196.193793] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 04:31:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="04005d8e00000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@loopback, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100046, r4}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@loopback, @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100046, r7}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={@loopback, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100046, r11}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d4060000", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf2508000000380001800800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000101", @ANYRES32=r4, @ANYBLOB="1400020076657468305f746f5f627269646765003000018008000300020000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="4c000180080003003025630c5229afae", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002006261746164765f736c6176655f30000008000100", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6d4}, 0x1, 0x0, 0x0, 0x20000090}, 0x880) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00210c00000000000000000200000c0800000000000000100004800c00"/44], 0x2c}}, 0x0) [ 2196.193806] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2196.193812] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2196.193818] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2196.193824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2196.193831] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2196.237803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2196.238503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:31:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x9, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) [ 2196.332268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12966 comm=syz-executor.5 [ 2196.333773] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2196.348149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12967 comm=syz-executor.5 [ 2196.392106] FAULT_INJECTION: forcing a failure. [ 2196.392106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2196.393369] CPU: 1 PID: 12972 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2196.393376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2196.393379] Call Trace: [ 2196.393401] dump_stack+0x107/0x167 [ 2196.393414] should_fail.cold+0x5/0xa [ 2196.393431] _copy_from_user+0x2e/0x1b0 [ 2196.393446] input_event_from_user+0x1dd/0x290 [ 2196.393458] ? input_devices_seq_show+0xfe0/0xfe0 [ 2196.393478] evdev_write+0x257/0x420 [ 2196.393493] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2196.393507] ? security_file_permission+0x24e/0x570 [ 2196.393527] do_iter_write+0x482/0x670 [ 2196.393543] ? import_iovec+0x83/0xb0 [ 2196.393558] vfs_writev+0x1ae/0x5e0 [ 2196.393582] ? vfs_iter_write+0xa0/0xa0 [ 2196.401763] ? __fget_files+0x26d/0x480 [ 2196.401780] ? lock_downgrade+0x6d0/0x6d0 [ 2196.401789] ? find_held_lock+0x2c/0x110 [ 2196.401809] ? __fget_files+0x296/0x480 [ 2196.401827] ? __fget_light+0xea/0x290 [ 2196.401841] do_writev+0x283/0x300 [ 2196.401853] ? vfs_writev+0x5e0/0x5e0 [ 2196.401869] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2196.401885] do_syscall_64+0x33/0x40 [ 2196.401908] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2196.405673] EXT4-fs (sda): re-mounted. Opts: i_version,,errors=continue [ 2196.406324] RIP: 0033:0x7f701ebafb19 [ 2196.406339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2196.406345] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2196.406357] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2196.406364] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2196.406384] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2196.414276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2196.415046] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2196.441992] sysfs: Unknown parameter ']\*$' [ 2196.481184] sysfs: Unknown parameter ']\*$' [ 2196.481549] EXT4-fs (sda): re-mounted. Opts: i_version,,errors=continue [ 2196.489742] FAT-fs (loop6): Unrecognized mount option "äà" or missing value [ 2196.504162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2196.518997] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:31:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:31:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xc2000258) r2 = syz_io_uring_setup(0x18a4, &(0x7f00000000c0)={0x0, 0x2139, 0x4, 0x1, 0x91}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) fcntl$dupfd(r2, 0x406, r1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8f4) r3 = inotify_init1(0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x8f4) r4 = dup2(0xffffffffffffffff, r3) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) ftruncate(r5, 0xa4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x48020200) creat(&(0x7f0000000200)='./file0\x00', 0x2) 04:31:58 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) sendfile(r0, r2, &(0x7f0000000100), 0x80) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) 04:31:58 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 59) 04:31:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x14000, 0x20) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x100, 0x4) fallocate(r1, 0x22, 0x3, 0x6) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) [ 2196.680312] FAULT_INJECTION: forcing a failure. [ 2196.680312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2196.683262] CPU: 1 PID: 12989 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2196.683280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2196.683289] Call Trace: [ 2196.683320] dump_stack+0x107/0x167 [ 2196.683347] should_fail.cold+0x5/0xa [ 2196.683382] _copy_from_user+0x2e/0x1b0 [ 2196.683411] input_event_from_user+0x1dd/0x290 [ 2196.683433] ? input_devices_seq_show+0xfe0/0xfe0 [ 2196.683473] evdev_write+0x257/0x420 [ 2196.683505] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2196.694008] ? security_file_permission+0x24e/0x570 [ 2196.694049] do_iter_write+0x482/0x670 [ 2196.694081] ? import_iovec+0x83/0xb0 [ 2196.694116] vfs_writev+0x1ae/0x5e0 [ 2196.697680] ? vfs_iter_write+0xa0/0xa0 [ 2196.698501] ? __fget_files+0x26d/0x480 [ 2196.699334] ? lock_downgrade+0x6d0/0x6d0 [ 2196.700189] ? find_held_lock+0x2c/0x110 [ 2196.701039] ? __fget_files+0x296/0x480 [ 2196.701872] ? __fget_light+0xea/0x290 [ 2196.702689] do_writev+0x283/0x300 [ 2196.703429] ? vfs_writev+0x5e0/0x5e0 [ 2196.704230] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2196.705227] do_syscall_64+0x33/0x40 [ 2196.706002] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2196.707084] RIP: 0033:0x7f701ebafb19 [ 2196.707852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2196.711627] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2196.713198] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2196.714682] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2196.716139] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2196.717603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2196.719086] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2196.774582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2196.792320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2212.274415] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:32:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="2000000000020000f9ffff00800100000f000004000000000100000005000000000000000000000020000000e0f4655fe0f4653f000000ff53ef010001000800e0f465add4acff0b0b3b5f000000000000000001000000000000000b0000000004", 0x61, 0x400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="696e69745f6974bdc661a7f9653d0000000000b5effd90712b18100000000000"]) [ 2219.658167] FAULT_INJECTION: forcing a failure. [ 2219.658167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2219.659569] CPU: 1 PID: 13009 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2219.660328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.661234] Call Trace: [ 2219.661534] dump_stack+0x107/0x167 [ 2219.661936] should_fail.cold+0x5/0xa [ 2219.662357] _copy_from_user+0x2e/0x1b0 [ 2219.662797] input_event_from_user+0x1dd/0x290 [ 2219.663321] ? input_devices_seq_show+0xfe0/0xfe0 [ 2219.663853] evdev_write+0x257/0x420 [ 2219.664271] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2219.664849] ? security_file_permission+0x24e/0x570 [ 2219.665404] do_iter_write+0x482/0x670 [ 2219.665834] ? import_iovec+0x83/0xb0 [ 2219.666257] vfs_writev+0x1ae/0x5e0 [ 2219.666654] ? vfs_iter_write+0xa0/0xa0 [ 2219.667102] ? __fget_files+0x26d/0x480 [ 2219.667540] ? lock_downgrade+0x6d0/0x6d0 [ 2219.667993] ? find_held_lock+0x2c/0x110 [ 2219.668443] ? __fget_files+0x296/0x480 [ 2219.668897] ? __fget_light+0xea/0x290 [ 2219.669324] do_writev+0x283/0x300 [ 2219.669713] ? vfs_writev+0x5e0/0x5e0 [ 2219.670132] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2219.670658] do_syscall_64+0x33/0x40 [ 2219.671087] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2219.671669] RIP: 0033:0x7f701ebafb19 [ 2219.672093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.674107] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2219.674967] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2219.675747] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2219.676528] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2219.677313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2219.678093] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2219.691080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2219.696227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:32:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 60) 04:32:21 executing program 0: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000180)='hostfs\x00', 0x362801, &(0x7f0000000240)='.\x00') mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='debugfs\x00', 0x2000001, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0600, 0x0) stat(&(0x7f0000000000)='./file1\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000640)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x3, 0x401, 0x0, 0x10000, 0x1}, 0xff000000) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) setresuid(r2, r2, r4) mkdirat(r1, &(0x7f0000000680)='./file1\x00', 0x37) 04:32:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:32:21 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) sendfile(r0, r2, &(0x7f0000000100), 0x80) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) 04:32:21 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="0243443030310100004c004900040000000000000020002000200020002000200020002000200020004300440052004f004d002000200020002000c9c3bdc3ea9e200020002000200020002000200000000000000000be000000", 0x5a, 0x10800}], 0x0, &(0x7f00000000c0)={[{@nojoliet}]}) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') 04:32:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0, 0x6df1}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000001c0)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000380)=@v2={0x3, 0x2, 0x7, 0x6cfd45d8, 0x8e, "d6e24db495d5044fa96e31ed961dfe7e97527a303e550214eabe9ac14434abd90e2546aea6ecbc322f46e10dcc62a5e46b7ae5251072e8b6469b6af354ab5318403b0a8e605da2278e389b217a92a02a22bb78881e44d28eb319e655f1f5f6b25a57df0f9b7fe6f84fe46e4470a5a2317930d4b84e5ad6725dde7771be0a6ca42bf23309e063274738e4d77c73d8"}, 0x97, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x5) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:32:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="3e3fc2db0956", 0x6}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00274e0000000000000000000000000400000009000080999e00009c00000083825e7998707fe2cfaacdd842c9b600394242fabad6e44e54f6528fc8de905ee2cdd4cd07f4e10b06aa0e2aabb42a477904681a6bc6"], 0x24}}, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r3) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x0) r4 = getegid() setgid(r4) keyctl$chown(0x4, 0x0, 0xee01, r4) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="82080000", @ANYRES32, @ANYBLOB="02000500", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="000100bcdfbd14e2eac7a4b1f3", @ANYRES32=0xee01, @ANYBLOB="040006000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0xee00, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="10000000000000002000010000000000"], 0xac, 0x0) acct(0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000380)=""/204, 0xcc, 0x40000103, 0x0, 0x0) unshare(0x48020200) 04:32:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) stat(&(0x7f0000000900)='.\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000001040000000000000000e3bf58b0460c36df7f4f87bcdd"], 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) [ 2219.750560] EXT4-fs (loop3): Unrecognized mount option "init_it½Æa§ùe=" or missing value 04:32:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 61) [ 2219.762119] FAULT_INJECTION: forcing a failure. [ 2219.762119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2219.763469] CPU: 1 PID: 13029 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2219.763476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.763480] Call Trace: [ 2219.763497] dump_stack+0x107/0x167 [ 2219.763511] should_fail.cold+0x5/0xa [ 2219.763527] _copy_from_user+0x2e/0x1b0 [ 2219.763542] input_event_from_user+0x1dd/0x290 [ 2219.763554] ? input_devices_seq_show+0xfe0/0xfe0 [ 2219.763574] evdev_write+0x257/0x420 [ 2219.763589] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2219.763603] ? security_file_permission+0x24e/0x570 [ 2219.763631] do_iter_write+0x482/0x670 [ 2219.770422] ? import_iovec+0x83/0xb0 [ 2219.770437] vfs_writev+0x1ae/0x5e0 [ 2219.770449] ? vfs_iter_write+0xa0/0xa0 [ 2219.770457] ? __fget_files+0x26d/0x480 [ 2219.770471] ? lock_downgrade+0x6d0/0x6d0 [ 2219.770480] ? find_held_lock+0x2c/0x110 [ 2219.770500] ? __fget_files+0x296/0x480 [ 2219.770518] ? __fget_light+0xea/0x290 [ 2219.770538] do_writev+0x283/0x300 [ 2219.774663] ? vfs_writev+0x5e0/0x5e0 [ 2219.775084] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2219.775605] do_syscall_64+0x33/0x40 [ 2219.776022] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2219.776576] RIP: 0033:0x7f701ebafb19 [ 2219.776986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.778990] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2219.779812] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2219.780599] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2219.781396] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2219.782187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2219.782970] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:32:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 62) [ 2219.828064] FAULT_INJECTION: forcing a failure. [ 2219.828064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2219.828077] CPU: 1 PID: 13037 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2219.828095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.832086] Call Trace: [ 2219.832102] dump_stack+0x107/0x167 [ 2219.832115] should_fail.cold+0x5/0xa [ 2219.832130] _copy_from_user+0x2e/0x1b0 [ 2219.832145] input_event_from_user+0x1dd/0x290 [ 2219.832156] ? input_devices_seq_show+0xfe0/0xfe0 [ 2219.832178] evdev_write+0x257/0x420 [ 2219.832202] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2219.835912] ? security_file_permission+0x24e/0x570 [ 2219.836464] do_iter_write+0x482/0x670 [ 2219.836897] ? import_iovec+0x83/0xb0 [ 2219.837321] vfs_writev+0x1ae/0x5e0 [ 2219.837730] ? vfs_iter_write+0xa0/0xa0 [ 2219.838172] ? __fget_files+0x26d/0x480 [ 2219.838612] ? lock_downgrade+0x6d0/0x6d0 [ 2219.839069] ? find_held_lock+0x2c/0x110 [ 2219.839534] ? __fget_files+0x296/0x480 [ 2219.840000] ? __fget_light+0xea/0x290 [ 2219.840453] do_writev+0x283/0x300 [ 2219.840849] ? vfs_writev+0x5e0/0x5e0 [ 2219.841275] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2219.841824] do_syscall_64+0x33/0x40 [ 2219.842244] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2219.842819] RIP: 0033:0x7f701ebafb19 [ 2219.843247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.845274] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2219.846177] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2219.846984] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2219.847792] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2219.848588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2219.849368] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2219.850599] EXT4-fs (loop3): Unrecognized mount option "init_it½Æa§ùe=" or missing value 04:32:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0xff, 0x9, 0x4, 0x0, 0x1, 0x1ec24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x7}, 0x4000c, 0x9, 0xcb, 0x6, 0x1, 0xffffffc1, 0x0, 0x0, 0x7}, 0x0, 0x9, r3, 0x0) 04:32:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x48, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:32:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000040)={0x1c, r1, 0x939f0c73e17edec1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040890) 04:32:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x0, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) r3 = accept4$inet6(r1, &(0x7f0000000340), &(0x7f0000000380)=0x1c, 0x800) fallocate(r3, 0x21, 0x0, 0x8800000) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000140)=""/200) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x9, 0xc1, 0xf2, 0x0, 0x5, 0x18280, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x1004, 0x1000, 0x7, 0x9, 0x9, 0xa5f, 0x5, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r4, 0x3) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xc2981) 04:32:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0009e6", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote}}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) write$tun(r0, &(0x7f0000001140)={@void, @val={0x1, 0x4, 0x3ff, 0x5, 0x1, 0xfff}, @x25={0x1, 0x40, 0xf, "eeb2f6334f5ad32cd20a590e450df89255499902378538da58f25d3d457c17f0fc2ad7f2a2dc41fd3805c0d950d6182fe4042800bf3b3cbb9ac86d920c097bda26b257caa311581a899b9fc3dfc8ecdc66b58f0eccded101923317ced5f43591bf92c6c2e6974a4e50b7df5dece6229c7975c67d60b7d231b9e2d9cedd2bd210e4511fded7fc06705243d2d41a30b9075169a13752cbe44b6d105f76a2dce9ef378ababdf18d"}}, 0xb3) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001080)={@val={0x0, 0x88b4}, @void, @arp=@generic={0x334, 0x1a, 0x6, 0xc, 0x3, @random="c159e79e55c1", "f58592b8a8481d61deefb005", @multicast}}, 0x24) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) clock_gettime(0x0, &(0x7f00000007c0)) r2 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000010c0)={0x0, @adiantum, 0x0, @desc4}) pread64(r2, &(0x7f0000000000)=""/4098, 0x1002, 0x1e00) 04:32:36 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) sendfile(r0, r2, &(0x7f0000000100), 0x80) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) 04:32:36 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="cd060000008af7", @ANYRES16=r0, @ANYRES32=r2], 0x3c}}, 0x0) 04:32:36 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 63) [ 2234.967096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2234.979737] FAULT_INJECTION: forcing a failure. [ 2234.979737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2234.982147] CPU: 1 PID: 13058 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2234.983590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2234.985246] Call Trace: [ 2234.985796] dump_stack+0x107/0x167 [ 2234.986547] should_fail.cold+0x5/0xa [ 2234.987348] _copy_from_user+0x2e/0x1b0 [ 2234.988166] input_event_from_user+0x1dd/0x290 [ 2234.989110] ? input_devices_seq_show+0xfe0/0xfe0 [ 2234.990091] evdev_write+0x257/0x420 [ 2234.990852] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2234.991499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2234.991930] ? security_file_permission+0x24e/0x570 [ 2234.994572] do_iter_write+0x482/0x670 [ 2234.995355] ? import_iovec+0x83/0xb0 [ 2234.996111] vfs_writev+0x1ae/0x5e0 [ 2234.996846] ? vfs_iter_write+0xa0/0xa0 [ 2234.997654] ? __fget_files+0x26d/0x480 [ 2234.998465] ? lock_downgrade+0x6d0/0x6d0 [ 2234.999320] ? find_held_lock+0x2c/0x110 [ 2235.000169] ? __fget_files+0x296/0x480 [ 2235.001000] ? __fget_light+0xea/0x290 [ 2235.001817] do_writev+0x283/0x300 [ 2235.002557] ? vfs_writev+0x5e0/0x5e0 [ 2235.003374] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2235.004382] do_syscall_64+0x33/0x40 [ 2235.005155] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2235.006210] RIP: 0033:0x7f701ebafb19 [ 2235.006970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.011083] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2235.012818] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2235.014430] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2235.016063] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.017689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2235.019314] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:32:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f0000000140)={0x0, 0xfb, 0x47, 0x2, 0x9, "ffcafed58ce6107a49c52dff7326eeb7", "996056e82ed491a75534f8c37de157cfa48407cf2219b9b31c377a83f64386bba3050c55cdba6166bf9e9fd7d9e80b7db333"}, 0x47, 0x2) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) dup2(r1, 0xffffffffffffffff) 04:32:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x4c, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:32:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$SG_SET_TIMEOUT(r0, 0x31e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x44, 0x0, 0x2, 0x0, 0x3, 0x3e, 0x8db1, 0xe0, 0x40, 0xee, 0x3f, 0xae, 0x38, 0x2, 0x101, 0x2, 0x1000}, [{0x60000000, 0x9a6, 0x1, 0x59e, 0xffff, 0x0, 0x3}, {0x7, 0x7fffffff, 0x2, 0x6, 0x1, 0x7ff, 0x7}], "0b7adf3af47848f138ec1b0d8677dd3d4cf51a449ad567adab7b92aa3660a043c9c2dbf43bfa914772ff602da416d0adb0ccb80cad5adfe5e1558a556708c8bf1d1efaff9771dcd9115d525cc0f15bc5c369ba15caec3d82000f15a23c846ef2e58ce5b634ddf0a5f9469a1413a39904c84c6fc900d92cf3782ad9096e07148ee04e7c31c357cd91", ['\x00', '\x00']}, 0x338) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, r1) write$P9_RVERSION(r0, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x5752, 0x6, '9P2000'}, 0x13) 04:32:36 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) sendfile(r0, r2, &(0x7f0000000100), 0x80) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) 04:32:36 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 64) 04:32:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = dup2(r0, r0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8182, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r5 = dup(r0) io_submit(0x0, 0x3, &(0x7f0000001280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f0000000080)="1b65ec8d05bde54c2da5512c7e4eb09aca08a454aae3c6b16d508c74656608f8782df8a74403c32724392d4ae03062f831741828a425a3fc113d6c86d0ef307e7c744fcae1041ae59d8cd00cb1", 0x4d, 0x0, 0x0, 0x2, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f00000001c0)="222232a90e7a881b", 0x8, 0x1, 0x0, 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x5, 0x80, r4, &(0x7f0000000240)="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", 0x1000, 0x1, 0x0, 0x2, r5}]) r6 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r6, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r6, 0x15, 0x800, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r6, 0xffffffffffff7fff, 0x4, 0x0, 0x13}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r6, 0xfffffff0}) 04:32:36 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff8101b9aa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1, 0x3, 0x9, 0x41, 0x0, 0x1, 0x580, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0xaba}, 0x8008, 0x5, 0x7, 0x1, 0x1000, 0x5, 0x401, 0x0, 0x3, 0x0, 0x60}, r1, 0x2, r0, 0x2) perf_event_open(&(0x7f0000000040)={0x1dd3d548675fec6f, 0x80, 0x2, 0x7, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x15, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x50, 0x7, 0x0, 0x6, 0x6, 0x942, 0x7, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/229, 0xe5}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/177, 0xb1}, {&(0x7f0000000340)=""/120, 0x78}], 0x4, 0x9, 0x327a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8000) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) [ 2235.337613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2235.350161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2235.371122] FAULT_INJECTION: forcing a failure. [ 2235.371122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2235.373803] CPU: 1 PID: 13091 Comm: syz-executor.7 Not tainted 5.10.154 #1 04:32:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ftruncate(r0, 0x10001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_DELSETELEM={0xe9c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe5c, 0x3, 0x0, 0x1, [{0xe58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x14, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xe3d, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14}}, 0xec4}}, 0x0) [ 2235.375375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.377523] Call Trace: [ 2235.378129] dump_stack+0x107/0x167 [ 2235.378963] should_fail.cold+0x5/0xa [ 2235.379893] _copy_from_user+0x2e/0x1b0 [ 2235.380806] input_event_from_user+0x1dd/0x290 [ 2235.381836] ? input_devices_seq_show+0xfe0/0xfe0 [ 2235.382945] evdev_write+0x257/0x420 [ 2235.383806] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2235.384989] ? security_file_permission+0x24e/0x570 [ 2235.386138] do_iter_write+0x482/0x670 [ 2235.387024] ? import_iovec+0x83/0xb0 [ 2235.387915] vfs_writev+0x1ae/0x5e0 [ 2235.388746] ? vfs_iter_write+0xa0/0xa0 [ 2235.389642] ? __fget_files+0x26d/0x480 [ 2235.390543] ? lock_downgrade+0x6d0/0x6d0 [ 2235.391502] ? find_held_lock+0x2c/0x110 [ 2235.392443] ? __fget_files+0x296/0x480 [ 2235.393361] ? __fget_light+0xea/0x290 [ 2235.394261] do_writev+0x283/0x300 [ 2235.395075] ? vfs_writev+0x5e0/0x5e0 [ 2235.395951] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2235.397052] do_syscall_64+0x33/0x40 [ 2235.397896] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2235.399066] RIP: 0033:0x7f701ebafb19 [ 2235.399909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.404053] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2235.405779] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2235.407405] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2235.409033] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.410653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2235.412289] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:32:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x200, 0x80) syz_io_uring_setup(0x3643, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:32:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x9000, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e7b0751f394827befc6017a5f6669676673012c2b00a96098ded7e67f3e3777dc57e0c8443700cc3ae4445c12b8edb9f72b2f97f841ace1be07000000c62e722cc38ec7310a78f2f4a2df7d5752b60026afb3c9f450f78b5ea2ff0300000000009c5c1b560074cf2846bb81e3454f023fe45432"]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x81, 0x20000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x50018040}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x8, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)=0x3) 04:32:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8c}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x801) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x7, 0x3, 0x5e, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x401, 0x5}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800022}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x4c}}, 0x20000000) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000400)) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r5, &(0x7f0000000480)='./file0/../file0\x00', 0x404000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x10201, 0x0) r7 = openat(r6, &(0x7f0000000500)='./file1\x00', 0x2180, 0x44) r8 = openat(r5, &(0x7f0000000540)='./file0\x00', 0x2000, 0x108) connect$packet(r8, &(0x7f0000000580)={0x11, 0xd, r3, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x60c}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004008) r9 = open(&(0x7f00000006c0)='./file0\x00', 0x92644, 0xa) inotify_add_watch(r9, &(0x7f0000000700)='./file0\x00', 0x10) r10 = dup(r7) sendmsg$NL80211_CMD_DEL_STATION(r10, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, 0x0, 0x1d, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x18}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xe0}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9c}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x14}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6d8}]}, 0x78}}, 0x40851) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000880)) 04:32:50 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x236}, 0x8040, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x0, 0x461}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r1, 0x8, 0x0) acct(0x0) 04:32:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x68, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:32:50 executing program 6: creat(&(0x7f0000000080)='./file0\x00', 0x9cee77976883b6aa) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$rfkill(r0, &(0x7f00000000c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) dup2(r1, r2) 04:32:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1e4, 0x36, 0x100, 0x70bd27, 0x25dfdbff, {0x1}, [@generic="d3a9108e78a99a28193fe301ca492e145cb05660ab3803a1d21a14fde76810c2bb996e5091d711b3ea5f2ecf39137fa7abc34b49edb37b7fb170ee88f5bfdda568d34990d1e55e406a70d92f0d697a927760b585ac84d06f16603b75b8d88394d039f8de3f7d15bee175d0e3877b552dc4a2eca163c6692b4a18e28935039ebdd962acb3fbf7e2b9b6e6e1cbd0455b5b64d08e67fa3421d236d5951279acf3292c430deb566152a5d473254ed7dfdb25780e0ae9a2df7d0ca0", @generic="fa90fcf9d0edfa7d421951c23a2b8c3964a378d0fd4b7e34e3e84fd9491ce2ce2e819b8688f871c6bff55133b20d6084307608d79e39014ee6c23141e8", @nested={0xd7, 0x2f, 0x0, 0x1, [@generic="26091f504b71c276632411f1879da5ba1cc9f9ddc4ead742319227bb58e861d1929266f196719f6815c844da693f96c0297b1d270b30b626d57ebf28ac3d2a239308e5cf52f109770643b4b065843b0307bbe4471b5512e78d9c0c84e176d3479cc46e0d5d8a29e0cc5dfd20f7eaa5259b9550c3c82c128887fa11bfd5ea0a32e37c1e3793e3cc7420c0202cad11a4174436c88b397287a2b2b691da780ad5a7557b1fbb6e67aea2c3c0dea94871b78f9805cfac083f8362bbdb3613316166ebfa2c5e8184b512df3f1fef", @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x10}, 0x40080) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1, 0x1000, 0x1}, 0x3f) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000010000100000000000000e5cf8df60000050000000000000008000d20f7582e99c15ea448ec96e4a70d943d95344f4600565da31c90edb17c1bb86d15c4ca57e851d5e6806b66712913b41796369f60a289d46594b0adc324cb81d72b67ff658a2444181c489e58a0d819574f1bc67dfbca493d816b395aabdd2016d22d"], 0x28}}, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00') 04:32:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1040004, &(0x7f00000001c0)={'trans=unix,', {[{@cache_mmap}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@nodevmap}], [{@dont_appraise}]}}) sendfile(r0, r1, 0x0, 0x0) 04:32:50 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x82081, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="8b26847e45e3c57872fed084944dfb", 0xf}, {&(0x7f00000001c0)='f', 0x1}], 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0xffffff9f}], 0x58, 0x64f, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x202900, 0x0) r3 = syz_open_pts(r1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0xe, 0x0, &(0x7f0000000140)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x82081, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000040)="8b26847e45e3c57872fed084944dfb", 0xf}, {&(0x7f00000001c0)='f', 0x1}], 0x2) r7 = pidfd_getfd(r6, r2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = gettid() kcmp(r11, r10, 0x2, r9, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000900)=0xe8) sendmsg$unix(r0, &(0x7f0000000ac0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000340)="f82248243760e31c7324017b9f0233375aca81bbc0d77053957cb41ed2eb3290809eb911250d987a329110483c85e80da97836bd3fa56b583de1b654da88d80a02467a7793004001d13c5fe7d3b6bf770f6bb31cbb1d999b5946ee094439eaefa2252115a1d50ecc8e1aacffb332acf25b441132e621861688e6f3c453909c03a728977e9c5de844c912bb95c4b8e5e1d6c645e4429dcc13ee1395", 0x9b}, {&(0x7f0000000400)="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", 0xfa}, {&(0x7f0000000180)="4ef65c6db1e5d845defe482434f727d1ad2be80f", 0x14}], 0x3, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r7]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r5]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, 0xee00}}}], 0x148, 0x4013}, 0x81) preadv(r8, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x64f, 0x0) 04:32:50 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 65) [ 2249.029738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=13124 comm=syz-executor.0 [ 2249.041976] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2249.044646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2249.045908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2249.055579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=13124 comm=syz-executor.0 [ 2249.058319] FAULT_INJECTION: forcing a failure. [ 2249.058319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2249.061254] CPU: 1 PID: 13133 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2249.061267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2249.061274] Call Trace: [ 2249.061304] dump_stack+0x107/0x167 [ 2249.061332] should_fail.cold+0x5/0xa [ 2249.061363] _copy_from_user+0x2e/0x1b0 [ 2249.061400] input_event_from_user+0x1dd/0x290 [ 2249.061424] ? input_devices_seq_show+0xfe0/0xfe0 [ 2249.061466] evdev_write+0x257/0x420 [ 2249.061500] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2249.061528] ? security_file_permission+0x24e/0x570 [ 2249.061571] do_iter_write+0x482/0x670 [ 2249.061604] ? import_iovec+0x83/0xb0 [ 2249.061635] vfs_writev+0x1ae/0x5e0 [ 2249.061661] ? vfs_iter_write+0xa0/0xa0 [ 2249.061679] ? __fget_files+0x26d/0x480 [ 2249.061707] ? lock_downgrade+0x6d0/0x6d0 [ 2249.061726] ? find_held_lock+0x2c/0x110 [ 2249.061769] ? __fget_files+0x296/0x480 [ 2249.061808] ? __fget_light+0xea/0x290 [ 2249.061840] do_writev+0x283/0x300 [ 2249.061864] ? vfs_writev+0x5e0/0x5e0 [ 2249.061896] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2249.061927] do_syscall_64+0x33/0x40 [ 2249.061952] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2249.061974] RIP: 0033:0x7f701ebafb19 [ 2249.066188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2249.066760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2249.066773] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2249.066807] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2249.097445] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2249.099119] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2249.100805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2249.102471] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:32:50 executing program 3: pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000140)="201900d07642da921fd61d12430c6c6b8c0ac5c96e48065e24ecf3bb8ce311", 0x1f, 0x4e3}, {0x0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)={[{@sysvgroups}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}) ftruncate(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 04:32:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000180)=0x3b1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) getsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000200)=""/250, &(0x7f0000000300)=0xfa) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) 04:32:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x6c, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:32:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1d}, {0x6}]}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xb0, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x6020001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 2249.215800] EXT4-fs (loop3): quotafile must be on filesystem root 04:32:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0xc008, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) 04:32:50 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x4, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x450745c438580058) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x2, 0x0, 0x100}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x1f, 0x4, "4f41c469fd4f3de423a45976431975e2b5eb3f32441392acfe0b7920bed33d6a46640c672cc3c57741661c6b8a01a21faebdb5ad7d3af52fe3ca42c80b388d94", "c9efad8870fe9f12212ee2cf306a3072ba0247e0f20a7e5b71cb7a77d1e28cf9cd85a775411e1f08a4733278a81d29883712e4fc4226f8fc13c5bd222f34e099", "3d7dea5b62dddede2a720049c4eeed6c974937bcb1bcfe0ec37f3d73621c0258", [0x8001, 0x20]}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff68, &(0x7f0000000480)={&(0x7f00000005c0)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x20}}, 0x4000) r3 = syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r3, 0x6de2, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r6, 0xec4e, 0x1, 0x3}) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$rfkill(r8, &(0x7f00000002c0)={0xffffffff, 0x7, 0x0, 0x1, 0x1}, 0x8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) dup2(r3, r6) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x8000) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201) [ 2249.259708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2249.295016] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2249.552301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2263.902304] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:33:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e1dcffff000000000000400078f746c0b6e0120268ad86693fc7dc045d403b62d51c5ac633305143ec8e5225958ea8c966a6576968d43184f8301febec2c1bd53f98e83864b225f0415d38f0d8d397069d60531fec390c7a5e6effac5d292a82130ca0edc69232ad9a536a94e2359f79059ebba14e6807c83da900bb4b5e8815254e921c984f995c08ed80e34ddd0c2d0f18f92ef7ff"]) 04:33:16 executing program 4: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001180)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000012c0)={'ip6tnl0\x00', &(0x7f0000001240)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x0, 0x0, 0x0, @empty, @rand_addr=' \x01\x00', 0x7, 0x8}}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, 0x4, &(0x7f0000001900)=[{&(0x7f0000001580), 0x0, 0x1}, {&(0x7f0000001680)="bb963dcea31cba4c8143d8982fc91dd1ae36315f9db7baad8bb2222fac6364412692033d9ec5d842ab9d01eec272e5500484d0d381c7c1331c72abbe8bc85e8379c9a502b5c40b605acbe48671a805ce08ddf5e4767180847b0c44579ea3a84eb0a9935f99f1223af978f630ff5ff338fed5b6ae55c7ec37f5ea180556885fe41e6a479d1daa82ceded61ee608332db8f231b0aefb69446aaad9", 0x9a, 0x7716}, {&(0x7f0000000100)="21c1e2a5c7b9ba59f913f098f923020518bef223882037b02dc41e0261c6eeb421929e9a2972ef1b900c6e38ffa105d47f79ce2d6a6d4d4c914e18a84ee6345816265d93aba57e6e8d766cc4cf88b9e984ea85b36e59d4c8ec101342e833289e06f47eba188b8e", 0x67, 0x7}, {&(0x7f0000000040)="8efb4e07445639f33044d79e3d7a53f1e205cfd7c2ae098e74dea274526f1f99c831c002dcb5464e8d5891c323c523ff8482d106a1a646373617d05be776d2d502de289c94543011ea0b35af99606e7c5efa3281fa674214e981ad28765aff22c404a35af45075f9978a0e83b91ca6d53ee4ec863cbd0e10ef959d5cf2a5958c2ce403f3e73b4489fc87646cb23ab596dd59", 0x92, 0x2}], 0x2020844, &(0x7f0000001980)={[{@fat=@uid={'uid', 0x3d, 0xee00}}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x66, 0x0, 0x62, 0x32, 0x34, 0x0, 0x65], 0x2d, [0x38, 0x31, 0x62], 0x2d, [0x0, 0x0, 0x0, 0x34], 0x2d, [0x36, 0x31, 0x39, 0x38], 0x2d, [0x35, 0x0, 0x0, 0x64, 0x0, 0x37, 0x37, 0x37]}}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) renameat(0xffffffffffffff9c, &(0x7f0000002a00)='./file1\x00', r1, &(0x7f0000002a40)='./file0\x00') socketpair(0x11, 0x3, 0x0, &(0x7f0000002a80)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002d40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc041) 04:33:16 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 66) 04:33:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[], 0x10) io_uring_enter(0xffffffffffffffff, 0x1919, 0x5644, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x90) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) openat(r1, &(0x7f0000000300)='./file1\x00', 0x0, 0x8) 04:33:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x74, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:33:16 executing program 3: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000000100)=0x7fffffff, 0x4d76, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@loopback, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100046, r5}) sendmmsg$inet(r0, &(0x7f0000001780)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000300)="4ee3ad2670a1af2954fabfac09099a75e1b342f36a669bc9e81818179cb95bdfb5f30f3ff90db88a315fa6e700911b7a8b53a0c3508fe37bffd3e58afef926f7235b67ae49de24928b23e371f5b7c003d19666502a3e3a9501c8d4a1afc00c352c5b0d5e6bd5569643e4269cfe", 0x6d}, {&(0x7f0000000380)="5118fa25bfa42f9fc54b1992f4c23bbc3ed4e4b712396d36c9ea1c20b4603d32488841f01c007780a85699cc0ca2329162aeecb204254590fb9e34ffa8f25893f22e88290fc928e7fa0b8946011fb2cccfc0b15e142d0768a219000e4131f33b8cbd947740c4212f6bd3ac4a946a31118897f44b4697c200c15a6a46a2bc2ea737ff5207670d3d3a75254d9b0e2146bf2178e71d9d6d8bd7c3a7a8746b8f98532ae6447c8142986d9d13f124160fc6116198b46555f990360fe9643ae64771faf759810d0696efc6dc4a539cfaccc9bee61ea64d150a8697990d9038e4a29dce4cbbb47e105257617febacb3887cfbb04c", 0xf1}, {&(0x7f00000004c0)="17c77eab0a91f85285b3beaf7402bc300505057195b107d956f1d723ac30472618932aa927e54e2bf48b39b19474ddeb1a91225d06c894a2becea7308720cbf72df897b5722667ffe9d87680c2d2c3f1b4a528db47cc16c8d81b3101a55a3ddd7f", 0x61}, {&(0x7f0000000540)="66f4021948680751a4b9741c0c52edcc58a9690cdc21c9cea875e8244facd3b8adb09886f5e359fc62b6fdb2c213295eb86441588d185fa7ad1c615729462462dcd38cd46c3f67e8bfc322306bfbc4152eb53ecc02de1bf2bec363d62fb09b70db8d23e465ff476efb062ab87371b94dcd16e66a60b6f8618f0f6d84fcaa7bd5790270424ab235327ac533a82d9cd93e775239edc7650febb2f9e12420c07cac5b3e97b6bc", 0xa5}], 0x4, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{&(0x7f0000000680)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000840)=[{&(0x7f00000006c0)="774cf397b5fc0e2a7c0c704d251b825d0cfb2326ca3e24ad80e93989597ed178c6ee71f536688d987e46c817c0f60ea2dccf302fc60b3c6bc06d69141a230d831aa080fc82ae6213f07f87f7dc83254625887187567a89b6b675ca1e6c19541256e9", 0x62}, {&(0x7f0000000740)="c62d7b0e477da5282875bcaa4f6902d807a425fdec64ea4be5ab51d635457021522e1e6d", 0x24}, {&(0x7f0000000780)="f31f0c37a97022375e7263672f2ec480fdf61aa7b0533aa49a50df064388d8b84e9711d006f051714f36717aa7375d89268f5d2f60e116d49139e5f1fbc69e7f64917256ab62e3d115b9749de520c7a57c5fb83ad1f6766367b92d19bf4d63aec58334527519f425c659e9a050295d8fdc7cdb89cd2491484c2c846c8225d893d4343052811d9a09a23b93a837", 0x8d}], 0x3, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0xaab}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x60}}, {{&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000940)="d11cc747bf06f147b9b462c69990ac588af83fab7b821634b9ba02748b1878d78f7e4b1788ec134adb3321e193fdbc7b9fa27646667e9ea8378e6e401da800e3ebf213b53c067de751ac1313c4336ff79413708061f6fb70b0f11d8d2e894b3ebc10983aa0a2c7c5c21d987789516e088db7dc0ece9ba893748603a314", 0x7d}, {&(0x7f00000009c0)="29dfe990eba185360b4cc139401bb69cc2c4879a0abecc793119ce934eccd9cea25224ecca84985177fd35cda514022909a7e331c8ae0cf230599fd168977fa6b6b73693bd46d4dd6a983ba88ef3c702fd6ef26723460967aa18b5c5c8a57c7a0bfb70fa0cb9ffae9bc8fbe699f4f5cffce231e359e4f63194ad25f5183c4d1cd8bad40ba42e5cf34807e74e3df3c5034f0db5cf", 0x94}, {&(0x7f0000000a80)="54be06a8fa7b959fd7d597698dd197047341b4de283eca3d265879b8d47107be8c10caa51717fb8a55f9e66a8e075c8c408506be9e0629e46ca3595c28cf60130001f12d1095739683e8149b675ce51b41953962a4e3a81202f531dab6a7baf6da1cac829e9c507ee917d4348236f611643e", 0x72}, {&(0x7f0000000b00)="7b1b299f9216", 0x6}, {&(0x7f0000000b40)="d14cd60c4091325a9249d50a28dd158e29cb0322a23c05f1c03040fed116a5eac09e4002ca37d968f6f4096c927f9b805fc0dcf820ab11209e08fa4eee14bfb94ca4043e4baf0f39c8d9b8fdc40c71ccb4b95f120dfb86db811919602bc315766b723a80923e5f4e53220f8e4945dfa8dd1949a7ada14abb7225ed6c011764e72009e6c16d992f9b6a77328574e648a3e761c5d6dba1b19cb729480ee2dcbd7c9480d38c032e12a2616ae0bf85177bdac636dce1391a2ed4cd0f2280707eb85886020fe61e06f4d4d2a6b5886ba01c2fc1a7cdb564b7c6a042cb20", 0xdb}, {&(0x7f0000000c40)="17e9721ad5fc98adeebd5c80a281404963a3bb04d20e3e8e159c59cb1e8c8e1b9a00d59f48f2ad030eae7cff1491a6cc80da58b89e8320535665ca8adee97ba83f0b8a9a7bf540306a8e3dfeec51960cb747b286615d9b42c12bd6ff81c148a04e3728f33463fcc3bf969a3332da387e00603e83af510085ef2af0649b7c845f1730982deb79e0a04952b44fbc6b85188d990fbdea37b660e473517c2cb6727a0e8eb5cf49a3477e0ae13b18dca4a394d5aabcfe737efc152723636c75a178dc", 0xc0}, {&(0x7f0000000d00)="4e0cde8ba16957183234437edce8777c421c9b88e9c807973066c3f0687060d1f8ca89062e336a22e9e7dc547b22e7b57a4b17cd6c43e79ad5f5c23e3a524da21565d35d5e335c4019a0b7e4b591aeeee55c8adbc1ecb8fa82d81c3a15ba6a6148159cb355a61127aec504f61c22f78d16244fb14b093793e8a36dedcf9ce0ed59ba8fb030e9c9fc4d73f384e2042427cb30b557e51413a13ff41e2c4db3723e8da20edf39de11a9c01756f5", 0xac}, {&(0x7f0000000dc0)="488d32f753023fdbbf39c6491d0c59d1ad158fefe232e08274c66ec35a9aed41fb9c508eb5e6920a82f54e8d822a024e384fbfb46f90c9da675ae9be360dfb6e4e91c869", 0x44}, {&(0x7f0000000e40)="a8ea3667cab9634d224ec13dbf2e0b4feffc1c6a3aade9a8bd480c611ad9117cea7132926007945254eab6c3afd9e7371b2aa6bfaf08d0114e791b9f782b51e9a5900f56e8f4b96343f19b3bb8b0fd08ad5fcc5b6aa887dd3aaf68eb41740ffaea8588278293a232262ec2725fb8ee634d22db425e33b5ef81a13e2a4eb7e12a7320492e3683af75a9fa9dfc4256a620dcdd48710e0e09ff5d88ba0e1e4777", 0x9f}, {&(0x7f0000000f00)="1cc89bb39bcc763ffcc8c86246a2709443c134688ff16f76119be09cf5d537ddc74ca57190cbace3917fdffb61b1bbdad3cb6c159ee6b1894b99af433998aa0c52afea6b9aa578db779190be2075d0096f46e4993a72b4d49aac5af631bb9fd9e91b325e8444246282f5c42d0eee3adb1c109f48b9c48ca5fd123d451d363f539799ef99c51940eb348642ba2364313a2e9e177894", 0x95}], 0xa, &(0x7f0000001080)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x17, 0xe1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @multicast2, @private=0xa010100]}, @timestamp_prespec={0x44, 0x14, 0x40, 0x3, 0x2, [{@multicast1}, {@rand_addr=0x64010102, 0x1}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x58}}, {{&(0x7f0000001100)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001140)="317cea4c4c5d082683b2a5972b2345b4c9af998ebab2d30baf486057a172ed8e6c7c7ad3114436d3ad51454abb5c9b86a38a4ffe9df36c5ffb4a22f952b78bae4f364306fce5a3cc43c2948859c207e1312b059944a47d41b83cb17fd40b44db49e02c0294f7804534cd70bfcd430b2ce975d234160ffd8e72324dacb14277a88c94d5426460f13f11fd35c98db1947a49c76ce9ad73a1652eaba28a71a135edf570259faa05c25bf389870615dc3bc23b284d2ee72688bb20427be267b0d1895d09d898c2e381", 0xc7}, {&(0x7f0000001e00)="2685ac58e52c0d3f97de1d5b25376e5ccaecb2e17f2448431cc61d87840f1bbdee6f5f97ead6208860c8d945af1ad33bb1d005642cfb37e1819c1fa03c38a803d7f28edc19e4f3826690dc5cb3f11a3c16e988c75efe65c7b747ed860d3db436269b07095e2f037b7765599a6cb96650846c787dcefa3f91ed9c207936cb93b039a49a91e1da653161b6274614d94ff3383d82f7be4a37d74be1768d168c4fc23b0e078f196223c1b15797b0c01cf9d09ae6fec90cd48f2f1843c85ad132f60223bc23c2dd574581690c202cac96b1a1c8e2ac1e317475ab7828c4813e0e7bcc925414bd3ae5302e08cfacfcb5acc78d2effe28c6ecc805c9d1d37566d6d555bb530b7015d2c808ec47872acffb37318834ae72f4daa5a1b2ed1b93a6bc58028205691b0f3bc6966795c1ab52073a8e0d62f5a931d2c9143ec910207e3c792686a13e2da52a60af53c093476fd6e63bf629e0f519b00db29b68b4e4911ad6ee4a0362cede196cb3ce72361c3f4e183664db123c450d513e0e38a8213661318e26b32d5c4dbc944c087e819a918699137c6fb1d06591256507dad132f6c988bf58a6361c8ab88fad16506934998c6d5b01add81f51d85df9e94c39cce846e6d3f1a55429950af5ede2db63735bacc7c19fb7674ae712c8e888766f2c3f8f059452922a4b4ff62a07a44bdcd42c3f74b2c4b665f589984c55d309dc62c42e979374dfb42eeb957425390b42d34e5e09fa20766722eaae9c055d129d963eb10b0a9e111fb7ca99671c605dc445ba0997122b392f8c79de92c8f062362dc1014fc2fe7ec0b95555854de71d4b88bc304090e4bd1c4b463b0afe38dffedb58a91ad89450ff6f57ea83f7207d4e67480800a38d05217ab112ad9e80304aae5d20f9e72d5ad480d9b705d73a9bcd0322d3a4fc9b3709701bf12abc55da78856e2c06d692954d736eb4c95bde05a0ac72086d4a1de122abfc6114fb218538ca1874dfdfb4b22e7df2420015604ed5d0987eabef1ab93d3119490414c7b4e2f6d004d7db6bd96075589d75def3fafac079c47e39183ac1963ff373aeb5cbb4ae3ce13b9863b52f579bbbc4577b5c84e87483cba131d4bc54fc349865a97580efe67dbe2c35f2a294f86ef6a2a62f15686fa9db2788b8e2f2cf01f42eaefca5d836a1b660377c75032adce17355eb2201889d8a22b2eca787a62d6b5f2fca92a25f8185fbe3e02d321e0e43e745c00abed68fdaa30d32d3e439fd8c46d44c10e513901a82a8e62030b687b9152451db9cb597bf075a13040663a2cb44a05acc3b4f9c0a2b9dd954ae9a7ca08e7cf911d86c44680cf0739a67237c6754b482ea31c748e6a75d80bff0c55924d37d57a1680820bb34aad6fe637b53701e4e18701c41c9fcd2a248157aedad850c83495f848d7918443b1da9d6068df27db9d52de199f283c6ef5e474c5ecf908a0f2ef05e3a9a3c4d463bc4712fe9a5bda3b5196d2f5b67cd46960e516ff2228b411ce8dc8cae3f4de39d3d99b7c1477f29155b44e7653e3db9b30432f8f909986a8bc0c217ab548b169d620e9b7722b48d325df6302030fef2771b832d1a42945a629dd100598bb6725b0317d0aa13a109e356397fd18a78c42cfa9e8da119eca4a881cafebaa245bbd8629a0f4950a9776a7facae055aad761adc596bf8e0b251ebd3787b803ceed8ba14aae9957ae96e6bc47a71871cfc5dffd2e241b76397d1f2ea3249c7ec73bc8efb611372f7a513b805fe990207d89f7f67d81a713abaaa0b1b92efe6b69809abb8217c1859dad6fbdebda0944fbae98891189acfe9c0835a71aff9f74ca1b8020a43ad63bab20f37e908c31a69f0ff64b9c6c33fff15fc8985a1ebdb3a828673c717aa6406ea302403b8d164899b17540296272da03b7a23d5c51965ae56687b4934266c97cf641f3a0da34343b83045f4fdca6fdeae01121ac28a0bc172d3aecc07b7b58ffc09db52744ebe85b1b924effb76c75cb9c01f4bb5d34af91321a71fb9a081cfc8e94a80c87ca51ad9b220eb9d66f0ccb694a97bf84a28280d9a1da27286c748007ce49e32fa018c20cf05ec32a92d8cc0b9692a9b0a5c3a2a3f31e41cefce0e47d3e2e80dc2544a9559dcbfb1f8cc882bf6ef54cb86480951fb9385cb7ae5b5eb0566465b3efa1254616e4a52ae2c96d6c3f8d44b020891403e73efc4850224ae537d9c48f8e0ae9a2267f2dfacc2372809a0aff1397e4f14c7fdc8252a434e4d2e6c95d77bd8addcca9bfeb4c52f709a338fa89121f9b8b4b8c12a092429ab5a00a8157fc79d3c8da4bfb797f3b6f696fe546d64a7df8089f3f4b714e7701d72532a7f4a1df1d90818e2003bf9ea30c108f2a7ef228e0c694ee6ce97ccce4685cf2b64332b1188b2c625da18b2ba2a3a44ba0c9863c1203177143f771499b549e8f29fbc187b272a74a5a0cf8cc96b92730ac59e9c75b7fe7bd21dbcecccce86a40fa29a7c84c4fe4729d061ce09baa2e065bdd6c87499f67dcc76bf0b5975ff86769c02c0e0e57f7cc7fcf1b46b9817d6e8deb1eb6be8fb0e860933e81905f532986355d21f04ff301166318bf89a06913dafd600e5546b192dd9164294774ae01faf38f33146ee943fd5e2a654fdf84849ff85ce3260b78882cd6acd1f0a5796124d592571b4923d49e9b4d90dfa2ea482480f77043ee49fbef364fbbe78f5ded76d307f11d08ffeadcb8a44e6860a0be8dc6b1558745f8bdff9aa9000c470f51cab8943ac1923bd518cf5c56d09b0a9a4e07da8d967e13e1f6a00855a898e497eb7bfebb78960776c11f9e6e347b65c03c529b7e9fdfad940bd68851cb5756dc58f145d122771136bdd948449769e95ffc585e575a7f6a566e370e38dc293fd613e2a8be34e5c275969ddbfc8001aa9027ed63ae8ee8f9d1f4a73c8fc6c150c652bd8b3678cb7f0eab8b25164e9bf5e6d336da20c493421143e45ff8a307de9894b623a4b7abe37c8dfd1d2dab07e3a44db3570fc93327229fb40c86c30035e9ea53e7fd096d225d2d56b8753e5de406a5d4f51c6b1e3062d1e6eb70dac4dac40cb30f025ae615c928e902732e672a67ed8a6aece36988db6d2e5dd9323b476a1c05833c3354efb7a94ceda109b07f09daddd72fc50d1e4e75ab11f60b70a58bf14a81ad5571ca0f5a76db77bf177e2b6e36f9f7c417d653e80f96a04659ae0db4de31b80e206dcd97cb742c5ddce6815a4a192598b7667d2039a52cacf45b9fa32f0976e287e2c8f8f963b0dc8075e0a09a1ebbc14c56066d08e776501f91d48be9751520363253deed73d248eef2fc203b85e7b56088a0ea7a57f2ffb9dcf00f7aff2770a906e0185fc4faa2d20e3975013d6c441f88aae87db2b58da46f4c6579c26667c100a7f1bbfac607406fc3d40809a68cb95583f06cd849d592876b3b02f6e56c5e1f46c5e9a5751044d8b4c16dc165480b78f35a8d134ae8dd68255b7dbe7f5bccad853a9794adb8b6c0e76278e8aa48abdc1b8e551ede468311a3df6d34f278e9e1bce9c33bf199f6b9ca0ce9bbc59c9f6db945aa32c2071c05f5fe762716ffc302b20b8c5dff01e6183bd36534b8fe07de6d6741cc81736c2db139ef84dbb7d38c7e4c7c8f75c8b78faaa77dbca0f5f569d868004f0c49c017615b9e559651c8c218250b761bf2b6dfcd26276714f5cdca3e2a673e3f2a9fca4aee660da85ec796457a32beef5ce818d9486ed15aa6daff75172798a124e1a9211c1ebf725107941f48c37a32b637349639c828504e6192f44e2e4bc1875807c181603f82710cc8010e168226e4cb785aa21623bb79af6f622b25e1497defdd6d6be41179112b8805f077bbbe51cb82b6d9b28d87b383ef4d39461e57adeea0ab3a4a76f1176a090a7247cb5d3b2a89b778d48aa011a94cb2a3d53316b573bac67e1beb15abb26895a3481d602a3284f37f68620a80879f70e16866903b4850344057a2670dedbe87ba55e2d631f376088f111e4ae8d62102295e729be66e4281f5282a1212bf04c34f44780e23c7ec859755951aae271baa28bcacbd75a0c393ac57e07634639b620a9e939b1c11212594078ba55fc445b67e205f6be3b888bb0851e4b3e289a2f76e7bd7742199c249bc3ad980bea80d0227303acb51470bc07fafdd498781b471e1c20194af795528fd0648f5e2f9adb27c660882dfc1bb88d4a13d9364808f87c2f020841c8c28536ea951569999d67183a22d4863c018e72f9b19f448b32ae108340c26981db174b443f002ab6dedf9764a90a0efc295c5ba6ebaf6fe30f0119b494b445b8d277c334081332023a5c223b692053e9357df703de8bed72d0dda0875161e47fb2fb3ad2901ea13ea094dddd833295943965575c4049734ca920bc5654f0c91a0384f6ab0edc7b17f784a6e81077f2a29bceafbbf6c95deb1da273785bcada38edc96f8e010de7d13d003a3d61f070749c25a1419e34379eb4391320e95282273622f39c5f2d9a94b620bf8bd87213539fa1de711d12a4881c0320e9e4c2c81311531e7e7c3d21751c0ded81f022b337ac3438e0aaea7bc793f27e53a55656af89a03f6a6fce46e63f5a7ae5a914466c5ad44712d1ba35d2eb91f35fed5e380975752af58ec6755dba8790f53f6937ea0de32d5f3c6610e736ffc0ff971756c681d38dcdd2934a66d931c367d92c83339fb936045ba925ea929953ade74e4d1c0493192fdc59b41c67b462026ccc30ce7a769fe231b19551df47b94a9356f53e3fa0f2a00641541807d36e1f97c057f4c66b66a55c5987919151c928be231b2ae1c3b535ecaec1d7e21bb909e16f7f5f4c31ced9b481dcc3b9a8b5886ad51fa7e52526c3364cc1a9bee6df0a5a97c9665f4585864d70498ae0fb14f71ccabe821bf92737d2c8052642ce9efba5bc2cc44c4c189c75df835b2b4ca7d6cbb1e3c54a0584b1ab00e6c012fbd4744a5391df3b4a355db5ade6e105b642286ceb3de280e6a7f4aaeda4c6a30e04f6fc9272b8b58d6018ca173e90a4d893b10e7a50dd3c9dc391ee8a95bbb26eb62187b513727f1f1d919718eb435f5550d5601af545c8c693cb29b532c351aad386727d7a4e9a779cdabf20e4f6ba7837b2c4c65e1be5c5badee25c68743166ac625492532e9a9b47ee4f662453192197f2c3ed893a7c89af7ec88e6bc1edc39d2259120c50a8e8c783b1ca11a2a582930a6bc5df324a87046ef855c07d58978638caf069591d3c71670cb9896ada6b3d240b13b1ccfb45e08452b888411f87d3356f0f6d4a40bbb51df120a312d8c646fac67ff50a9dbbda199a6da0b06b558a19d74c268ffafb4722e5e29faaf9362ccdd6dc8ac8023ed6847b4032ad01c5422aaa703ecd946f67b5175f65c0d9d3e7f9b9c4a5840bd3fbec55fb8c5a9e925a93e3b1b20d11657e7e7c5a5229ae30c26b87de649d22ae797d6fedff1a9dca4af9e9b677402a1fd965855f981e5544fab0d4ba76ffb3c56d1b91348e9f7e5b6d771c0ca06c0f1314e7450343af63f2664379bb68d4f218592a8199cd0d94dc89612f471118e3a29dfb17ee790e6b41717470963e10f3b208a3dd65e6895707850fd6ac9449a8ea6936108da79fc511e2198fb03ea8fa1fdc77a850c1914e387ad4e45308783861fb4cedea5a29a2d8b081688a2a5f1df5f1a1ccc2f8853e81c0285a35cf413c5c858eab77216a6910ede4eef6e41ba521be8d6fb78c4e81c8308755a032da1d87b51404c4db239816bc5ee559025ab6cb973a8d1c85b88f68df8da5d698e1c0147071bbd946b7a73", 0x1000}, {&(0x7f0000001240)="5c7870c029627297f531a652582a51ccf29bdafd757fc3f1b46cf04d0dff2b7e527a8f836c20474433a164b2c6a3bf74347733c8d23de3732dfc52368021c6bf17ce9ecf9c2a50371dacf061e2a23fdf88d2dd7f40fb9f0336cdd2c62f5b1f97c149cd9d", 0x64}, {&(0x7f00000012c0)="7b04aa1caa93ec7f3f1fad4c888808cb7d4b25c91019eca59c634b87a1f53c95b9288f1e906617436bbe2eed93441fe2beddcb3eab2d62b4eb27d9d8501d7d0b3cb49bc47fd300b09a374eac337e589a36bde65ae17c19c3bee297819c830cb8de46bf489f1ef59b8e5584001582688bb36f91256b9cefc4bab077d2e1ffe0c17cc8d05fabb6b5c2b6e429343067be9886b202f5e7ed653960d9ae1269d9a3e1adf5c99b21d215040627c5781f759c91d1c1efe13ab52408be949f1bfdeadec777f5de3d0ca22fa9d2823e53d579e871bd3b8fae01f0453f5bbe8d", 0xdb}, {&(0x7f00000013c0)="9002422bf3a53c", 0x7}], 0x5}}, {{&(0x7f0000001480)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f00000014c0)="085bbdc6d1a40866d8d29ee22877ae6adff9bbff364b6e9a8ecf3074869071fa3ef9cae68fa989df5ac2dec5351dafc6f05d6667690b78d244b0e6ee63865db7ca4ede214b7d0f19d6c7fc5bada48b74c475a95d38671279fc2e892444817896eb47b9fd185de8540896719526", 0x6d}, {&(0x7f0000001540)="cd172d8827321043176dc0b9c0bb9abd408e96923f14a11249e310bf88a609f3493e09eb38fa5901b3aea0216b6a8d36bfcc4b598a1a148f81da64b63b55de04efeaddbccdc1d732328d99200b6f2d2fb163f475687fca3b5d", 0x59}, {&(0x7f00000015c0)="86d7febebe9962c2c240f3793b1e13c5a718bf77671dfe63a7eac08fed9042859718a48fe91f9cc44da9b9390fabc0d7976d19a3ef8ebc7a4bf8c917991b074783939ffebfd54d58a0", 0x49}, {&(0x7f0000001640)="29ca870bd27685ad955d4c358fb9b88fe2d302d2d8385714b9b22e411a577bc6c2cdf0db186c9dd08db074340639a8a2237bcd92dec46900f7aad7b1fecabe0bb8dafdca2d73d4e7935b36f22bd55f895478323441ef1465152a67674aa0e6f12085e2975f3695b7ff6a7a790fc8284cd8d09650d75022b101ab4cc480d358c0f508c0dcfd34d3", 0x87}], 0x4, &(0x7f0000001740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @rand_addr=0x64010102}}}], 0x38}}], 0x5, 0x4000800) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000340)) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x7f, 0x7, 0x8, 0x3, 0x9]}, &(0x7f0000000080)=0x78) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIOCLEX(r1, 0x5451) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x509c01, 0x0) sendto(r7, &(0x7f0000001900)="852de82fa8d46107f8f7af83c71f975cb51eb6d4be16326ae2606edabbe8a7fcedbf50865b342f0a7188b997526732f56c703437d85af9cc0e4e3120af79c308f8489b43741338cd1649da85947d9e25932fd0a978b290f521b387d367c02eaa1f63643c2d7497dea8b37bc8d03177b4bab7491d4a1e6e0839aa794e3a20d693e85b5deb79984f8dd8053776c596fb900f06fab451697f", 0x97, 0x400c001, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d00210c0000000000000000040002029fc48d10017be0044acd319431862419a9f3eb5c096a8d957037987667c8b78560f89825d730bf259505ff3ec0916dba2a490742f0405e99b7c26db43bd1400cafd8bb5f126992a8a216a6aab9b94dba61c4abc8eb4498b5aa5f633a96c25b83c1d3774b68b0eab5dcaf52d6687ede4884fdb42519e03ec87ddb5c79"], 0x1c}}, 0x0) [ 2275.161950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2275.172972] FAULT_INJECTION: forcing a failure. [ 2275.172972] name fail_usercopy, interval 1, probability 0, space 0, times 0 04:33:16 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r0}}, 0x15) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x11, 0xffffffffffffffff, 0x10000000) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x48) sendfile(r2, r5, &(0x7f0000000180)=0x9, 0x40) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd_index=0x8, 0x1, &(0x7f00000001c0)="229e7c2e7df30d5f2af256a52fa975898c3fb33066a0f4195121da457a70af8eb871a164994c5552aea78d125a541bf43b51010ca0c490e54b860f5296f8bb9b5f1281c4268ef732e5b22f472779f212eb83fad4bc1860b7925549ab9f50c5b6ebe7ab21be97a982fa5f13b5b317451253ddc24ff378168d1e2935d2dbfdc5498c5e8e1af0850e881ee7e330763e588afc77a6e0d13ddcc15c20c64869f1a4ba6e621aeb04d2f84bf8801ce24de4d5b940000827bf18336b45fda0077ff7e8f6915ad38e86631792116adac4e98853d550502c5460a89084605f5ba6bd810aa1df", 0xe1, 0x8}, 0x9) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x11, r5, 0x0) sendmsg$netlink(r3, &(0x7f0000001640)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc, &(0x7f0000001600)=[{&(0x7f0000000340)={0x12a8, 0x12, 0x830, 0x70bd25, 0x25dfdbfd, "", [@generic="c175f13abcd2da4312b3b6b3df26b89f89f9bc6ac9dbfdfec9dead44028e088a772299d8f2ed2ec074e9b216ade1e1c01bd1bf3bbd9a098b465920560fb6151523a143a3e94b779ce7cb455ebcaa508b89ec9e188796ec68793b401c165bafab1087d5fa059d2b1f1d74acbad7f4ca64b9d204cdb3beb3463f77b8764067be3bc19e6bd2db", @generic="486d6c14b1b0d44b2c73bb5b9fb2aa01fd946cf95eda3a4e1e2f625d7da4dad7012cf793d063e0ca246d5e98bc163fa03e8f04baf2ff70d79b8ca38e3e991fe9f99ac5a57d850b8b158dbe68ad04f8b2ccbe0114f623c8adda662640786315387b35e3d512d0ea06843d016cc69c1b8383d1ec11ff08141c0393c73268bc65", @nested={0x1004, 0x70, 0x0, 0x1, [@generic="825164ae288072bc293f3f1ed9e9052aedd5bbebb642793a8e3bfc732f6c24c377ec87997a411bc805a752ffe3ee61df62a58643aa5c213e14bbb62137da3bb29976889c7abec361bd574940a42447a24c55aadcdf9707ca00f707fe07d06aa83158f564b1e0d335babe0eb4b6195732e991ebdcf485213d3d01029ff5d82b46adf3f1c3902df587c5f6112956b51d6a507db7c079f36bef392668c1f42652f127ad55fdc1bc25e601b1d3d06c078a3ca0caddb9b746203678fa4b4dd2ff5dfea3369fa874e3d381ee9af6cdb260ecbd1d43c80c5f9e704dc8a2f39c5cecb25e75cfe91327e14a270a7a9c128b7bb65fbf447a57516eef51c5aa15a75dc8ccbf1fe0d0e6dff79a81f2b0a36db82e1fe6ef08d96017c6b154dec81f8513d26e630bce33532d90e6e8105e62b49076b33711d0cfd6122c019f250442824a14035241dd968849a900834b226e14a7f94f2dec554863df8d7279149d7e02df2d1d030c1630a7dba976b40f038510897ef303802345242525ca854b67a0ef74d2eb176da62cf5673adf41944cb818b419796fea963f685f78f93ae581a061b4dfa1bb82d713a428f22eab0b5082176c05ae28ec2d4b801dde30d1a0d8a59e3526da8f0a54899100f6bed8acb9620a88949dc8d17fe39d28bd513f96a04acb19ded4a818bdf5730d5d33dc47277c2eea7a1b14bbf273c4eb280d42badade7dddafe815f77c5ab9f890fdf30cb7a9867ef954704d5e7aefd0d9925f277036aff8cdbcde4e9d0dd212e485b269d5ece832ed3894a38331498ca9c5cabd222f4dba14b4b4a3d76dea5a96feedb1240c569e4ea7ca85aa9afb5b09d544c77ace9ea0aaaed27f500471e351499bb953bb58ebe4580bd9c801e7ea54e405ef0c77b57cad426af007bdc06541eed02d9d6684ded6b14ebcf4ead7518878f4fc4a6ef0f2f0cb12e57232ba2723d9b7922fc14586fc82ee102cb4f33c2fbd2fa2134e89e8d6addf80e191fc61f014ea90af8d5cb88c58c320f5307d162133fbdaaf5857e2b4db4abcc24373ca1e441636a7c9a18037482425d07d6e66784c6d03afe971553d6c43c210ef3581100e0ef38eab4a8567ec89dfd536110018c676ee57057c85dbf7f8a6ec07efd3a35b80fa1d3de80fe58bd92117a96c7183324e545d7148d4e54cad648d97582ad7d1d0445a34bac8707373f81d2fbf5849e7c397c6cc6a1f6a0dc7ab569079f3f58bc7f56be787cdc0909ddb58b11c3894a62863d8d9cf2a594763d90d1c2f77d13cf46452c0072c2fe5533abfddd0ec66e013d46f20b198e128f32b537c3381520cc3166b5e15e9421db8682ed51147999cee541132a172a4008e0441d48f9cb3e4cc332823d808dbda2e03c506b7222c765f52319e012ea4a4c66a4deb98b8f663c74792c80c715c24c5e1fc2ba2ecc4592a97d7097e8122f2cafb3875a561952458bd86c65577036558700e910d13b1e2afe7992de07160f6f6dd69663608bef1722f50618d1122a4c97789892fac24e3f12144e957c7e38da497178ab7caa45f7975d18c5cc3f0f9079fd752828138198baa23d7116ab0856bef53d6274f563df47b414d4a6474da5b26264660538655b2372b1ae055899edf3be82ac300bd460ffd50c10cbd62eeebe60b56a9d93d9bfa16939f7a1ce0e4882ba7aa3866ea549238e1c5beff40acae9dc54fd73c5696d43ee50afebf97159c086ca0b863913456420f691d85cbafd9570629bfe380b8d4d8aadea0864a45ca35c1856bf810fca3fdb8b57dd7e0f261bb54253d2130ea6012b582bafc3d6e0a3813b653c6c57beb5a591c907a031003f7af2bb1d51ec5c76b0c0faf2c25e3e63a020bf2fd279c725e74f5e56dca2317ec0de77d573cb9cb2187a84442ec6d618bbafd544df03a1999eae6698e1007b2741586f130171263285f43e19a3034bc188f0cd39390470c1a566e5d79563965402565d64015cc2b4b80bed2265b6c81472d151903ae064fd075142ac5e063c0f6e5559b46320b9b6d6f9995f1091052797e648180aa0de0544b4e68eb9053dda55a6702814eaeec59044ce4290c0858042e3f42cdc71d8c40256dd7be5035f1f5b988d84d09ba982f1bdf9377cd2f89e67335a09020751c2698b10ad06b9e808a139172d2d924d0121d6a4e5e00d41db43888a68f2ef401cb70cb6bfd1af5d7380d25feec63b3cffc8cfa8f347a921445cb3fc865b9ebf8ef8fe4178a0653e7ab40ba2d1e7487efa3fd76248912918d65d7a69f73bb03015eea9319a066b14e5db75de919a61bd2f1a368678b81da02ebeabae787556fcfe9efb4bbe50089a4caa99c208475402ea64736dfbd704d17cea65b6d953188fb7bad0ecff5cb25e40ad15cc23ee6a02894b9ccdc0d5284fad8819c2040a6ab816df9cc5c86ea10af2acb00e5b99936b8042c5cb81971fb43317c82b659be42292da64fb05804672e7e4a8e92c9237a55b85b05c2605d2f70da1f7d88959319b8e9f0279cf666b915943d1c0edd2c1a8bb0c613cdeab4f4c928344bf75d266b5cb2d8dc698e0bae72e30410c5fc260232e7d56f8b0313b7fe43d8c6888f21b9f5df66aa805ae453ea1b6e8a22491d8dc3a2cd2f6a62d0d189a831acb33e1a1785a7597a4e057b734ce28a14c8d05d1b16b6e1a490570f71ea62130b24af9492752c0e33e36b9c84d2b2179c90064c1cdbdcf99ee0e0c8e6c3a7d59b9a4821e79fa39b2da4a9e1883925b623b3a94efdaa8324f251bb632cb09f0826aab3790039127a235aec1505f90f5e72cd37520ad3e0b1da678cbaa7283f379e947600a6500e728ad60e53d63c699653c2cc26ea8eaaeb78750cc585af5b94649241d0734acacc85caa2c41e25552fbbc4bba12e8628828518a507b83294f8be9db9eb0d6fd6fe2fff5d3e919a248f37cd460b12c460febd05769764b3a02347dd8d1ab2435854ad2edb3804acb8ccb113924abae811befa224d8a6d3a5d500e1b43be3ab45c53d7ffd600505b9c39a37f8d62eb2aa211a7d94fd99928846a30a4f6c55fe686824da2ab4ce6a9f78711f78762648f02269d675dfdb1ca9df1e0014af1440b6ac11129e734af92046103ba0ed0108b9d1ac0b6b63a6fed11cb55976ead4f5b94173d92b76db18a68fcf13f51ce4cf2dc7be2afdcc618f1e4ca45fa23a722f4c3956cbf67155f71d1dc582309b62f4c98445147465c6aa5e2c504e8f35422663cb8bb6d4131a99081b856a379e1f8070496a8931d27bef6a6f24ffb6b66229c7ff5de0c03b5b7e3fe95de7836efa3119b33b648705982c316a746908c8835406bafaf160adec5e3fe2fb61001076f6a9e5d160d8b0aa8decc355546a7ab02a3d8385af088079f02777a5fec475d4aea7b7021c2b3caca7990e83101a5f8bf9e027f7b36e5fe4b7c2c942f2dcaf9f846bcf50d50b6634a2a82be0fa119405844f5aca7f84cb1e7cc382814291ed8b5e6d9992c73f9b9bd58c3b11441d52655b8e51769c5312a875177259425f58ac3063c39a794a22957149e7321a0d4e3447800105e4d4b6098ca09805b4c463f82feee61764d884dd906476d77a045f055d3e8c5e9fb28ce958f5b0679ae37f0ffa58a2e0976d16de24898a763091c791a0a8227f195a82321ce5419c0874d753a034d5a5c6bc6abdef61a9d295479dc40b183250ac59b4795eb596a6912b77716e02ce325bbdb8f8e217762c1f7e0745239372328b9d2a930fe0e87fa10e8d6322a255e5100f7413934fa351718d855cc21e9aa6f7e004564ee08c7b6770db8bd1f9cbf84f1cd4ab1eca07372bc487c3c509a6924e988bb0f03f633d2a2ebd4296903efcff482b9ec451d474457e7598c123ab09802744a1559916730a1a4c150f8ca8df1b89fcb520bbba8ca8aeb54704a8989dc53e188d24f9bb06ba8033873469f9e78bc4bfc2b36bce981a53e8a4becbfff8b5d8138dfde684b278670557cf2eea87c9f3697bca65bb19ee85c874c94bcc8c1c1e483f84b458ae6b4d8696cf78664d6cd5bc01405989a13e32e6f6afd98b91ac381251db0d272c0320ba929d8f6d56d502206ec78b15e525d67d9dd5299e75166ed85200fdace053ad8d87c56d0dfb646e0909fd7f15e8265770b72b21f046a55b5ae2538c9d9ae4e077b666855a0f2e0d782087b954e5843ff43f829cf4cd68fd0932daf1b568373c3b7e6daaeb177aff3319adc384c7a794dee7701a25ee058fb22bc63c07c348cb5324407835b734ccc3ec3a542c368d69a635f537746c3d7b6ea477ea0ebd69483e39b2d4096da92b62cb3550eab5285e95c7d68f24697c46e33c9635fd012a07df3712486eb7384173e90a38f7c8dfcacc60e610a576eadc9bee934ccefd79372208d88cd645d63ea3c9796be662aba981ce16c07e5b2212ef48b1d85f3e65a22b16e585f0e06a2115b2c641d4a130523617c119ee0d1961fb796487f2a0d8a4e667f6881a25d22d4cfcdb8b63dd822b4f3e2fe7dc1745f69015ff4f0b1e6d0dbb10ebf0c7b70310094a540d5f22d272b472de98e5f668e276d6e62e5ff610fba1623240cf408b11f5eb4a512dd4d63e815f11dfed76a49592430a864335c634f80189d60f45ed8993556b799d8950ce181532db1f3da7391312dcc6df93a758e5883fc13fc37912167d6e8f212a71e10c0333597647f634ec62fa989e04d3d5912c68058c23b1a7e5a79e6aba328faf90a06acd51eeee8cf2d98220abf1e31befdbed9effc0f0d781ccaa5dc967ac2e7e36b1712a9b83eecbd8b33472a0e2ef30b62810a7fa1fd1e592b4706069924e56e9e2d58ea6c87dbf13994af45d0845b9f536aba1a7f082edb5ef1fa1d1369119afa3c30426442a5cc1a13439df1b08b20ea6963538fd01f7d07f78e0494144045afa679263ff2561d4478b2962438d0542024bffbaf889514e51fc0385cc8e99769bc0b5e5bf5363f6d8e731817263b646cc1fdb51d4bdaf9fb2107e699d46ec13238a1ca491387be6e209047269d8847e9a8cea4d3b2f69aacc31bc53c3ab887815248e98b08244f17f23e75866bd5f79be2e70e147394e8a268f504599b2bd01469de391a373d3abe3963e030dd2c3d128907486abb2693d2dae57395b9951d50351fb2d4c6f8c09a6a90b22afea68310abadec3c6e6b9f139ade99aff88b717355c7a2441031e7bd8b1819a6171856922419cc6f84c66b95c9103c427c4a6a015ec228c849c6170f2ae1d1b085899f23c8a18ea64f7e3c63d9796d588acd6d8df24e1675bec5aa9b8ceb755eb7c6ae9e0eb57fc9514d838161c2c69c47994d66be049091cf402b5d644acec2ab2f69ffea5f69802fc504f824cc4c3acc191e63e9837214864d39edecd2edb774857c813eb412fc49a82dff4412bd6e52e5b63178073433fb1f64fd92c27cd4f651dcab8e47509baa66d9f429cf8cd96f81c7159ab951586d98c591069b5267a91c446e745d3c12b36d93f15711f8ec115f806bc47ce2bcfcec545f3fd420e82411181964315744f52dcea88d7d38d13bbed9b9a7102d4f8a359a499c7a2cd6090a51f1cc1703bcc26baace682f4013a0211e02684207b43fb15e8e9f882f6e007a0843f05bd135416590bcecc15b939868f5b636725acd930d0a70aa04889c4c952fee9871f0139417f1f2a193859a432564dcf6f92207a443871731a7924bf8e7edb720d88498c0aa9e1d57815d37d3452aa6302dc3ac26fbdf173bc1befcc6ed0487c73d1343340454317cf16702f7ba3523fa65f3045366eca5b1da36f63fa605daf073b7bdc8100484bd"]}, @generic="98b7eca245d1e9d4686841e7b214d3ed88134fd69c326693e698ed3426d56a4e7c103fa6509972dbb4819f38957559482839694f94b29799177a05105ba1ab936b614dbc5f694545c0e70204a3a73359bca0b624a1e473d8023fa0d3c802d91ebacf06323af9fd2ae431495f1e40dd34a80ab0adc2dbd2843973121ee8031dcb3e62a32f982e0100fa4d9fec59391b79a06422afc9383220a44e43b38027bd0985b63ab500457cd57d0abb399cb29ab888f5c268a6cd10d85028", @nested={0xd2, 0x7, 0x0, 0x1, [@generic="5fd7b9c9fe2932e3c17368f247bfd4132b635fb991a91a48ca337af6d5ddb3d109df9fe01df14f1fc8a65844d97a2f4552d6e84e6878767e908c0cc4df810586fdf36e69cf8b8dca74278da4f7216dd10ad6e2f834b47cb3cc3337d60c85645ce96b5480b986a5a9ac51ec8d30223beff8c6711fc63f0e8a7a2b8ac1306d9c4bb417942bdaf7da06ac7d5622b2b2e866c642396e9073dc73256e48f375f20e9239a904df9e92087ce4474892170c18e6a78dee81f62936707dc048f824ec6caaaf2f32c30d94fb42fa1c372f6fba"]}]}, 0x12a8}], 0x1, 0x0, 0x0, 0x4000000}, 0x8081) r7 = syz_io_uring_setup(0x22a5, &(0x7f0000001680)={0x0, 0x9323, 0x8, 0x2, 0x1d1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001700)=0x0, &(0x7f0000001740)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000001880)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd_index=0x4, 0x2, &(0x7f0000001780)="fac36e667d442d9d641ac6319b11c5eb2dc361109ecdbed2bbcd94cdeaed1dbaf2b142a1d0bafe141fc999613e9dd07120889c63e275e6f224278e55e46c23f9fd354d3180067b34e72a645bb99c52f6fa3c989466150e0f55f8ba509aaba1af7726f14712f75c434c8e41f9cd909dcdd3b9dde733c458d1be5cb158824170212ebfabcac6e8816174811f414847adc91def9dee8e87997c2c19516a0bbd92907c28175b71d075d7d53357add6d6bb5df2441d96a9337edbcff3f07596d37b870b690eb7f279a8d178c0527adb65128bf840e00755dc097dd7e4ace434ebe14577b3f7e7c4578dc1136ac59940da224d719a6d24e6", 0xf5, 0x6, 0x0, {0x0, r0}}, 0x0) openat(r4, &(0x7f00000018c0)='./file0\x00', 0x40, 0x20) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000001900)) syz_io_uring_submit(r8, r1, &(0x7f0000001940)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2004, @fd=r7, 0x722, 0x4, 0xe17, 0x1e, 0x0, {0x1, r0}}, 0x2eb) clone3(&(0x7f0000001c00)={0x40000, &(0x7f0000001980)=0xffffffffffffffff, &(0x7f00000019c0), &(0x7f0000001a00), {0x1e}, &(0x7f0000001a40)=""/101, 0x65, &(0x7f0000001ac0)=""/229, &(0x7f0000001bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8, {r4}}, 0x58) ioctl$FS_IOC_SETFSLABEL(r10, 0x41009432, &(0x7f0000001c80)="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") syz_io_uring_submit(r8, r9, &(0x7f0000001d80)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r0}}, 0x80) syz_io_uring_submit(0x0, r1, &(0x7f0000001ec0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2000, @fd_index=0x3, 0x5, 0x6, 0x200, 0x6, 0x0, {0x2}}, 0x401) 04:33:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x355002, 0x100) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000000301010100000000000000000a000e8006000340000300000c00020005000100110000000600034000030000ffe29f0f81c8473f840000000c00028005000100840000005c4fe5db37eeb2dd0c00028005000100110000000c00028005000100060000001400018008000100e0000001080002006401010006000340000100"/144], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0x5c, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2275.175615] CPU: 1 PID: 13185 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2275.177260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.178957] Call Trace: [ 2275.179507] dump_stack+0x107/0x167 [ 2275.180283] should_fail.cold+0x5/0xa [ 2275.181077] _copy_from_user+0x2e/0x1b0 [ 2275.181899] input_event_from_user+0x1dd/0x290 [ 2275.182821] ? input_devices_seq_show+0xfe0/0xfe0 [ 2275.184016] evdev_write+0x257/0x420 [ 2275.184859] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2275.185945] ? security_file_permission+0x24e/0x570 [ 2275.186987] do_iter_write+0x482/0x670 sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000500", @ANYRES16=0x0, @ANYBLOB="aa3926bd7000ffdbdf254a0000000800030000000000e2b392e0839f32644ff42346fc05b0b2cb87314a03ca3bb86b6007b662b7d621d514b37e661a6f8f451fe6fd65465885bd8a297afee262ca387b1517fe3336aa654e349247ba05e5e0db5f029213a8cd0052d9391e17e555748ebff3f6194fb9a268a55d844c496a84dd8be2db74eb784cb42ab4fdb373e414b07df2ec3f9d9649809c0b"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) ftruncate(0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x80) unshare(0x48020200) [ 2275.187807] ? import_iovec+0x83/0xb0 [ 2275.188664] vfs_writev+0x1ae/0x5e0 [ 2275.189422] ? vfs_iter_write+0xa0/0xa0 [ 2275.190239] ? __fget_files+0x26d/0x480 [ 2275.191069] ? lock_downgrade+0x6d0/0x6d0 [ 2275.191929] ? find_held_lock+0x2c/0x110 [ 2275.192785] ? __fget_files+0x296/0x480 [ 2275.193619] ? __fget_light+0xea/0x290 [ 2275.194425] do_writev+0x283/0x300 [ 2275.195158] ? vfs_writev+0x5e0/0x5e0 [ 2275.195961] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2275.196962] do_syscall_64+0x33/0x40 [ 2275.197733] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2275.198786] RIP: 0033:0x7f701ebafb19 [ 2275.199751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2275.204160] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2275.204285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2275.205737] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2275.205750] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2275.205762] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2275.205774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.205785] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2275.217003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:33:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x8, 0x17, [0x1]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24042011}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x28, 0x3, 0x1, 0x201, 0x0, 0x0, {0xc}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_MARK={0x8}, @CTA_SYNPROXY={0x4}]}, 0x28}}, 0x40000) 04:33:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x7a, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:33:17 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 67) 04:33:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getpid() openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = dup2(r0, r1) getdents64(r2, &(0x7f0000001d00)=""/4085, 0xff5) [ 2275.432492] FAULT_INJECTION: forcing a failure. [ 2275.432492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2275.435075] CPU: 1 PID: 13206 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2275.436464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.438136] Call Trace: [ 2275.438667] dump_stack+0x107/0x167 [ 2275.439419] should_fail.cold+0x5/0xa [ 2275.440206] _copy_from_user+0x2e/0x1b0 [ 2275.441014] input_event_from_user+0x1dd/0x290 [ 2275.441927] ? input_devices_seq_show+0xfe0/0xfe0 [ 2275.442918] evdev_write+0x257/0x420 [ 2275.443693] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2275.444755] ? security_file_permission+0x24e/0x570 [ 2275.445785] do_iter_write+0x482/0x670 [ 2275.446585] ? import_iovec+0x83/0xb0 [ 2275.447372] vfs_writev+0x1ae/0x5e0 [ 2275.448119] ? vfs_iter_write+0xa0/0xa0 [ 2275.448921] ? __fget_files+0x26d/0x480 [ 2275.449729] ? lock_downgrade+0x6d0/0x6d0 [ 2275.450571] ? find_held_lock+0x2c/0x110 [ 2275.451409] ? __fget_files+0x296/0x480 [ 2275.452237] ? __fget_light+0xea/0x290 [ 2275.453036] do_writev+0x283/0x300 [ 2275.453765] ? vfs_writev+0x5e0/0x5e0 [ 2275.454547] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2275.455537] do_syscall_64+0x33/0x40 [ 2275.456312] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2275.457360] RIP: 0033:0x7f701ebafb19 [ 2275.458115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2275.461864] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2275.463463] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2275.464920] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2275.466362] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2275.467810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.469247] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2275.530570] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:33:17 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 68) [ 2275.571915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2275.642187] FAULT_INJECTION: forcing a failure. [ 2275.642187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2275.642209] CPU: 1 PID: 13215 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2275.642230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.647714] Call Trace: [ 2275.648263] dump_stack+0x107/0x167 [ 2275.649009] should_fail.cold+0x5/0xa [ 2275.649801] _copy_from_user+0x2e/0x1b0 [ 2275.650617] input_event_from_user+0x1dd/0x290 [ 2275.651601] ? input_devices_seq_show+0xfe0/0xfe0 [ 2275.652615] evdev_write+0x257/0x420 [ 2275.653389] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2275.654459] ? security_file_permission+0x24e/0x570 [ 2275.655497] do_iter_write+0x482/0x670 [ 2275.656305] ? import_iovec+0x83/0xb0 [ 2275.657090] vfs_writev+0x1ae/0x5e0 [ 2275.657844] ? vfs_iter_write+0xa0/0xa0 [ 2275.658655] ? __fget_files+0x26d/0x480 [ 2275.659542] ? lock_downgrade+0x6d0/0x6d0 [ 2275.660490] ? find_held_lock+0x2c/0x110 [ 2275.661331] ? __fget_files+0x296/0x480 [ 2275.662153] ? __fget_light+0xea/0x290 [ 2275.662955] do_writev+0x283/0x300 [ 2275.663697] ? vfs_writev+0x5e0/0x5e0 [ 2275.664479] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2275.665466] do_syscall_64+0x33/0x40 [ 2275.666224] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2275.667264] RIP: 0033:0x7f701ebafb19 04:33:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x2880000, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1015, r0, 0x8000000) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x9, 0x0, 0x0, 0xa0d800, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd=r7, 0x8, 0x6, 0x6, 0x18, 0x0, {0x1, r8}}, 0xcaa) [ 2275.668036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2275.672031] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2275.673580] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2275.674991] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2275.676429] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2275.677864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.679264] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 04:33:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x258, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xf800}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x161, 0x2a, [@mic={0x8c, 0x10, {0xea3, "0f432750b2a8", @short="d8ac658bfbc2a2d2"}}, @random={0x0, 0x95, "95e0b39b9c6b02343b1b69e277bbd532c587aa23fc20c9df79c16c0cce3e210b87cbbf8393174455341477fd28dc52e5f51c28486096371996a6a27009aaec352ae8ce25867ea820753844c2ae196a3144642be2c0ed83a913567bd83ec7fac12204e0724e5aaabc9c43aa61ae92ce8488c65ce625316c66f2c710a921526774c70e5ac56c31dd7d0c317d64bc134c08f10eea4859"}, @sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0x7b, "1d73ace8978fcd13bfd4c1424ce2f2446f3f49bc4f74856c9cb2b034e9ab6a5f95137f420326619e29e2dd2c3097d41e02fd5515ad916438e89beaa11ce0e2eb1943260042f0629c65f88e3728dc4f6a4ec86b5156901d66c80a66fca02bbd223b23d4907f26f0ab40984fcd0420273ec2223a933626852a21c76a"}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x3, 0x0, {0x2, 0x1fc1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0x9, 0x7f}}, @peer_mgmt={0x75, 0x16, {0x0, 0x3, @void, @val=0x33, @val="ff649971dce4726c1cc376c1a9d2f397"}}]}, @NL80211_ATTR_IE={0x64, 0x2a, [@dsss={0x3, 0x1, 0x30}, @preq={0x82, 0x57, @ext={{}, 0xc1, 0x9, 0x0, @device_a, 0x3f, @device_a, 0x7, 0x6, 0x5, [{{0x1}, @device_a, 0xffffffff}, {{}, @broadcast, 0x2}, {{}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x1000}, {{0x1}, @broadcast}]}}, @ibss={0x6, 0x2, 0x2}]}, @NL80211_ATTR_IE={0x64, 0x2a, [@mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @supported_rates={0x1, 0x2, [{0x24, 0x1}, {0xb, 0x1}]}, @prep={0x83, 0x25, @ext={{}, 0x7f, 0x20, @broadcast, 0x2, @broadcast, 0x400, 0xab0, @broadcast, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x1, 0x7f}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mic={0x8c, 0x18, {0x9a7, "3a33b751c314", @long="311b8c96b5ad7b291d79e3ed7a2dfbde"}}, @perr={0x84, 0x2, {0x7}}, @challenge={0x10, 0x1, 0x9f}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20040000}, 0x22040801) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x44, r4, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x100}, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000003c0)=']', 0xfffffffffffffe95, 0x48091, 0x0, 0x0) [ 2275.953255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13229 comm=syz-executor.0 [ 2292.298847] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:33:43 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @broadcast}, 0x10) 04:33:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:33:43 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 69) 04:33:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read(0xffffffffffffffff, 0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fallocate(r1, 0x5, 0x4, 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x600, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) 04:33:43 executing program 4: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xfc, 0x14, 0x4, 0x70bd2b, 0x25dfdbfc, {0x8}, [@typed={0x8, 0x77, 0x0, 0x0, @u32=0x400}, @nested={0x2c, 0x63, 0x0, 0x1, [@typed={0x9, 0x66, 0x0, 0x0, @str='syz2\x00'}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x44, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x1c, 0x52, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @pid}, @typed={0x8, 0x22, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x64, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="97275820dd5d6c5db1e95640d883d65b8100b0f087a64437", @nested={0x24, 0x80, 0x0, 0x1, [@typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @typed={0xc, 0x3a, 0x0, 0x0, @u64}]}, @typed={0x8, 0x5a, 0x0, 0x0, @fd=r0}, @generic="70fca6d2025fb168e00c53b5430f372777f11ba2f69500dbc8441dbd991e4233a7c916d2b726905db4a1b8f47688efec381f708b47bfd2897fb34653dd29ddb07b8f19548b072c4d6d868dd9e751c41b599d"]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080c0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x7f, 0x9, 0x2}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc810}, 0x8000) r2 = openat(r0, &(0x7f0000000440)='./file0\x00', 0x0, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f00000004c0)={0x94c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x884, 0x8, 0x0, 0x1, [{0x434, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x430, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x20}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}]}]}, {0x118, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3f}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x5}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xf8, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1f}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @local, 0x7fff}}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x326b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, {0x284, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "93e37892062674a673c346ce6b83215871bcf190ef95cfe140f388743e730cb2"}, @WGPEER_A_ALLOWEDIPS={0x254, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x80}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0x94c}}, 0x8040) r3 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xa0402, 0x5) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r0) [ 2301.444970] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000000f80)={0x270c, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x6c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x34, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7fff}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x18, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x265c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2650, 0x4, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x400}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffff9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x401}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xd8ae}]}, {0x12d8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x6e, 0x2, "21852404ab247ef0e3f2e5bb088f68d9ce77f2daee92bf7cefc00d980b225638e1d9e35ee68537a61b785834b5d42922a39c68cff9cb2f4e43e2c4471270016bc2875362c7ec2129428b7a9daeb59c486853021e9a87df3b96f036bd71d664f3d0881a195046171c0f1b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}, @NL80211_PKTPAT_MASK={0xb5, 0x1, "0395964cb880d7921314f27a9afe2827d8a6cb38558459b948459b68c1b33aea1714c739eedc6f460a456b130dee9382a26daf0896319c84d6d72287d43228b5cf66ec33c48c02fa78d55a7e273318d4c58691d6e668a27bd13cc9396ec3d418c1d63e85e1b89422350404c75974454f0b850ce74f3da71cb20a364a206df5c0fc94b429d22bc072de2dc644a6d0f3e413d44997c825b75c8d640b4bb9175442474f77531fdb3be4245e5b5275c419c544"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1f}, @NL80211_PKTPAT_MASK={0xf2, 0x1, "3eb6ff3f4f0aead85c62a913496055374ecc2218ca66624e403b5f91358bce69726ed9fd081a89e376b49bed078cad47f4747e3373c1c92224b3cdb5d704b11fd36ddcadcfd33dc2bca333f4fb0ad998659b000a1beffabb121cba9d3bfbd1da459fa92400a6c6cafc03ac5b029f04955fd37133365faa0a728d355006b00b79f56a6e4b35282d98782e50d255a30f9ccecd1482231b7db2e2292ae5ab79876bd14be7cb0047f8b41cac25ef2678b81dda3495c97f0c22621dacefdceac6735109b3488c8818821c9f574444f2b678e0bc0beb13aa0d58a5ca53b56e3700a95da1c52387f2a78d9003711ec98467"}, @NL80211_PKTPAT_PATTERN={0x9c, 0x2, "b48a63d7c8dacc308ecc83ea3fb2e1601071adf0998ba035b582088b4a1bac7b93cc9dfef555e605942ce56d42c57b8d394f8b66fa65ba50752870897102d7b2cb800c63d1087418dcc89a465216cab7144da52708a9eb74d14f5ce5d5a897ff516c3c0cbc88d28238decf20aad59c6bcca3435d82ff3de3dfc7756f89fa3bf28c54a8e46583e2e8f2f3d5c10636376503be7ac35ab9a551"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "31fd858cb5dff1f4f5387b06a6a4321b86955ab52e92a55cc4280dd3512e370aa06c25ba903d50846dd929118fcce513227238c61767cd30badd706d68e101124a7a280cef5a3f262c766da786dfccefd07816a5852d00497ae8860cc62fee77ab8c296d79ca5a3ddfe29e9d2933e1e20c3b2dd7bf68db90334076ddd709f727021e072c24b826e3ac0e2a767e9c4073edd83c06aacbc53afcb6f97940bab6d98ea14596ddf072451fd1a4b770c001c421b2eeafa46abe237e3831a10da4f34e4400c20c43cf2c1d16d45f393e9b9cd4e7e60a3c45996f659b1ce28e161eedcded66d12ff18498e291736eae30e7de62f8440c15371e980171ea759f3bca358569ab26cce09e77276e7c5511412df17b6901d1c34f728225e9f042549e0c403225a284547141ae5ff9ff23dfae97cee12ea012ec858c40fde070782ea6efa0574658d1e2d08af50281c08e7be65e4b705d7fa255a468898ff9811a7c4354ade172f393945767572b2e25610e78977bd643acd422229576802c065a56ba036777ac8c474f3adc14cb6c1e06ea2fe0bc40b38a378a49c4106b289ec4a3563aa82b8798e694ac741e7aa933b7a2d6e17fda608049d227e061900fa439015bcceb845dd63d52876d458a540d05b58c4c57d5ae557270fcdc5bcd53cc5667c588b6494f7ab2a83a3aef566b2f49c8fb58e3695b27b65d95ecea5332069cdf38a2eab515c3c4187908270d194db20fe58ee0003d7ef9cbf4e948629c3fccb1f616d5897bba6d0ed00bfa55a722cf117449e1dc9df245c8b1f441ec43d9c7994f38910ad3bbf5bad0ea1023e6d2634eefad25d8bc4a174ca62a439a54e1e2e8ff851a7d6de20c5835965c7ec77488c021756f3376cca9c126fcc41b533cf8b33cafa11b426966645f721ae3595617ea239f178ae9e4525fb7080dcfa9dd8c6fcb31f306badc9626e588eb3ce196454b82222a79a39e3d6bc1acbe98632f407dd2c5592b668aedc29c811e4172ae4162343caff8bf8aadfcba63fd79cbcaebdcbe847359f3b581972923c007db7e42d50305fca4218b805c73ff75eb0d65a88a82b232720aa0bd934d08320a25d6be0ca039670b6804736983372ca6464befbfb4d9dc2501008a3c9b21075f37fb790b4d93eabd6f85f6b2a73f7195728ab0e5306217cf436f21374d4ad6d260b287f7802d9a8a4edfd12cd969eb810d5b729f1825338f84e217f8eb1d52b217a9f22316f101837e3fa65ccab7bb466f0ac927cc61a795d5fb211b03d55cbd1b771ca74a0a90d0bc5455ebf0a070fb54d285bed9c4f65ee3bbc723e9ac0b8f8f375972cd17a150865d323b8e6e17e4befb12889f2f039c6d363295d318d7edbdc43eb8144d9b9cd73bac0f5812014b47cc05fc669cb45b8507dae7d9cf2e6a97d2b51abd7bc427e32a40ca5b398ee9a59f219810ac31843c071f2cd1917a1e1fc4087f6c028c93f25472e474ae9841ae5ed719d98bbec4e1a556fad6c8c280b34b017c0c0bae8a7b73708719f6ee5b2b8d623e9303dc3a37212d30ed9696ddc4bc52ab3e14cb72f7f9ccb723389d08d9fc92bf996be3b04d13f84b34007605cfc06b582df926700e7dae0ce23480eef2e45be83aec7a7c3dec4d7667c40d63683e1c3d71ae3e45871ac3d20f44c29f96e2106bdfdc14648cb10e26d500c456cdb820756bff9cb3a9fa076e4d2d475f70721f58f8e7940f3392b667d2ebecdf5946bc34fe0f63796916f8599197342b29b6787a68b669de063e9f0c8273f65ba15fb6289c7e279d40d86791efe79ed7472341804cb0827f037a5125524676707feaeba4bb3a25d4227a73e0d98f29dd4e5f41db44c52ef31de0160f6692ef0beff0c10c5689847e4f8fa2105dd4418e4b9e28c0017f64a240fc0b99aadafdcad96e63664490a7fdc5b87ea0306282a3426d46d55e7086d612b58d1abf5542c2df970932f801764bb4c07c7c8260a6bd51bf801f31091f277198ba492eea93b8e96befa87b25a9e902339ff5b6d95a7fed18244ca0887e81b4a951111de51722511eda91987a6663435edde790c182d2b14057399b9f8f2196c0f3f38c9fdf5f086396364af96b134ed9ef801e8e315ce9226e8996a6a438748a32fc2fed5550a3455dc385f88725325b2990adf26e4a2d271d90ed93dc0a5908fb513efa772e0ea0960f98ed0108dd35b6e0946a2b346c92738ad4bed7930b550f47f9b17de7a28c175629e062062ec9ef6e2168dd37d7f4ec27a90ae5098529777ce08b3ed96000b9e63bc6a648cd81c766d339c4a26afb0673127514e405e4e54f32aa81a1684aedb3d7eb03792a849a01c95897f121b6b1e2beb7c558f10bbb534445e15908523b8c2ae0949a9be21fd3401c45bf464ba983ac585fe10b2f648d8b4cb61e3b3fc462606bfa757b81617549baeef01ee3dd74fc7c2ab4773ca912e807c651921d988432c10f9d9e44ccd5270d8dd243634cd022c476a8009c4f57452bf19a9a0560df38d4eb2c53385d4140f18dec33b4b13da09a5d13d74181ff9171483c034e9c89908a4685056176487e8659e8a12ef98ef72cfc349b949c89cb804a857b28c67199373840a904aea1de2edda79e1a077f0c92bf6844ced672e118c37f968e1d88a6d0a825e1edbb66647f6386fda2810597be46a9c31ea61aad49aa438d559fc2ae384a375e79c5bedf5b87cf01a926327806df205941930094b96387e1e2c3076b423515e8931c182786d32df830133d0b8f82d497a67bcaae3de61e2da9b2ed145355249989d095ef0df0f98c821423d3e7420c2a089b20cb8c7dcd872816d67573c7df74f4b82c738ec41810123cca8e52e88136588efabfbac5773d330cc8f6cbae78dc9f9105309fabdeb3bf520168b6569fd5a54a7a265813de0a0d464ab707fea071b52912c01343fa7c5a8737281fabdc46f85403e85ee5624b3764438862404b0e8a15bb17fddd33a8eab25d173e70adcbdc01dd8f337e80edfcde8c7893b8f1c46d5e83655063f1a6b41f0b1b82da012edd3efa61dbad712793b119f298c623df7afe3a85d97e16d601df748185cc568c6dc0bf705c43295b18004f13db0c0dea49b0b56871f03a7cce0a6c12504cbb3f5f0ffca4665f332db1164e03b2d74f565e0d4f0472e05019341cc56228375b097fd9033f70af58447a35ec0ed6606d91c40a6478637d9e84390ad48d3bccb8eb3047fd7154e8cc6b4c9e66aa22ec8363562cce1705790bc3e7b7b82055adb9a8412c1c52e7bee61e7722b36d622bd121361b9435154832c2e78242c6e2bb75dd1bc712198764d61715dfbaf838bd492112ce7b10763029c697088608fe0b40e75ee15ae60897783909c9ea32036ac4e6281d41cf1c1fb1359e397e27d5a78f33466deff5ae8c663f433daf956208e063a526bd80bbc34e9f2122a946efcd62b87b03cabbcf5ef93e9d7279abb9c6765a3b0e9eed4d04e14462980ce1d24450dcc0bb92ce2cf187c99a56b03cbb762ea8fac6737b07ed5dd6afb6ae0c495c9b6efc79ba98aeb66ea6b9f6cafead6095d4cf3db85ec740b0016aacaef2edf6b9ae25c49e1ddbea5f8147417617c250b44c07496f834582e0fd7e89aaf62df78329df21da0bfe23a7b475d4cb0c767a464379d61c2a42e14b68329af59aaf6f55dabd57e620b2e2d05ad8bef7b68dc2306996473aa1dd9f74e854df6d0ce1b9f4a2af0d8e36d5ed6e5cd25ffe52b677e7e0786412fa92e74b378c0a31a088a33f6a30a2449ae3fb2abf7be8f085257619455d582d0238a809c0c77a66cf403e4ed8b7a80e1b651e0e860364ab0b863adcedcd361ac7980306e3f1fa8ab71c6791525b199dd26bcef1de22ef11a09ac408be3a4320e2311d973be8a5723317bda50be6f4284f297914f087c8a946d36d3b156c37fe9317c48c6f862d7750ca03ec03948eae15a2f19bc901b9bf89fefbe1025edb2d0f0e16672d8bb453c7637e8f145c04edd6e379b09114cd8c5cce7d4de2362e254cec4f3ddbd13a37f443d183c51c7c168dda9a25c59e1fa9cbfb1c001ae422cf499e51660965ad4b328346ad60b193b98f89a90bc186bb8a8ff9641d4ace7d2593b0e0b155148b7f53ff6f1f290d95b6f9b87805c25a3f7794cc5ac47685c5d759e216bd1142beaed3409b54340c6f71b5670ec01e9f82739e8d895f61a633b8844c8ee4a58e8a6caa17c7223ace271d235f113d0faddb2d8d22e14eb96f9de8b9f21d048f17a016e7482af74f2b2938cf6e975cdb79973ad43bf7204a31a374e31278193513310e98143625b71937f3cdf2100329e200d93016405e2711337bfc1a8335fe620e9b91ce4fd7a1bef0a9590095e001843bf10f3d92268adacf7ff5c3404f5f48c2dad5b869eb4a5bf1c7d4025af5f7d19c39e454d9a65303d5daddcd8b9c90714c1196c2b4cb26de8240ab34fdd2ae4adbc40e833892b5a92117ff126aa7894a31b1b8877d8efc6ba88924b75795262adf97f5ce46b398ff29c0f8da03e1375d4fda2603213581cd6ce58a3bb27196d039753c957105ea7c47104e55dcf715fe0d8f5458812b0e6f356a8e72bbebb7058cdd2321ffa79a9ee121af0aaa48c91adf7bb630614b7e5bb337ccb51cdd7f7708263c5e626f55a8582c717878582456e0677a138ad0d7f340bfda0221fe1d9abf3c95d3f023f2ed34fe8cd0f8f4f4246db8f698a792ba41af05e7ca0b6258ed74af3555d60d11e5dfd3da7698d1c8a7f76f08cce39d0d7f021fa96fd831d727f109ad42f47f58815985de998ec97b2448ec03e841dc3ae1b1eb7dce69549d4a30d51091a4b729010c924ec29b2b5e629ea2288c124ceeb997f7fb78c2fcbb56d68d7f36d45fc42a91f47673f532666161d3dbc7520ccf1415b79a9200c97f57061bd543043b19a39db684dba2bcd6431b6cf88343d1b67e36d79af8609d7ed0899c88b975ccfa8c95c81a6f2310ff4284e0dd934128b43054dada280f6da30991734810f5d8d144320d1ae2722e1f3d26dc67d7b2967bc4190e93803996f8a6c97ff40472ec770bacc40c69e7c78da70769545cf52af21a0b575e9d0d08a2d051fadad7e66001582969f805ce9a79f9045cf85f4d26383b1dae4272d3734b60e1cbaa00ec2dcfb1f3e63121880e450835891de468ab9890742777ef9cb8ac7bfd7902434669ee6e5dad05010467b7ace5c2a35f6945761aaa6692e4a29daf9a53ade0bab39d27be388dbb3cc821447d30ac46e9211ebab6f265f6d069ec03029a4627b46da510a5eff385252f903acc699dde8a0e2a1a9ce349ea81ae5107b20829ef3116f87ad89535e9049fe9e7af82412305477137a216b98072044a3adfda7aaf2346d928def04db5de0a47cbf3e4b877694676a53e29bc48cd5309fe59b26371d8dc9d13c3d568636f774e9505351ed77630815cac753a37c7559ecc1a852a8b530490c9d33bbb6109e6d722814b072b3c2365bcb590f51e15e34e12821f41ba5acea3ce91678f26bacbf8c92bc85cdf35d1c4210f71cee8531fa5a80445ca5c0e075a99cd8e01f76fe491dd1933f411aad501aa9e74457810635c552b5c1b187a6c7b2a55ed85dc2bb66b44a6095c7ac458c01c29dee1fc936ea0483686deef3a687aa0143bd1fe859ae5104cee9d2f6991a886c1906cc1ee7acdda6ba1792f8242382b272e320b86ac0cb3a55530b6027d05b112d091aeab015a40be3d0177f8650c9cc9968d2c75a46bac9cb2b541013016ee3e968be0b5a78a9ed20eb9fb7ba5601a43f4ad98eb89294c1ac5abe6b4a993"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}]}, {0x1274, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0x66, 0x1, "becc7bb9c01dae16e4717789e0b3f594182014f4a9efc2aad89143028c395e86186df14a67e89ffb0f5f51c39f93aabc61512248cfcdd47d38d01aad4db06e99275239fa74a424ed9e057886612e140ecbf80bd759d4076c4a47abdd555a88547b66"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80}, @NL80211_PKTPAT_PATTERN={0x6a, 0x2, "f127721010100384a1b3a87ec0a4c257e6010b143bb2c09b3e47610ec5f1e176d28016e46f966dc5563179c02e45d998c8b852d68dc116ae235ca6075336ea699fa4c3ea9f8bcd76cc46d8706b83ea991620c28f2e8d5d9661a86d47e3da6aaea640bbdd311b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7f}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_PATTERN={0xe8, 0x2, "66ef57e636b5b0c3f4ee614cc85c197cc1b63fa2453cc783464df66ca2b44a0f5e43b83e400d747400d005ff2774adbc444a9cc097fcdce297f977d23c4b83ca07c501bc14fa722731fff6b0fbdc9c6e29b1fad636cf40f0e7506a2e35241e7a0012a27c20b75b4e1ee1684c6240ceedced23bb645323be3b942efc59ac8d6b25de1fccb1881d5872de7641fc4a1aad0b12022b5d70ac1db995b358cc62c6e35b03799d6c2d45c471ea657d3cc74ca86e668f625d783c5691d867cab049fe9bacc6ef5425b080bc3bebf15ef34fc64c3dc74e281786c87d39e28c3b2b5e18f7d31dcfa97"}, @NL80211_PKTPAT_PATTERN={0x3e, 0x2, "a800acbbdccf00a05c4284f353f80a3b239e35e57935bd6d4915fe415e1548152d96dbf22a4e042d6f2c377627ae96ca41542b1e5f9c7cba8449"}, @NL80211_PKTPAT_PATTERN={0x50, 0x2, "8720d41aa54b6494e8370a3dddf0f1667557275a4802369e9ea6ee88c6775ae06fdc56671fb2e0d910dda7d483290f862a46910b78d17ca018a48688fc8a4f89a337b066f0f21fd7d9e5d7b3"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x94, 0x1, "bdd29b6605f565751004e4955a5cf8af8fbea2c136a00d8765de30dbc046f6bc4be222b3060f77dc56448a70291d36d3087199681264c950e6a7583dde62b952329ef999c5bdbe310065d0e07b5db50e98ce53ffc22d7569407945a145f9e9f4ac902e0f6dd4f21365e6776c429ed42142d22301d604d7d950987099328cf4efe3759f9f73126e0072ef87caa9dbb51d"}, @NL80211_PKTPAT_PATTERN={0x2f, 0x2, "25256be0126ef9487a6db00ad4a5b9554698fcc6fc4f8c849591f7d5ae5e50730686b68050f7a49da2a3cf"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7ff}]}]}]}]}, 0x270c}, 0x1, 0x0, 0x0, 0x20850}, 0x20044850) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0xd80040}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x64, r4, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x2d}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x80, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x2, 0x4}, {0x7, 0x2}, {0x5, 0x1}, {0x81, 0x2}, {0x91, 0x7}, {0xff, 0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x6, 0x5}, {0x8, 0x5}, {0xff, 0x4}, {0x92, 0x2}, {0x5, 0x3}], "a0474bf068ce13f5"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x8, 0x6}], "c817a94fc8dd975e"}}]}, 0x64}, 0x1, 0x0, 0x0, 0x88000}, 0x0) fcntl$getflags(r3, 0xb) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003900), 0xffffffffffffffff) [ 2301.463323] device wlan0 entered promiscuous mode [ 2301.468293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2301.471455] FAULT_INJECTION: forcing a failure. [ 2301.471455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2301.473845] CPU: 1 PID: 13246 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2301.475250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.475610] device wlan0 left promiscuous mode [ 2301.476943] Call Trace: [ 2301.476971] dump_stack+0x107/0x167 [ 2301.477000] should_fail.cold+0x5/0xa [ 2301.479965] _copy_from_user+0x2e/0x1b0 [ 2301.480794] input_event_from_user+0x1dd/0x290 [ 2301.481734] ? input_devices_seq_show+0xfe0/0xfe0 [ 2301.482710] evdev_write+0x257/0x420 [ 2301.483464] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2301.484513] ? security_file_permission+0x24e/0x570 [ 2301.485521] do_iter_write+0x482/0x670 [ 2301.486302] ? import_iovec+0x83/0xb0 [ 2301.487067] vfs_writev+0x1ae/0x5e0 [ 2301.487794] ? vfs_iter_write+0xa0/0xa0 [ 2301.488602] ? __fget_files+0x26d/0x480 [ 2301.489395] ? lock_downgrade+0x6d0/0x6d0 [ 2301.490224] ? find_held_lock+0x2c/0x110 [ 2301.491060] ? __fget_files+0x296/0x480 [ 2301.491861] ? __fget_light+0xea/0x290 [ 2301.492660] do_writev+0x283/0x300 [ 2301.493374] ? vfs_writev+0x5e0/0x5e0 [ 2301.494145] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2301.495106] do_syscall_64+0x33/0x40 [ 2301.495875] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2301.496914] RIP: 0033:0x7f701ebafb19 [ 2301.497677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.501433] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2301.502985] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000039c0)={'ip6tnl0\x00', &(0x7f0000003940)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x7, 0x3f, 0x36, @empty, @dev={0xfe, 0x80, '\x00', 0x41}, 0x1, 0x10, 0x1ff, 0x1}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003a00)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x7c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000040) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000003c80)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0xb0, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x30, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) [ 2301.504461] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2301.506067] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 04:33:43 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f0000000100)='.\x00', r0, &(0x7f0000000140)='./file0\x00') stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) openat2(r0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)={0x10983, 0x0, 0x10}, 0x18) 04:33:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000580)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x200) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="667265657a65722c00829c6af8798eca3f604a4bb83928018ebae30d9e0f60959edc753bd72e2183"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x0, 0xfdf, 0x2, 0x3}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) lstat(0x0, 0x0) 04:33:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = gettid() kcmp(r2, r1, 0x2, r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x7, 0x9d, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x2, 0x1}, 0x8880, 0xfff, 0x4, 0x0, 0xffffffffffffab30, 0x2000000, 0x1000, 0x0, 0x2, 0x0, 0xe11}, r1, 0x8, 0xffffffffffffffff, 0xb) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x5a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) [ 2301.507622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2301.509140] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2301.522136] device wlan0 entered promiscuous mode [ 2301.527609] device wlan0 left promiscuous mode 04:33:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x298, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:33:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0xb04, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x650, 0x59}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x40}}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x9c}, {0x6}]}, 0x10) [ 2301.622697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2301.638971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:33:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) socket$netlink(0x10, 0x3, 0xa) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x9, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC=r3, @ANYRESOCT=0x0]) 04:33:43 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 70) 04:33:43 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f0000001300)=""/114, 0x72}, {&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/50, 0x32}], 0x8, 0x44e735ec, 0x8001) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x4000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) [ 2301.821210] FAT-fs (loop6): Unrecognized mount option "" or missing value 04:33:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:33:43 executing program 0: readahead(0xffffffffffffffff, 0x7, 0x401) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x8, 0x10000, 0x2, 0x9, 0x1}) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2e}, @void, @val={0xc, 0x99, {0x8, 0x70}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) r5 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x800, 0x4, &(0x7f0000000500)=[{&(0x7f0000000200)="08a16ee1b1a8894daa4b1bdb1958f65efe44e97a25cfc1c85349b605a08f50c7f2e071c2a2c9a9be87545ff6a098e274575a01676d66a66f37c9ade1617b4e70357905b72a299eb1a9a82a2e8eb3eeb1e2f26fe3025b91214cd88b91f29faa17eddaaa26ad01fecf80eaf657a9f483f9d76d7f1f3d8f084b7cdf737384b3d97554d146173709b3ef12fc4712bf666d94d1f92eb6349cdda43310e8ccc628f5aac8cd64a1424b71b02a1eb3c3d6cdab3d7a81a1d03bf46f392ee02961bd5b344d2a7c7737c39fbc24c99ebf023fdae10bd796306670a40808c49dc79bbeb27fb6b1a77ce7d42c41bad7720a13a75dc053586991610419", 0xf6, 0x1}, {&(0x7f0000000300)="eda0de377bc032918fac4b6bc4f257d7f65e6608c9c06c8e4954e2b5e2787231b11de65f74022a8048e8f40f3cae11a15e736e673aa7682a90a6e4960ee838ae455b", 0x42, 0x40}, {&(0x7f0000000380)="e0fa3fd6d9d9dba09ea49e118c111faa64f207", 0x13, 0x1f}, {&(0x7f00000003c0)="9592b180dfde5d930616a6f5c07141a54932fc70647d105da12bf3e45f49793396d4c2e801217c493d4d5f7023789c6401bd166541780616df34e6d796bdb87aa2f2594c3ef0312d111ff48f1f9ec1eb1fa66ebb75651e395f00c853d0372c43384b06f3575132360deeaeb4bc2bc6d0ed10d2ebbc4535150cf97f7d82e5e3cb24c17c42ad74d238294e6cc9387e18c096a41f776629b76b027c63011d50d873cd4ef34f7c733917e2c91b6edf9247d43413d377ed74af080c6f7a29dc30", 0xbe, 0x3}], 0x8800, &(0x7f0000000780)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d5554432c6f626a5f741ef835979c205b0c08557970653d38adb9de82bf2114673f87212fa56d65ed6f72792e737761702e6d6178002c66736d616769633d3078303030303030303030303030303030322c00"]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000480)={0x0, 0x3, r5, 0x5, 0x80000}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r7 = creat(0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x77, 0x20, 0x7, 0x1, 0x0, 0x2, 0x3e, 0x4, 0x11b, 0x40, 0x151, 0x3, 0x9, 0x38, 0x1, 0x369d, 0xffff, 0x1}, [{0x6474e551, 0x99bc60d, 0x100000000, 0x8, 0x10001, 0xffffffffffff4a09, 0x2, 0x20}], "74063c3563505f3cc4364e87b3f384835d883a73", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x68c) fallocate(r7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, r7, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f00000004c0)) [ 2301.854113] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:33:43 executing program 3: chdir(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) lchown(0x0, 0xee00, 0xee00) dup3(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) recvmmsg$unix(r1, &(0x7f0000004f40)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000580)=""/144, 0x90}, {}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000740)=""/170, 0xaa}, {&(0x7f0000000800)=""/127, 0x7f}], 0x6, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000940)=""/66, 0x42}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/210, 0xd2}], 0x3}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000001b40)=""/40, 0x28}, {&(0x7f0000001b80)=""/26, 0x1a}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/106, 0xffffffffffffff56}, {&(0x7f0000001cc0)=""/128, 0x80}, {&(0x7f0000002e00)=""/114, 0x72}], 0x7, &(0x7f0000002f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000002fc0)=@abs, 0x6e, &(0x7f0000003340)=[{&(0x7f0000001d40)=""/35, 0x23}, {&(0x7f0000003040)=""/7, 0x7}, {&(0x7f0000003080)=""/147, 0x93}, {&(0x7f0000003140)=""/121, 0x79}, {&(0x7f00000031c0)=""/208, 0xd0}, {&(0x7f00000032c0)=""/91, 0x5b}], 0x6}}, {{&(0x7f00000033c0)=@abs, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000003440)=""/172, 0xac}, {&(0x7f0000003500)=""/17, 0x11}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/192, 0xc0}, {&(0x7f0000003640)=""/165, 0xa5}, {&(0x7f0000003700)=""/41, 0x29}, {&(0x7f0000003740)=""/86, 0x56}, {&(0x7f00000037c0)=""/226, 0xe2}], 0x8, &(0x7f0000003940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000003980), 0x6e, &(0x7f0000004e80)=[{&(0x7f0000005100)=""/159, 0xffffffffffffffd1}, {&(0x7f0000003ac0)=""/117, 0x75}, {&(0x7f0000003b40)=""/215, 0xd7}, {&(0x7f0000003c40)=""/26, 0x1a}, {&(0x7f0000003c80)=""/241, 0xf1}, {&(0x7f0000000880)=""/63, 0x3f}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/83, 0x53}, {&(0x7f0000004e40)=""/10, 0xa}], 0x9}}], 0x6, 0x20, &(0x7f00000050c0)={0x0, 0x3938700}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = fcntl$dupfd(r3, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1a, 0x22d, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @str='-$^\x00'}]}, 0x1c}, 0x1, 0x8100}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file1\x00'}) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000300)='-$^\x00'], &(0x7f0000000540)=[&(0x7f0000000380)='-$^\x00', &(0x7f00000003c0)='$\x00', &(0x7f0000000400)='-$^\x00', &(0x7f0000000440)='-$^\x00', &(0x7f0000000480)='-$^\x00', &(0x7f00000004c0)='-$^\x00', 0x0]) [ 2301.860703] FAULT_INJECTION: forcing a failure. [ 2301.860703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2301.863226] CPU: 1 PID: 13285 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2301.864635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.866309] Call Trace: [ 2301.866847] dump_stack+0x107/0x167 [ 2301.867589] should_fail.cold+0x5/0xa [ 2301.868379] _copy_from_user+0x2e/0x1b0 [ 2301.869190] input_event_from_user+0x1dd/0x290 [ 2301.870169] ? input_devices_seq_show+0xfe0/0xfe0 [ 2301.871156] evdev_write+0x257/0x420 [ 2301.872095] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2301.873158] ? security_file_permission+0x24e/0x570 [ 2301.874374] do_iter_write+0x482/0x670 [ 2301.875172] ? import_iovec+0x83/0xb0 [ 2301.876110] vfs_writev+0x1ae/0x5e0 [ 2301.876848] ? vfs_iter_write+0xa0/0xa0 [ 2301.877801] ? __fget_files+0x26d/0x480 [ 2301.878599] ? lock_downgrade+0x6d0/0x6d0 [ 2301.879444] ? find_held_lock+0x2c/0x110 [ 2301.880314] ? __fget_files+0x296/0x480 [ 2301.881140] ? __fget_light+0xea/0x290 [ 2301.881941] do_writev+0x283/0x300 [ 2301.882668] ? vfs_writev+0x5e0/0x5e0 [ 2301.883485] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2301.884548] do_syscall_64+0x33/0x40 [ 2301.885361] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2301.886471] RIP: 0033:0x7f701ebafb19 [ 2301.887281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.891259] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2301.892931] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2301.894482] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2301.894495] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2301.894507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2301.894519] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2301.910262] FAT-fs (loop6): Unrecognized mount option "" or missing value 04:33:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x6, 0x0, 0x2}, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) [ 2301.911190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 04:33:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:33:43 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 71) [ 2302.149711] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 2302.167934] FAULT_INJECTION: forcing a failure. [ 2302.167934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2302.167955] CPU: 1 PID: 13302 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2302.167966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2302.167981] Call Trace: [ 2302.174293] dump_stack+0x107/0x167 [ 2302.175019] should_fail.cold+0x5/0xa [ 2302.175770] _copy_from_user+0x2e/0x1b0 [ 2302.176577] input_event_from_user+0x1dd/0x290 [ 2302.177465] ? input_devices_seq_show+0xfe0/0xfe0 [ 2302.178426] evdev_write+0x257/0x420 [ 2302.179167] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2302.180238] ? security_file_permission+0x24e/0x570 [ 2302.181250] do_iter_write+0x482/0x670 [ 2302.182003] ? import_iovec+0x83/0xb0 [ 2302.182744] vfs_writev+0x1ae/0x5e0 [ 2302.183433] ? vfs_iter_write+0xa0/0xa0 [ 2302.184199] ? __fget_files+0x26d/0x480 [ 2302.185031] ? lock_downgrade+0x6d0/0x6d0 [ 2302.185827] ? find_held_lock+0x2c/0x110 [ 2302.186667] ? __fget_files+0x296/0x480 [ 2302.187441] ? __fget_light+0xea/0x290 [ 2302.188259] do_writev+0x283/0x300 [ 2302.188938] ? vfs_writev+0x5e0/0x5e0 [ 2302.189737] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2302.190670] do_syscall_64+0x33/0x40 [ 2302.191432] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2302.192421] RIP: 0033:0x7f701ebafb19 [ 2302.193139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2302.196756] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2302.198212] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2302.199842] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2302.201309] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2302.202671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2302.204085] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2302.209544] netlink: 'syz-executor.5': attribute type 10 has an invalid length. [ 2302.252140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2302.275745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2316.188728] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 04:34:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:34:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xef}]}, 0x1c}}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) 04:34:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat2(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x700000, 0x10, 0x9}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x105142, 0x0) acct(&(0x7f0000000300)='./file0\x00') link(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file2\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) execveat(r3, &(0x7f0000000340)='./file1\x00', &(0x7f0000000400)=[&(0x7f0000000380)='vfat\x00', &(0x7f00000003c0)='vfat\x00'], &(0x7f0000000640)=[&(0x7f0000000440)='}+:\x00', &(0x7f0000000480)='vfat\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='#\x00', &(0x7f0000000540)='vfat\x00', &(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='vfat\x00', &(0x7f0000000600)='\x00'], 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)=""/167, 0xa7) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 04:34:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000340)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xffff}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x65}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24044050) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_IE={0xd, 0x2a, [@challenge={0x10, 0x1, 0x41}, @supported_rates={0x1, 0x4, [{0x6}, {0x2}, {0x18}, {0x12}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x4c}}, 0x24004880) 04:34:05 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x17) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x40) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x0, 0x400000) io_submit(0x0, 0x5, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000080)="55ad17d4588740017ac3caafb3534d8e00018a15af025a5f6d30df7362dce2e622cbd371b126b71c46dcf4e24bc383e8626bfe37a2d7bb645883d822523a6a109007bfff3a8c8705dacbf19a9dba5351b222adcba66516090b3c2c421219ceb0a327beb17dbf13cbc54cf30b71cdde2abfef0309df3ab13682f033b9b1e0b1cea1f98d6e6a6b906279ea90a96e6b08c07efb262b897b16c74029197936481522dd0b0a5b4cf882e9e858249fd840ed9d87836e69bfd7f3d2", 0xb8, 0x6, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f00000001c0)="8290db47a82dd98ec2df40b0abe9f3e429af13ae0384e506102a1b2aafeb02711d67736e22a68f0def37", 0x2a, 0x99c, 0x0, 0x1, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x20, 0xffffffffffffffff, &(0x7f0000000280)="cb08d56d62ec9b8809c69e5c1f95988f5a24600b872bf2010b91a56cedbacc53912c6bd218098ce5c7ea12147a883305036262a18260b1cda511ae0fa08217f261307035fa7304ef55211b5960ca26e5edead0dffa43ba294ff9c91874449303770f011b651cd0cd01fc41f63b05e958ef7e1be9719286b3c5603071e3d37001cb4b23b0457c06549aa57c192102b4cad814cdf730eddd16a65ce103c3e601f3da19ff019b015d0fc241919d15c9df777ba785cdcd85e579bb1f19c8", 0xbc, 0xfffffffffffffff8, 0x0, 0x70e3b260cc972096}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x800, 0xffffffffffffffff, &(0x7f0000000380)="bee68a", 0x3, 0x5, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000400)="5e5e8ab212726aa04e9bc112db11c5010a70a85830b4a4f036209af7e45f97135325d3135fd4baf30295a6546f471a3a84709fcdaefbefafb19a5bc43b32a47ae2f745ad6406491338a34851e75be770763952c26f658394f6152155e6e7cf01b1df846e994e946d4cfdc4707d8a4d9f40a452143434cc73f4c0adbeb64fd0aea4e28a8cb750bd45a2c86910ac9509f2f1fe05d590f64ba74d2814e684b1652eb568bd3b6238ae5c11cc886b7fdaae411cf4933549b0243b1acc9dde9698b3c7cf9f465d0dba236cfc2a89d89fde3bf717704fdf5cf86701b9a604fa2c4273e316a39954784c8bf811440f124f2eaafb", 0xf0, 0x3}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pwritev2(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)="2fdc93a0710c8e36f8787bca6ac570fddd82e2687edecbffc0c194274d0234bf58be0f7dbc5c408ee0054394c570136d45e20f2b881cd7e775c43ad4036f0f733c8ac0a7a6ef7feea303c0c61b531b0c2718b2784ba7b5af0aed8d5b95", 0x5d}, {&(0x7f0000000600)="7f77292511ea0c998c4fa0fef269b12b49dedecbac766a1dc019945e06d42846e954d31006840ded681d625651d70a93c3886b226233ff4894e5a1c9688174b0ab9753188647b87f1d62fe55dae4fcaf13de26501e0ff852197d25375bc2d8e37ff0a246ea89b8f0936ee8cc2d9c6cab10e006423a20945c634d02a735c026fde10d4bf7e39ac94256623154f248d3f951218414c8418db7e3ce7041a09fb4ed00f30081806da1c3661485000a286eb51ecf0b9000992f98f713e2dc54c2b4563667a8f35475aa76e0c37f7ab20f52dc28b5ab6253db5c0bfc84fe261ec4ce6ec5b0a79cc0dbdd130586e3", 0xeb}, {&(0x7f0000000700)="ab08dd2de81f315902f15943525b882d2e2cd128222321a4d76954fb24adf68d55a08292ca4ef92549e153805236a546d9f94583624f6a7a25650d70cb2ebacb105aeb6436cb55b4e813377c56069ea3bf667a33fea47524a364cc29dbb6eabe675c80ac48329df5e106148aaffb1a4b6287fcb21ecba3", 0x77}, {&(0x7f0000000780)="1f8d72e6e41a7827b32e9485d0774108add910b0363e4801b502d2054710b18aa70a9a2abb1c44d8620fc3b4", 0x2c}, {&(0x7f00000007c0)="01f0b274fedc5dc8ada7923d78a7fe8b3ddb1ee93cde7e354ca0c7c2a0c7de7b5ce6d211af89e2c84df016e67bdfe0f62800f8cd89e04feff6ca197d4b8da9edf701d9d5c48ac55f8086237eeb5409621cb9fb93ffc542e549f49fac4871fe5c78dce6774390c2d4dbe470cd5a2bc090fa6ad40ebc20f92b0bafb490a001eca4982be82371b02a4cae5e921087ab3ab42ae6971418a6b9b41fdb54aeea6c42619b294744ce9eca3e4ce4ab0cddbad5a38b16f7427159baafe67e2dac4a4b2bd4ae52598571282ba9e6d4a9d25a1caa8e6e56b489a165cb76ab65da7eca410d500446b3ec79bb0d61627c873e9b09de65aa26102f628841d10c8a202534", 0xfd}], 0x5, 0x10000, 0x161, 0x9) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000940)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000980)={r0, 0x800, 0x10000, 0x3}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r3, {0xffff}}, './file0/file0\x00'}) write$binfmt_elf64(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x62, 0x80, 0xc8, 0xe2, 0xeda, 0x3, 0x3, 0x9, 0x4d, 0x40, 0x3df, 0x10001, 0x8, 0x38, 0x1, 0x20, 0xa9b7, 0x6}, [{0x7, 0x7, 0x100, 0x0, 0x3, 0x3, 0x0, 0x2000000000}], "ea2ee73ec4bb2fc82ae94467735d7412e1a644cb674cc7b3539450f2f19c267c16ce0547a74c4088c49b59dcac25704bffbec1138d4d9cb7e7c63fdd73b2a513e922994561098eaa99868fcbcd6f332ee73b5f77df15e3d1c7de256b887ce8db7ed67c94f843da01fba0314dfee464102d5b1f8edeaee0c7c9c57fe358dbf6cd310b25d50b6642e084df45b91f9c65d4671bb2d4c6cfacff95e80b316ea7959d116f64344d670991", ['\x00', '\x00']}, 0x320) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x2, 0x109) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000d80), &(0x7f0000000dc0)='./file0/file0\x00', 0xe, 0x9cff9341d3b923f2) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) mq_getsetattr(r1, &(0x7f0000000e00)={0x3, 0x9, 0x6f16, 0x6596}, &(0x7f0000000e40)) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000e80)=0x7ff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'}) creat(&(0x7f0000000f00)='./file0\x00', 0x84) sendmsg$nl_generic(r4, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2102}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xf8, 0x25, 0x8, 0x70bd25, 0x25dfdbfe, {0x20}, [@typed={0x8, 0x54, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0xdc, 0x74, 0x0, 0x1, [@typed={0x36, 0x69, 0x0, 0x0, @binary="1dfebdcafe1c14e433b09734263c0c80965eda9ebb1a66d313890312baadbf68da40397535dc5d66f20d7b5e62b30654eb44"}, @generic="fe3fd02f8c51898c7946fd978df97c4b59912598cf29232a2e0b0f2ae97583fda4a7fb1139a981752fe64f94331cbde4f40dd0a68d151c52574ec67d803fa548142c07eedd8457ff1d18176b73a36abaacbe8f35b3ed89ac4ce4405637369d0510152d24014d79e0810d25aaf97326ca429e9219c311c7cb31ef4c71e6348df870363bc6cbbac1345b5634768670bba5b6967300ef3b916b", @typed={0x8, 0x85, 0x0, 0x0, @fd}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) [ 2324.120644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2324.128895] FAULT_INJECTION: forcing a failure. [ 2324.128895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2324.128911] CPU: 1 PID: 13319 Comm: syz-executor.7 Not tainted 5.10.154 #1 [ 2324.128917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.128921] Call Trace: [ 2324.128939] dump_stack+0x107/0x167 [ 2324.128960] should_fail.cold+0x5/0xa [ 2324.133923] _copy_from_user+0x2e/0x1b0 [ 2324.133940] input_event_from_user+0x1dd/0x290 [ 2324.133951] ? input_devices_seq_show+0xfe0/0xfe0 [ 2324.133971] evdev_write+0x257/0x420 [ 2324.133987] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2324.134001] ? security_file_permission+0x24e/0x570 [ 2324.134022] do_iter_write+0x482/0x670 [ 2324.134041] ? import_iovec+0x83/0xb0 [ 2324.138250] vfs_writev+0x1ae/0x5e0 [ 2324.138643] ? vfs_iter_write+0xa0/0xa0 [ 2324.139063] ? __fget_files+0x26d/0x480 [ 2324.139497] ? lock_downgrade+0x6d0/0x6d0 [ 2324.139935] ? find_held_lock+0x2c/0x110 [ 2324.140383] ? __fget_files+0x296/0x480 [ 2324.140819] ? __fget_light+0xea/0x290 [ 2324.141240] do_writev+0x283/0x300 [ 2324.141622] ? vfs_writev+0x5e0/0x5e0 [ 2324.142032] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2324.142548] do_syscall_64+0x33/0x40 [ 2324.142953] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2324.143498] RIP: 0033:0x7f701ebafb19 [ 2324.143899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 04:34:05 executing program 6: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x11) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000380)='wg0\x00', 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000080)="00000000000200000000000004000000000402000020000020000000def4655fdef4455f0100ffff53ef010001000000ddf45e15657a00000000000001000000000000000b0000008000000018000000c20500002b0200", 0x57, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x7fc}, {0x0, 0x0, 0x1000020000c00}, {&(0x7f0000000040)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x2009810, &(0x7f0000012b00)=ANY=[]) 04:34:05 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 72) 04:34:05 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file1\x00'}) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x1c, 0x17, 0x2, {0x13, './file0/file1/file0'}}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 2324.145857] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2324.145869] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2324.145876] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 04:34:05 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 73) [ 2324.145882] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.145889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2324.145895] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2324.154646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2324.166523] ------------[ cut here ]------------ [ 2324.166591] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 2324.167016] WARNING: CPU: 0 PID: 13324 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x5c0/0x750 [ 2324.167023] Modules linked in: [ 2324.167049] CPU: 0 PID: 13324 Comm: syz-executor.4 Not tainted 5.10.154 #1 [ 2324.167061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.167081] RIP: 0010:drv_bss_info_changed+0x5c0/0x750 [ 2324.167102] Code: a8 03 00 00 48 85 ed 0f 84 04 01 00 00 e8 e8 89 91 fd e8 e3 89 91 fd 8b 54 24 04 48 89 ee 48 c7 c7 c0 38 95 84 e8 86 bb 24 00 <0f> 0b e9 91 fd ff ff e8 c4 89 91 fd e8 ff c2 31 00 31 ff 89 c3 89 [ 2324.167114] RSP: 0018:ffff88803d25f508 EFLAGS: 00010286 [ 2324.167133] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2324.167146] RDX: 0000000000040000 RSI: ffffffff81298f33 RDI: ffffed1007a4be93 [ 2324.167159] RBP: ffff888046f20000 R08: 0000000000000001 R09: ffff88806ce27fdb [ 2324.167171] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888046f20bc0 04:34:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000016000101"], 0x20}}, 0x0) 04:34:05 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 74) [ 2324.167222] R13: 0000000002000000 R14: ffff888046f21b48 R15: ffff888046f21b40 [ 2324.167240] FS: 00007f4f5c71b700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 04:34:06 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x40, 0x6, 0x4}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129de2260ab5c4e128a28770600"/30, @ANYRES32=0x0, @ANYBLOB="0c009900ff000000200000000a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4000040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x200000be, &(0x7f0000000040)=[{0x9, 0x0, 0x20, 0x7fffffff}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) timerfd_create(0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) close_range(r3, r2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x5f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x203, @empty, 0x2000000}, 0x1c) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) 04:34:06 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x1, 0x22, 0x2}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) (fail_nth: 75) 04:34:06 executing program 0: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f00706879310000000005002000000000000c0005000000000000000300"], 0x34}}, 0x0) 04:34:06 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) read(r0, &(0x7f0000000180)=""/202, 0xca) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{0x0}], 0x207, &(0x7f0000000540)={[{@shortname_winnt}, {@shortname_lower}, {@utf8}, {@shortname_mixed}], [{@euid_gt}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4ac7, 0x0, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000900), 0x0) fsopen(0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x8000) write$rfkill(r1, &(0x7f0000000080)={0x8b6, 0x3, 0x2, 0x1}, 0x8) read$rfkill(0xffffffffffffffff, 0x0, 0x0) [ 2324.167256] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2324.167269] CR2: 0000001b31022000 CR3: 000000004e06c000 CR4: 0000000000350ef0 [ 2324.167276] Call Trace: [ 2324.167307] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 2324.167331] ieee80211_set_mcast_rate+0x37/0x50 [ 2324.167349] ? ieee80211_set_wds_peer+0x30/0x30 [ 2324.167377] nl80211_set_mcast_rate+0x30b/0x5a0 [ 2324.167445] ? nl80211_tdls_cancel_channel_switch+0x520/0x520 [ 2324.167476] ? nl80211_pre_doit+0xa2/0x630 [ 2324.167507] genl_family_rcv_msg_doit+0x22d/0x330 [ 2324.167536] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2324.167559] ? cap_capable+0x1eb/0x250 [ 2324.167598] ? ns_capable+0xdd/0x100 [ 2324.167628] genl_rcv_msg+0x33c/0x5a0 [ 2324.167656] ? genl_get_cmd+0x480/0x480 [ 2324.167681] ? nl80211_tdls_cancel_channel_switch+0x520/0x520 [ 2324.167712] ? lock_release+0x6b0/0x6b0 [ 2324.167731] ? __lockdep_reset_lock+0x180/0x180 [ 2324.167760] netlink_rcv_skb+0x14b/0x430 [ 2324.167782] ? genl_get_cmd+0x480/0x480 [ 2324.167806] ? netlink_ack+0xab0/0xab0 [ 2324.167842] ? netlink_deliver_tap+0x1c4/0xc40 [ 2324.167862] ? is_vmalloc_addr+0x7b/0xb0 [ 2324.167890] genl_rcv+0x24/0x40 [ 2324.167909] netlink_unicast+0x549/0x7f0 [ 2324.167940] ? netlink_attachskb+0x810/0x810 [ 2324.167979] netlink_sendmsg+0x905/0xdf0 [ 2324.168011] ? netlink_unicast+0x7f0/0x7f0 [ 2324.168050] ? netlink_unicast+0x7f0/0x7f0 [ 2324.168074] sock_sendmsg+0x154/0x190 [ 2324.168099] ____sys_sendmsg+0x70d/0x870 [ 2324.168126] ? kernel_sendmsg+0x50/0x50 [ 2324.168144] ? __ia32_sys_recvmmsg+0x260/0x260 [ 2324.168164] ? perf_trace_lock+0xac/0x490 [ 2324.168220] ? __lockdep_reset_lock+0x180/0x180 [ 2324.168238] ? perf_trace_lock+0xac/0x490 [ 2324.168266] ___sys_sendmsg+0xf3/0x170 [ 2324.168288] ? sendmsg_copy_msghdr+0x160/0x160 [ 2324.168317] ? lock_downgrade+0x6d0/0x6d0 [ 2324.168347] ? finish_task_switch+0x126/0x5d0 [ 2324.168372] ? lock_downgrade+0x6d0/0x6d0 [ 2324.168441] ? __fget_files+0x296/0x480 [ 2324.168476] ? __fget_light+0xea/0x290 [ 2324.168507] __sys_sendmsg+0xe5/0x1b0 [ 2324.168526] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2324.168550] ? io_schedule_timeout+0x140/0x140 [ 2324.168592] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2324.168619] do_syscall_64+0x33/0x40 [ 2324.168641] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2324.168655] RIP: 0033:0x7f4f5f1a5b19 [ 2324.168674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.168686] RSP: 002b:00007f4f5c71b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2324.168708] RAX: ffffffffffffffda RBX: 00007f4f5f2b8f60 RCX: 00007f4f5f1a5b19 [ 2324.168720] RDX: 0000000000000000 RSI: 0000000020000f00 RDI: 0000000000000003 [ 2324.168733] RBP: 00007f4f5f1fff6d R08: 0000000000000000 R09: 0000000000000000 [ 2324.168744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2324.168757] R13: 00007ffe897c61ff R14: 00007f4f5c71b300 R15: 0000000000022000 [ 2324.168794] irq event stamp: 1623 [ 2324.168818] hardirqs last enabled at (1629): [] vprintk_emit+0x486/0x4d0 [ 2324.168840] hardirqs last disabled at (1634): [] vprintk_emit+0x418/0x4d0 [ 2324.168863] softirqs last enabled at (1308): [] asm_call_irq_on_stack+0x12/0x20 [ 2324.168885] softirqs last disabled at (1303): [] asm_call_irq_on_stack+0x12/0x20 [ 2324.168895] ---[ end trace 1ea516ece2c1e052 ]--- [ 2324.282063] FAULT_INJECTION: forcing a failure. [ 2324.282063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2324.282080] CPU: 1 PID: 13338 Comm: syz-executor.7 Tainted: G W 5.10.154 #1 [ 2324.282086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.282090] Call Trace: [ 2324.282108] dump_stack+0x107/0x167 [ 2324.282121] should_fail.cold+0x5/0xa [ 2324.282138] _copy_from_user+0x2e/0x1b0 [ 2324.282153] input_event_from_user+0x1dd/0x290 [ 2324.282165] ? input_devices_seq_show+0xfe0/0xfe0 [ 2324.282185] evdev_write+0x257/0x420 [ 2324.282200] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2324.282214] ? security_file_permission+0x24e/0x570 [ 2324.282235] do_iter_write+0x482/0x670 [ 2324.282250] ? import_iovec+0x83/0xb0 [ 2324.282265] vfs_writev+0x1ae/0x5e0 [ 2324.282277] ? vfs_iter_write+0xa0/0xa0 [ 2324.282286] ? __fget_files+0x26d/0x480 [ 2324.282299] ? lock_downgrade+0x6d0/0x6d0 [ 2324.282308] ? find_held_lock+0x2c/0x110 [ 2324.282327] ? __fget_files+0x296/0x480 [ 2324.282346] ? __fget_light+0xea/0x290 [ 2324.282364] do_writev+0x283/0x300 [ 2324.282375] ? vfs_writev+0x5e0/0x5e0 [ 2324.282391] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2324.282405] do_syscall_64+0x33/0x40 [ 2324.282418] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2324.282425] RIP: 0033:0x7f701ebafb19 [ 2324.282436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.282442] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2324.282454] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2324.282460] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2324.282467] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.282473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2324.282479] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2324.344433] FAULT_INJECTION: forcing a failure. [ 2324.344433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2324.344448] CPU: 1 PID: 13345 Comm: syz-executor.7 Tainted: G W 5.10.154 #1 [ 2324.344454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.344457] Call Trace: [ 2324.344473] dump_stack+0x107/0x167 [ 2324.344487] should_fail.cold+0x5/0xa [ 2324.344502] _copy_from_user+0x2e/0x1b0 [ 2324.344517] input_event_from_user+0x1dd/0x290 [ 2324.344530] ? input_devices_seq_show+0xfe0/0xfe0 [ 2324.344550] evdev_write+0x257/0x420 [ 2324.344565] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2324.344579] ? security_file_permission+0x24e/0x570 [ 2324.344602] do_iter_write+0x482/0x670 [ 2324.344618] ? import_iovec+0x83/0xb0 [ 2324.344632] vfs_writev+0x1ae/0x5e0 [ 2324.344644] ? vfs_iter_write+0xa0/0xa0 [ 2324.344653] ? __fget_files+0x26d/0x480 [ 2324.344667] ? lock_downgrade+0x6d0/0x6d0 [ 2324.344675] ? find_held_lock+0x2c/0x110 [ 2324.344695] ? __fget_files+0x296/0x480 [ 2324.344713] ? __fget_light+0xea/0x290 [ 2324.344727] do_writev+0x283/0x300 [ 2324.344738] ? vfs_writev+0x5e0/0x5e0 [ 2324.344754] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2324.344768] do_syscall_64+0x33/0x40 [ 2324.344780] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2324.344787] RIP: 0033:0x7f701ebafb19 [ 2324.344798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.344804] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2324.344816] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2324.344823] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2324.344829] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.344835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2324.344841] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 [ 2324.356887] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2324.388005] Process accounting resumed [ 2324.411028] FAULT_INJECTION: forcing a failure. [ 2324.411028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2324.411043] CPU: 1 PID: 13357 Comm: syz-executor.7 Tainted: G W 5.10.154 #1 [ 2324.411049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.411053] Call Trace: [ 2324.411069] dump_stack+0x107/0x167 [ 2324.411082] should_fail.cold+0x5/0xa [ 2324.411098] _copy_from_user+0x2e/0x1b0 [ 2324.411113] input_event_from_user+0x1dd/0x290 [ 2324.411124] ? input_devices_seq_show+0xfe0/0xfe0 [ 2324.411144] evdev_write+0x257/0x420 [ 2324.411159] ? evdev_handle_set_keycode_v2+0x130/0x130 [ 2324.411172] ? security_file_permission+0x24e/0x570 [ 2324.411192] do_iter_write+0x482/0x670 [ 2324.411208] ? import_iovec+0x83/0xb0 [ 2324.411223] vfs_writev+0x1ae/0x5e0 [ 2324.411235] ? vfs_iter_write+0xa0/0xa0 [ 2324.411243] ? __fget_files+0x26d/0x480 [ 2324.411256] ? lock_downgrade+0x6d0/0x6d0 [ 2324.411265] ? find_held_lock+0x2c/0x110 [ 2324.411285] ? __fget_files+0x296/0x480 [ 2324.411303] ? __fget_light+0xea/0x290 [ 2324.411317] do_writev+0x283/0x300 [ 2324.411328] ? vfs_writev+0x5e0/0x5e0 [ 2324.411343] ? rcu_read_lock_sched_held+0x3e/0x80 [ 2324.411357] do_syscall_64+0x33/0x40 [ 2324.411372] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2324.411380] RIP: 0033:0x7f701ebafb19 [ 2324.411391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.411397] RSP: 002b:00007f701c125188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2324.411409] RAX: ffffffffffffffda RBX: 00007f701ecc2f60 RCX: 00007f701ebafb19 [ 2324.411416] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000005 [ 2324.411422] RBP: 00007f701c1251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.411428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2324.411434] R13: 00007ffde52c327f R14: 00007f701c125300 R15: 0000000000022000 VM DIAGNOSIS: 04:34:06 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff8140a6bc RDX=0000000000000001 RSI=ffffffff8140a6c9 RDI=0000000000000001 RBP=ffffffffa0008000 RSP=ffff8880493e7708 R8 =0000000000000000 R9 =ffffffff86799667 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=dffffc0000000000 R14=ffffffff85035228 R15=0000000000000170 RIP=ffffffff814029e4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7737c5e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f773a7f8000 CR3=0000000046512000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f04703587c000007f04703587c8 XMM02=00007f04703587e000007f04703587c0 XMM03=00007f04703587c800007f04703587c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000101 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff88800907ff58 RDI=0000000000000101 RBP=0000000000000000 RSP=ffff88800907ff50 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84204000 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8a17004900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8a16651000 CR3=000000000e616000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=630a49d9db84103c0000000000362400 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=cf61c245f6ac466f00000000000ae968 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000