afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:06 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:20 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:21 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:25:41 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:25:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:41 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:25:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:58 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x0, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x0, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x0, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:25:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:25:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:25:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:00 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:15 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:26:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:29 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:26:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, 0x0) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, 0x0) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, 0x0) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={0x0, 0x0, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:26:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={0x0, 0x0, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={0x0, 0x0, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x0, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x0, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x0, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:46 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:26:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:26:46 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:26:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:26:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:00 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:27:00 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, 0x0, 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, 0x0, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, 0x0, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, 0x0, 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, 0x0, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, 0x0, 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x0, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:15 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:27:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x0, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x0, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:16 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:27:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:27:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 1) 10:27:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:27:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:27:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2075.468611] FAULT_INJECTION: forcing a failure. [ 2075.468611] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2075.472037] CPU: 0 PID: 11620 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2075.473529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2075.475250] Call Trace: [ 2075.475816] dump_stack+0x107/0x167 [ 2075.476578] should_fail.cold+0x5/0xa [ 2075.477371] _copy_to_iter+0x264/0x12d0 [ 2075.478190] ? mark_lock+0xf5/0x2df0 [ 2075.478954] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2075.480010] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2075.481023] ? lock_chain_count+0x20/0x20 [ 2075.481861] ? __virt_addr_valid+0x128/0x350 [ 2075.482758] ? __check_object_size+0x319/0x440 [ 2075.483694] simple_copy_to_iter+0x4c/0x70 [ 2075.484566] __skb_datagram_iter+0x122/0x880 [ 2075.485454] ? do_raw_spin_lock+0x121/0x260 [ 2075.486332] ? zerocopy_sg_from_iter+0x110/0x110 [ 2075.487293] ? mark_held_locks+0x9e/0xe0 [ 2075.488123] skb_copy_datagram_iter+0x88/0x190 [ 2075.489068] tcp_recvmsg+0x13b5/0x2930 [ 2075.489872] ? tcp_splice_read+0x8c0/0x8c0 [ 2075.490734] ? sock_has_perm+0x1ea/0x280 [ 2075.491551] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2075.492610] ? lock_downgrade+0x6d0/0x6d0 [ 2075.493443] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2075.494499] ? tcp_splice_read+0x8c0/0x8c0 [ 2075.495355] inet6_recvmsg+0x13b/0x6e0 [ 2075.496153] ? inet6_bind+0x120/0x120 [ 2075.496955] ? security_socket_recvmsg+0x95/0xc0 [ 2075.497905] ? inet6_bind+0x120/0x120 [ 2075.498671] sock_recvmsg+0xff/0x180 [ 2075.499423] __sys_recvfrom+0x1be/0x2f0 [ 2075.500221] ? __ia32_sys_send+0x100/0x100 [ 2075.501098] ? lock_downgrade+0x6d0/0x6d0 [ 2075.501958] ? wait_for_completion_io+0x270/0x270 [ 2075.502930] ? rcu_read_lock_any_held+0x75/0xa0 [ 2075.503882] ? vfs_write+0x354/0xa70 [ 2075.504660] ? fput_many+0x2f/0x1a0 [ 2075.505408] ? ksys_write+0x1a9/0x260 [ 2075.506191] ? __ia32_sys_read+0xb0/0xb0 [ 2075.507043] __x64_sys_recvfrom+0xdd/0x1b0 [ 2075.507917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2075.508994] do_syscall_64+0x33/0x40 [ 2075.509763] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2075.510818] RIP: 0033:0x7f215657db19 [ 2075.511587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2075.515331] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2075.516885] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2075.518318] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2075.519771] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2075.521227] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2075.522664] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:27:44 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 1) [ 2075.570163] perf: interrupt took too long (6260 > 6217), lowering kernel.perf_event_max_sample_rate to 31000 10:27:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, 0x0, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2075.828379] FAULT_INJECTION: forcing a failure. [ 2075.828379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2075.831457] CPU: 0 PID: 11643 Comm: syz-executor.7 Not tainted 5.10.202 #1 [ 2075.832974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2075.834701] Call Trace: [ 2075.835249] dump_stack+0x107/0x167 [ 2075.836014] should_fail.cold+0x5/0xa [ 2075.836833] _copy_to_iter+0x264/0x12d0 [ 2075.837657] ? mark_lock+0xf5/0x2df0 [ 2075.838418] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2075.839481] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2075.840481] ? lock_chain_count+0x20/0x20 [ 2075.841318] ? __virt_addr_valid+0x128/0x350 [ 2075.842218] ? __check_object_size+0x319/0x440 [ 2075.843162] simple_copy_to_iter+0x4c/0x70 [ 2075.844016] __skb_datagram_iter+0x122/0x880 [ 2075.844914] ? do_raw_spin_lock+0x121/0x260 [ 2075.845796] ? zerocopy_sg_from_iter+0x110/0x110 [ 2075.846750] ? mark_held_locks+0x9e/0xe0 [ 2075.847582] skb_copy_datagram_iter+0x88/0x190 [ 2075.848534] tcp_recvmsg+0x13b5/0x2930 [ 2075.849346] ? tcp_splice_read+0x8c0/0x8c0 [ 2075.850213] ? sock_has_perm+0x1ea/0x280 [ 2075.851079] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2075.852117] ? lock_downgrade+0x6d0/0x6d0 [ 2075.852989] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2075.854047] ? tcp_splice_read+0x8c0/0x8c0 [ 2075.854893] inet6_recvmsg+0x13b/0x6e0 [ 2075.855674] ? inet6_bind+0x120/0x120 [ 2075.856455] ? security_socket_recvmsg+0x95/0xc0 [ 2075.857403] ? inet6_bind+0x120/0x120 [ 2075.858166] sock_recvmsg+0xff/0x180 [ 2075.858917] __sys_recvfrom+0x1be/0x2f0 [ 2075.859716] ? __ia32_sys_send+0x100/0x100 [ 2075.860572] ? lock_downgrade+0x6d0/0x6d0 [ 2075.861424] ? wait_for_completion_io+0x270/0x270 [ 2075.862393] ? rcu_read_lock_any_held+0x75/0xa0 [ 2075.863347] ? vfs_write+0x354/0xa70 [ 2075.864109] ? fput_many+0x2f/0x1a0 [ 2075.864859] ? ksys_write+0x1a9/0x260 [ 2075.865655] ? __ia32_sys_read+0xb0/0xb0 [ 2075.866493] __x64_sys_recvfrom+0xdd/0x1b0 [ 2075.867367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2075.868443] do_syscall_64+0x33/0x40 [ 2075.869220] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2075.870277] RIP: 0033:0x7f8f443d9b19 [ 2075.871027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2075.874775] RSP: 002b:00007f8f4194f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2075.876297] RAX: ffffffffffffffda RBX: 00007f8f444ecf60 RCX: 00007f8f443d9b19 [ 2075.877757] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2075.879197] RBP: 00007f8f4194f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2075.880659] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2075.882095] R13: 00007ffc2757173f R14: 00007f8f4194f300 R15: 0000000000022000 10:27:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 2) 10:27:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 2) 10:27:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:27:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:27:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:27:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 1) 10:27:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2090.655171] FAULT_INJECTION: forcing a failure. [ 2090.655171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2090.659061] CPU: 1 PID: 11668 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2090.660761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2090.662677] Call Trace: [ 2090.663321] dump_stack+0x107/0x167 [ 2090.664155] should_fail.cold+0x5/0xa [ 2090.665083] _copy_to_iter+0x264/0x12d0 [ 2090.665892] ? mark_lock+0xf5/0x2df0 [ 2090.666653] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2090.667729] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2090.668798] ? lock_chain_count+0x20/0x20 [ 2090.669696] ? __virt_addr_valid+0x128/0x350 [ 2090.670821] ? __check_object_size+0x319/0x440 [ 2090.671831] simple_copy_to_iter+0x4c/0x70 [ 2090.672877] __skb_datagram_iter+0x4f7/0x880 [ 2090.673783] ? zerocopy_sg_from_iter+0x110/0x110 [ 2090.674989] skb_copy_datagram_iter+0x88/0x190 [ 2090.675931] tcp_recvmsg+0x13b5/0x2930 [ 2090.676757] ? tcp_splice_read+0x8c0/0x8c0 [ 2090.677627] ? sock_has_perm+0x1ea/0x280 [ 2090.678461] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2090.679520] ? lock_downgrade+0x6d0/0x6d0 [ 2090.680365] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2090.681449] ? tcp_splice_read+0x8c0/0x8c0 [ 2090.682316] inet6_recvmsg+0x13b/0x6e0 [ 2090.683117] ? inet6_bind+0x120/0x120 [ 2090.683891] ? security_socket_recvmsg+0x95/0xc0 [ 2090.684864] ? inet6_bind+0x120/0x120 [ 2090.685646] sock_recvmsg+0xff/0x180 [ 2090.686416] __sys_recvfrom+0x1be/0x2f0 [ 2090.687219] ? __ia32_sys_send+0x100/0x100 [ 2090.688069] ? lock_downgrade+0x6d0/0x6d0 [ 2090.688967] ? wait_for_completion_io+0x270/0x270 [ 2090.689956] ? rcu_read_lock_any_held+0x75/0xa0 [ 2090.690903] ? vfs_write+0x354/0xa70 [ 2090.691661] ? fput_many+0x2f/0x1a0 [ 2090.692412] ? ksys_write+0x1a9/0x260 [ 2090.693210] ? __ia32_sys_read+0xb0/0xb0 [ 2090.694055] __x64_sys_recvfrom+0xdd/0x1b0 [ 2090.694924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2090.695984] do_syscall_64+0x33/0x40 [ 2090.696762] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2090.697806] RIP: 0033:0x7f215657db19 [ 2090.698569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2090.702363] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2090.703937] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2090.705470] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2090.706927] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2090.708387] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2090.709945] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 [ 2090.718310] FAULT_INJECTION: forcing a failure. [ 2090.718310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2090.721122] CPU: 1 PID: 11671 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2090.722545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2090.724244] Call Trace: [ 2090.724806] dump_stack+0x107/0x167 [ 2090.725556] should_fail.cold+0x5/0xa [ 2090.726339] _copy_to_iter+0x264/0x12d0 [ 2090.727160] ? mark_lock+0xf5/0x2df0 [ 2090.727940] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2090.729067] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2090.730076] ? lock_chain_count+0x20/0x20 [ 2090.730930] ? __virt_addr_valid+0x128/0x350 [ 2090.731844] ? __check_object_size+0x319/0x440 [ 2090.732917] simple_copy_to_iter+0x4c/0x70 [ 2090.733937] __skb_datagram_iter+0x122/0x880 [ 2090.734904] ? do_raw_spin_lock+0x121/0x260 [ 2090.735919] ? zerocopy_sg_from_iter+0x110/0x110 [ 2090.737033] ? mark_held_locks+0x9e/0xe0 [ 2090.738020] skb_copy_datagram_iter+0x88/0x190 [ 2090.739020] tcp_recvmsg+0x13b5/0x2930 [ 2090.739838] ? tcp_splice_read+0x8c0/0x8c0 [ 2090.740804] ? sock_has_perm+0x1ea/0x280 [ 2090.741726] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2090.742800] ? lock_downgrade+0x6d0/0x6d0 [ 2090.743658] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2090.744754] ? tcp_splice_read+0x8c0/0x8c0 [ 2090.745630] inet6_recvmsg+0x13b/0x6e0 [ 2090.746522] ? inet6_bind+0x120/0x120 [ 2090.747439] ? security_socket_recvmsg+0x95/0xc0 [ 2090.748416] ? inet6_bind+0x120/0x120 [ 2090.749217] sock_recvmsg+0xff/0x180 [ 2090.749982] __sys_recvfrom+0x1be/0x2f0 [ 2090.750800] ? __ia32_sys_send+0x100/0x100 [ 2090.751735] ? lock_downgrade+0x6d0/0x6d0 [ 2090.752673] ? wait_for_completion_io+0x270/0x270 [ 2090.753759] ? rcu_read_lock_any_held+0x75/0xa0 [ 2090.754885] ? vfs_write+0x354/0xa70 [ 2090.755662] ? fput_many+0x2f/0x1a0 [ 2090.756489] ? ksys_write+0x1a9/0x260 [ 2090.757290] ? __ia32_sys_read+0xb0/0xb0 [ 2090.758206] __x64_sys_recvfrom+0xdd/0x1b0 [ 2090.759258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2090.760414] do_syscall_64+0x33/0x40 [ 2090.761334] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2090.762496] RIP: 0033:0x7fb9928b7b19 [ 2090.763265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2090.767075] RSP: 002b:00007fb98fe2d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2090.768642] RAX: ffffffffffffffda RBX: 00007fb9929caf60 RCX: 00007fb9928b7b19 [ 2090.770091] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2090.771546] RBP: 00007fb98fe2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2090.773001] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2090.774448] R13: 00007ffd0771d97f R14: 00007fb98fe2d300 R15: 0000000000022000 [ 2090.779537] FAULT_INJECTION: forcing a failure. [ 2090.779537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2090.781935] CPU: 1 PID: 11688 Comm: syz-executor.7 Not tainted 5.10.202 #1 [ 2090.783369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2090.785067] Call Trace: [ 2090.785599] dump_stack+0x107/0x167 [ 2090.786346] should_fail.cold+0x5/0xa [ 2090.787123] _copy_to_iter+0x264/0x12d0 [ 2090.787942] ? mark_lock+0xf5/0x2df0 [ 2090.788728] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2090.789801] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2090.790796] ? lock_chain_count+0x20/0x20 [ 2090.791641] ? __virt_addr_valid+0x128/0x350 [ 2090.792560] ? __check_object_size+0x319/0x440 [ 2090.793513] simple_copy_to_iter+0x4c/0x70 [ 2090.794403] __skb_datagram_iter+0x4f7/0x880 [ 2090.795324] ? zerocopy_sg_from_iter+0x110/0x110 [ 2090.796311] skb_copy_datagram_iter+0x88/0x190 [ 2090.797264] tcp_recvmsg+0x13b5/0x2930 [ 2090.798082] ? tcp_splice_read+0x8c0/0x8c0 [ 2090.798968] ? sock_has_perm+0x1ea/0x280 [ 2090.799843] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2090.800918] ? lock_downgrade+0x6d0/0x6d0 [ 2090.801757] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2090.802825] ? tcp_splice_read+0x8c0/0x8c0 [ 2090.803670] inet6_recvmsg+0x13b/0x6e0 [ 2090.804477] ? inet6_bind+0x120/0x120 [ 2090.805269] ? security_socket_recvmsg+0x95/0xc0 [ 2090.806232] ? inet6_bind+0x120/0x120 [ 2090.807003] sock_recvmsg+0xff/0x180 [ 2090.807763] __sys_recvfrom+0x1be/0x2f0 [ 2090.808600] ? __ia32_sys_send+0x100/0x100 [ 2090.809464] ? lock_downgrade+0x6d0/0x6d0 [ 2090.810327] ? wait_for_completion_io+0x270/0x270 [ 2090.811318] ? rcu_read_lock_any_held+0x75/0xa0 [ 2090.812262] ? vfs_write+0x354/0xa70 [ 2090.813039] ? fput_many+0x2f/0x1a0 [ 2090.813782] ? ksys_write+0x1a9/0x260 [ 2090.814561] ? __ia32_sys_read+0xb0/0xb0 [ 2090.815387] __x64_sys_recvfrom+0xdd/0x1b0 [ 2090.816260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2090.817341] do_syscall_64+0x33/0x40 [ 2090.818115] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2090.819178] RIP: 0033:0x7f8f443d9b19 [ 2090.819947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2090.823768] RSP: 002b:00007f8f4190d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2090.825350] RAX: ffffffffffffffda RBX: 00007f8f444ed0e0 RCX: 00007f8f443d9b19 [ 2090.826830] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2090.828297] RBP: 00007f8f4190d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2090.829762] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2090.831223] R13: 00007ffc2757173f R14: 00007f8f4190d300 R15: 0000000000022000 10:28:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 3) 10:28:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 2) [ 2091.699049] FAULT_INJECTION: forcing a failure. [ 2091.699049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2091.701612] CPU: 1 PID: 11699 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2091.702999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2091.704661] Call Trace: [ 2091.705190] dump_stack+0x107/0x167 [ 2091.705926] should_fail.cold+0x5/0xa [ 2091.706690] _copy_to_iter+0x264/0x12d0 [ 2091.707489] ? mark_lock+0xf5/0x2df0 [ 2091.708234] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2091.709318] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2091.710310] ? lock_chain_count+0x20/0x20 [ 2091.711150] ? __virt_addr_valid+0x128/0x350 [ 2091.712050] ? __check_object_size+0x319/0x440 [ 2091.712994] simple_copy_to_iter+0x4c/0x70 [ 2091.713857] __skb_datagram_iter+0x4f7/0x880 [ 2091.714764] ? zerocopy_sg_from_iter+0x110/0x110 [ 2091.715740] skb_copy_datagram_iter+0x88/0x190 [ 2091.716708] tcp_recvmsg+0x13b5/0x2930 [ 2091.717501] ? tcp_splice_read+0x8c0/0x8c0 [ 2091.718354] ? sock_has_perm+0x1ea/0x280 [ 2091.719166] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2091.720195] ? lock_downgrade+0x6d0/0x6d0 [ 2091.721040] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2091.722092] ? tcp_splice_read+0x8c0/0x8c0 [ 2091.722935] inet6_recvmsg+0x13b/0x6e0 [ 2091.723714] ? inet6_bind+0x120/0x120 [ 2091.724476] ? security_socket_recvmsg+0x95/0xc0 [ 2091.725462] ? inet6_bind+0x120/0x120 [ 2091.726245] sock_recvmsg+0xff/0x180 [ 2091.726998] __sys_recvfrom+0x1be/0x2f0 [ 2091.727806] ? __ia32_sys_send+0x100/0x100 [ 2091.728678] ? lock_downgrade+0x6d0/0x6d0 [ 2091.729536] ? wait_for_completion_io+0x270/0x270 [ 2091.730516] ? rcu_read_lock_any_held+0x75/0xa0 [ 2091.731464] ? vfs_write+0x354/0xa70 [ 2091.732222] ? fput_many+0x2f/0x1a0 [ 2091.732971] ? ksys_write+0x1a9/0x260 [ 2091.733743] ? __ia32_sys_read+0xb0/0xb0 [ 2091.734576] __x64_sys_recvfrom+0xdd/0x1b0 [ 2091.735426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2091.736476] do_syscall_64+0x33/0x40 [ 2091.737242] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2091.738276] RIP: 0033:0x7fb9928b7b19 [ 2091.739029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2091.742771] RSP: 002b:00007fb98fe2d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2091.744312] RAX: ffffffffffffffda RBX: 00007fb9929caf60 RCX: 00007fb9928b7b19 [ 2091.745762] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2091.747195] RBP: 00007fb98fe2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2091.748643] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2091.750082] R13: 00007ffd0771d97f R14: 00007fb98fe2d300 R15: 0000000000022000 [ 2091.872776] FAULT_INJECTION: forcing a failure. [ 2091.872776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2091.877376] CPU: 1 PID: 11697 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2091.878778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2091.880427] Call Trace: [ 2091.880966] dump_stack+0x107/0x167 [ 2091.881697] should_fail.cold+0x5/0xa [ 2091.882465] _copy_to_iter+0x264/0x12d0 [ 2091.883277] ? sk_wait_data+0x353/0x4d0 [ 2091.884087] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2091.885089] ? mark_held_locks+0x9e/0xe0 [ 2091.885917] ? __virt_addr_valid+0x128/0x350 [ 2091.886815] ? __check_object_size+0x319/0x440 [ 2091.887748] simple_copy_to_iter+0x4c/0x70 [ 2091.888645] __skb_datagram_iter+0x4f7/0x880 [ 2091.889542] ? zerocopy_sg_from_iter+0x110/0x110 [ 2091.890516] skb_copy_datagram_iter+0x88/0x190 [ 2091.891444] tcp_recvmsg+0x13b5/0x2930 [ 2091.892253] ? tcp_splice_read+0x8c0/0x8c0 [ 2091.893124] ? sock_has_perm+0x1ea/0x280 [ 2091.893951] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2091.894997] ? lock_downgrade+0x6d0/0x6d0 [ 2091.895839] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2091.896914] ? tcp_splice_read+0x8c0/0x8c0 [ 2091.897766] inet6_recvmsg+0x13b/0x6e0 [ 2091.898545] ? inet6_bind+0x120/0x120 [ 2091.899313] ? security_socket_recvmsg+0x95/0xc0 [ 2091.900261] ? inet6_bind+0x120/0x120 [ 2091.901040] sock_recvmsg+0xff/0x180 [ 2091.901788] __sys_recvfrom+0x1be/0x2f0 [ 2091.902584] ? __ia32_sys_send+0x100/0x100 [ 2091.903426] ? lock_downgrade+0x6d0/0x6d0 [ 2091.904284] ? wait_for_completion_io+0x270/0x270 [ 2091.905263] ? rcu_read_lock_any_held+0x75/0xa0 [ 2091.906195] ? vfs_write+0x354/0xa70 [ 2091.906954] ? fput_many+0x2f/0x1a0 [ 2091.907687] ? ksys_write+0x1a9/0x260 [ 2091.908447] ? __ia32_sys_read+0xb0/0xb0 [ 2091.909271] __x64_sys_recvfrom+0xdd/0x1b0 [ 2091.910127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2091.911156] do_syscall_64+0x33/0x40 [ 2091.911904] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2091.912942] RIP: 0033:0x7f215657db19 [ 2091.913685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2091.917389] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2091.918912] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2091.920350] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2091.921793] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2091.923227] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2091.924669] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:28:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 3) 10:28:15 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 3) 10:28:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 4) 10:28:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:28:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2106.479242] FAULT_INJECTION: forcing a failure. [ 2106.479242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2106.481544] CPU: 1 PID: 11716 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2106.482484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2106.483616] Call Trace: [ 2106.483975] dump_stack+0x107/0x167 [ 2106.484469] should_fail.cold+0x5/0xa [ 2106.485005] _copy_to_iter+0x264/0x12d0 [ 2106.485554] ? zerocopy_sg_from_iter+0x110/0x110 [ 2106.486193] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2106.486858] ? __sanitizer_cov_trace_pc+0xd/0x60 [ 2106.487497] ? __virt_addr_valid+0x128/0x350 [ 2106.488090] ? __check_object_size+0x319/0x440 [ 2106.488705] simple_copy_to_iter+0x4c/0x70 [ 2106.489288] __skb_datagram_iter+0x4f7/0x880 [ 2106.489891] ? zerocopy_sg_from_iter+0x110/0x110 [ 2106.490539] skb_copy_datagram_iter+0x88/0x190 [ 2106.491154] tcp_recvmsg+0x13b5/0x2930 [ 2106.491692] ? tcp_splice_read+0x8c0/0x8c0 [ 2106.492269] ? sock_has_perm+0x1ea/0x280 [ 2106.492833] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2106.493528] ? lock_downgrade+0x6d0/0x6d0 [ 2106.494089] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2106.494799] ? tcp_splice_read+0x8c0/0x8c0 [ 2106.495373] inet6_recvmsg+0x13b/0x6e0 [ 2106.495901] ? inet6_bind+0x120/0x120 [ 2106.496419] ? security_socket_recvmsg+0x95/0xc0 [ 2106.497083] ? inet6_bind+0x120/0x120 [ 2106.497600] sock_recvmsg+0xff/0x180 [ 2106.498102] __sys_recvfrom+0x1be/0x2f0 [ 2106.498634] ? __ia32_sys_send+0x100/0x100 [ 2106.499209] ? lock_downgrade+0x6d0/0x6d0 [ 2106.499783] ? wait_for_completion_io+0x270/0x270 [ 2106.500432] ? rcu_read_lock_any_held+0x75/0xa0 [ 2106.501075] ? vfs_write+0x354/0xa70 [ 2106.501578] ? fput_many+0x2f/0x1a0 [ 2106.502066] ? ksys_write+0x1a9/0x260 [ 2106.502582] ? __ia32_sys_read+0xb0/0xb0 [ 2106.503132] __x64_sys_recvfrom+0xdd/0x1b0 [ 2106.503774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2106.504544] do_syscall_64+0x33/0x40 [ 2106.505234] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2106.506015] RIP: 0033:0x7f215657db19 [ 2106.506521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2106.509392] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2106.510627] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2106.511791] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2106.512775] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2106.513971] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2106.515094] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 [ 2106.519145] FAULT_INJECTION: forcing a failure. [ 2106.519145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2106.521369] CPU: 1 PID: 11717 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2106.522318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2106.523440] Call Trace: [ 2106.523795] dump_stack+0x107/0x167 [ 2106.524288] should_fail.cold+0x5/0xa [ 2106.524832] _copy_to_iter+0x264/0x12d0 [ 2106.525376] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2106.526109] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2106.526764] ? __virt_addr_valid+0x128/0x350 [ 2106.527359] ? __check_object_size+0x319/0x440 [ 2106.527972] simple_copy_to_iter+0x4c/0x70 [ 2106.528611] __skb_datagram_iter+0x4f7/0x880 [ 2106.529324] ? zerocopy_sg_from_iter+0x110/0x110 [ 2106.530057] skb_copy_datagram_iter+0x88/0x190 [ 2106.530663] tcp_recvmsg+0x13b5/0x2930 [ 2106.531203] ? tcp_splice_read+0x8c0/0x8c0 [ 2106.531784] ? sock_has_perm+0x1ea/0x280 [ 2106.532337] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2106.533155] ? lock_downgrade+0x6d0/0x6d0 [ 2106.533827] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2106.534669] ? tcp_splice_read+0x8c0/0x8c0 [ 2106.535275] inet6_recvmsg+0x13b/0x6e0 [ 2106.535808] ? inet6_bind+0x120/0x120 [ 2106.536327] ? security_socket_recvmsg+0x95/0xc0 [ 2106.536975] ? inet6_bind+0x120/0x120 [ 2106.537486] sock_recvmsg+0xff/0x180 [ 2106.537994] __sys_recvfrom+0x1be/0x2f0 [ 2106.538531] ? __ia32_sys_send+0x100/0x100 [ 2106.539104] ? lock_downgrade+0x6d0/0x6d0 [ 2106.539683] ? wait_for_completion_io+0x270/0x270 [ 2106.540351] ? rcu_read_lock_any_held+0x75/0xa0 [ 2106.541009] ? vfs_write+0x354/0xa70 [ 2106.541523] ? fput_many+0x2f/0x1a0 [ 2106.542014] ? ksys_write+0x1a9/0x260 [ 2106.542536] ? __ia32_sys_read+0xb0/0xb0 [ 2106.543092] __x64_sys_recvfrom+0xdd/0x1b0 [ 2106.543661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2106.544362] do_syscall_64+0x33/0x40 [ 2106.544877] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2106.545570] RIP: 0033:0x7fb9928b7b19 [ 2106.546074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2106.548595] RSP: 002b:00007fb98fe2d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2106.549640] RAX: ffffffffffffffda RBX: 00007fb9929caf60 RCX: 00007fb9928b7b19 [ 2106.550610] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2106.551565] RBP: 00007fb98fe2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2106.552538] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2106.553534] R13: 00007ffd0771d97f R14: 00007fb98fe2d300 R15: 0000000000022000 [ 2106.556822] FAULT_INJECTION: forcing a failure. [ 2106.556822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2106.558469] CPU: 1 PID: 11718 Comm: syz-executor.7 Not tainted 5.10.202 #1 [ 2106.559409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2106.560744] Call Trace: [ 2106.561243] dump_stack+0x107/0x167 [ 2106.561933] should_fail.cold+0x5/0xa [ 2106.562444] _copy_to_iter+0x264/0x12d0 [ 2106.562988] ? 0xffffffff81000000 [ 2106.563539] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2106.564291] ? __sanitizer_cov_trace_cmp8+0x4/0x20 [ 2106.565174] ? __check_object_size+0x319/0x440 [ 2106.565825] simple_copy_to_iter+0x4c/0x70 [ 2106.566391] __skb_datagram_iter+0x4f7/0x880 [ 2106.567132] ? zerocopy_sg_from_iter+0x110/0x110 [ 2106.567941] skb_copy_datagram_iter+0x88/0x190 [ 2106.568697] tcp_recvmsg+0x13b5/0x2930 [ 2106.569254] ? tcp_splice_read+0x8c0/0x8c0 [ 2106.569837] ? sock_has_perm+0x1ea/0x280 [ 2106.570390] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2106.571222] ? lock_downgrade+0x6d0/0x6d0 [ 2106.571891] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2106.572714] ? tcp_splice_read+0x8c0/0x8c0 [ 2106.573289] inet6_recvmsg+0x13b/0x6e0 [ 2106.573816] ? inet6_bind+0x120/0x120 [ 2106.574338] ? security_socket_recvmsg+0x95/0xc0 [ 2106.574983] ? inet6_bind+0x120/0x120 [ 2106.575498] sock_recvmsg+0xff/0x180 [ 2106.576003] __sys_recvfrom+0x1be/0x2f0 [ 2106.576546] ? __ia32_sys_send+0x100/0x100 [ 2106.577125] ? lock_downgrade+0x6d0/0x6d0 [ 2106.577704] ? wait_for_completion_io+0x270/0x270 [ 2106.578357] ? rcu_read_lock_any_held+0x75/0xa0 [ 2106.578982] ? vfs_write+0x354/0xa70 [ 2106.579484] ? fput_many+0x2f/0x1a0 [ 2106.579979] ? ksys_write+0x1a9/0x260 [ 2106.580492] ? __ia32_sys_read+0xb0/0xb0 [ 2106.581057] __x64_sys_recvfrom+0xdd/0x1b0 [ 2106.581625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2106.582321] do_syscall_64+0x33/0x40 [ 2106.582826] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2106.583518] RIP: 0033:0x7f8f443d9b19 [ 2106.584022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2106.586516] RSP: 002b:00007f8f4194f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2106.587509] RAX: ffffffffffffffda RBX: 00007f8f444ecf60 RCX: 00007f8f443d9b19 [ 2106.588471] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2106.589449] RBP: 00007f8f4194f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2106.590412] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2106.591377] R13: 00007ffc2757173f R14: 00007f8f4194f300 R15: 0000000000022000 10:28:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:28:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 5) 10:28:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 4) 10:28:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:28:29 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 4) [ 2121.000382] FAULT_INJECTION: forcing a failure. [ 2121.000382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2121.003313] CPU: 1 PID: 11762 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2121.004699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2121.006383] Call Trace: [ 2121.006920] dump_stack+0x107/0x167 [ 2121.007661] should_fail.cold+0x5/0xa [ 2121.008443] _copy_to_iter+0x264/0x12d0 [ 2121.009278] ? find_held_lock+0x2c/0x110 [ 2121.010091] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2121.010939] FAULT_INJECTION: forcing a failure. [ 2121.010939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2121.011133] ? tcp_mstamp_refresh+0x12/0xa0 [ 2121.014297] ? __virt_addr_valid+0x128/0x350 [ 2121.015192] ? __check_object_size+0x319/0x440 [ 2121.016121] simple_copy_to_iter+0x4c/0x70 [ 2121.016999] __skb_datagram_iter+0x4f7/0x880 [ 2121.017881] ? zerocopy_sg_from_iter+0x110/0x110 [ 2121.018849] skb_copy_datagram_iter+0x88/0x190 [ 2121.019773] tcp_recvmsg+0x13b5/0x2930 [ 2121.020571] ? tcp_splice_read+0x8c0/0x8c0 [ 2121.021438] ? sock_has_perm+0x1ea/0x280 [ 2121.022248] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2121.023289] ? lock_downgrade+0x6d0/0x6d0 [ 2121.024121] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2121.025205] ? tcp_splice_read+0x8c0/0x8c0 [ 2121.026050] inet6_recvmsg+0x13b/0x6e0 [ 2121.026843] ? inet6_bind+0x120/0x120 [ 2121.027619] ? security_socket_recvmsg+0x95/0xc0 [ 2121.028576] ? inet6_bind+0x120/0x120 [ 2121.029350] sock_recvmsg+0xff/0x180 [ 2121.030106] __sys_recvfrom+0x1be/0x2f0 [ 2121.030905] ? __ia32_sys_send+0x100/0x100 [ 2121.031762] ? lock_downgrade+0x6d0/0x6d0 [ 2121.032611] ? wait_for_completion_io+0x270/0x270 [ 2121.033592] ? rcu_read_lock_any_held+0x75/0xa0 [ 2121.034518] ? vfs_write+0x354/0xa70 [ 2121.035278] ? fput_many+0x2f/0x1a0 [ 2121.036019] ? ksys_write+0x1a9/0x260 [ 2121.036788] ? __ia32_sys_read+0xb0/0xb0 [ 2121.037632] __x64_sys_recvfrom+0xdd/0x1b0 [ 2121.038482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2121.039523] do_syscall_64+0x33/0x40 [ 2121.040274] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2121.041322] RIP: 0033:0x7fb9928b7b19 [ 2121.042073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2121.045826] RSP: 002b:00007fb98fe2d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2121.047346] RAX: ffffffffffffffda RBX: 00007fb9929caf60 RCX: 00007fb9928b7b19 [ 2121.048792] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2121.050240] RBP: 00007fb98fe2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2121.051683] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2121.053152] R13: 00007ffd0771d97f R14: 00007fb98fe2d300 R15: 0000000000022000 [ 2121.054836] CPU: 0 PID: 11758 Comm: syz-executor.7 Not tainted 5.10.202 #1 [ 2121.056229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2121.057928] Call Trace: [ 2121.058461] dump_stack+0x107/0x167 [ 2121.059200] should_fail.cold+0x5/0xa [ 2121.059976] _copy_to_iter+0x264/0x12d0 [ 2121.060787] ? zerocopy_sg_from_iter+0x110/0x110 [ 2121.061751] ? __virt_addr_valid+0xef/0x350 [ 2121.062615] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2121.063601] ? __virt_addr_valid+0x128/0x350 [ 2121.064487] ? __check_object_size+0x319/0x440 [ 2121.065441] simple_copy_to_iter+0x4c/0x70 [ 2121.066435] __skb_datagram_iter+0x122/0x880 [ 2121.067327] ? zerocopy_sg_from_iter+0x110/0x110 [ 2121.068281] skb_copy_datagram_iter+0x88/0x190 [ 2121.069206] tcp_recvmsg+0x13b5/0x2930 [ 2121.070004] ? tcp_splice_read+0x8c0/0x8c0 10:28:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2121.070854] ? sock_has_perm+0x1ea/0x280 [ 2121.072008] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2121.073265] ? lock_downgrade+0x6d0/0x6d0 [ 2121.074255] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2121.075496] ? tcp_splice_read+0x8c0/0x8c0 [ 2121.076497] inet6_recvmsg+0x13b/0x6e0 [ 2121.077439] ? inet6_bind+0x120/0x120 [ 2121.078346] ? security_socket_recvmsg+0x95/0xc0 [ 2121.079466] ? inet6_bind+0x120/0x120 [ 2121.080368] sock_recvmsg+0xff/0x180 [ 2121.081262] __sys_recvfrom+0x1be/0x2f0 [ 2121.082209] ? __ia32_sys_send+0x100/0x100 [ 2121.083210] ? lock_downgrade+0x6d0/0x6d0 [ 2121.084220] ? wait_for_completion_io+0x270/0x270 [ 2121.085391] ? rcu_read_lock_any_held+0x75/0xa0 [ 2121.086394] ? vfs_write+0x354/0xa70 [ 2121.087143] ? fput_many+0x2f/0x1a0 [ 2121.087872] ? ksys_write+0x1a9/0x260 [ 2121.088636] ? __ia32_sys_read+0xb0/0xb0 [ 2121.089461] __x64_sys_recvfrom+0xdd/0x1b0 [ 2121.090309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2121.091343] do_syscall_64+0x33/0x40 [ 2121.092093] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2121.093125] RIP: 0033:0x7f8f443d9b19 [ 2121.093870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2121.097561] RSP: 002b:00007f8f4194f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2121.099086] RAX: ffffffffffffffda RBX: 00007f8f444ecf60 RCX: 00007f8f443d9b19 [ 2121.100520] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2121.101979] RBP: 00007f8f4194f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2121.103410] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2121.104845] R13: 00007ffc2757173f R14: 00007f8f4194f300 R15: 0000000000022000 [ 2121.110184] FAULT_INJECTION: forcing a failure. [ 2121.110184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2121.112767] CPU: 0 PID: 11761 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2121.114178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2121.115843] Call Trace: [ 2121.116372] dump_stack+0x107/0x167 [ 2121.117120] should_fail.cold+0x5/0xa [ 2121.117893] _copy_to_iter+0x264/0x12d0 [ 2121.118699] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2121.119756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2121.120810] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2121.121907] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2121.122941] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2121.124015] ? __virt_addr_valid+0x128/0x350 [ 2121.124922] ? __check_object_size+0x319/0x440 [ 2121.125854] simple_copy_to_iter+0x4c/0x70 [ 2121.126722] __skb_datagram_iter+0x4f7/0x880 [ 2121.127609] ? zerocopy_sg_from_iter+0x110/0x110 [ 2121.128576] skb_copy_datagram_iter+0x88/0x190 [ 2121.129496] tcp_recvmsg+0x13b5/0x2930 [ 2121.130296] ? tcp_splice_read+0x8c0/0x8c0 [ 2121.131149] ? sock_has_perm+0x1ea/0x280 [ 2121.131960] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2121.133021] ? tcp_splice_read+0x8c0/0x8c0 [ 2121.133864] inet6_recvmsg+0x13b/0x6e0 [ 2121.134648] ? inet6_bind+0x120/0x120 [ 2121.135409] ? security_socket_recvmsg+0x95/0xc0 [ 2121.136371] ? inet6_bind+0x120/0x120 [ 2121.137140] sock_recvmsg+0xff/0x180 [ 2121.137881] __sys_recvfrom+0x1be/0x2f0 [ 2121.138685] ? __ia32_sys_send+0x100/0x100 [ 2121.139547] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2121.140405] ? clockevents_program_event+0x131/0x360 [ 2121.141438] ? tick_program_event+0xa8/0x140 [ 2121.142313] ? hrtimer_interrupt+0x771/0x9b0 [ 2121.143209] __x64_sys_recvfrom+0xdd/0x1b0 [ 2121.144053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2121.145089] do_syscall_64+0x33/0x40 [ 2121.145833] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2121.146848] RIP: 0033:0x7f215657db19 [ 2121.147586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2121.151229] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2121.152740] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2121.154172] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2121.155583] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2121.157002] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2121.158414] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:28:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 5) 10:28:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2122.033432] FAULT_INJECTION: forcing a failure. [ 2122.033432] name failslab, interval 1, probability 0, space 0, times 1 [ 2122.036070] CPU: 1 PID: 11783 Comm: syz-executor.7 Not tainted 5.10.202 #1 [ 2122.037467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2122.039140] Call Trace: [ 2122.039675] dump_stack+0x107/0x167 [ 2122.040407] should_fail.cold+0x5/0xa [ 2122.041186] ? __alloc_skb+0x6d/0x5b0 [ 2122.041962] should_failslab+0x5/0x20 [ 2122.042735] kmem_cache_alloc_node+0x55/0x330 [ 2122.043637] __alloc_skb+0x6d/0x5b0 [ 2122.044368] ? ktime_get+0x158/0x1f0 [ 2122.045141] __tcp_send_ack.part.0+0x67/0x650 [ 2122.046050] tcp_send_ack+0x7d/0xa0 [ 2122.046782] tcp_cleanup_rbuf+0x468/0x5a0 [ 2122.047615] tcp_recvmsg+0xb85/0x2930 [ 2122.048395] ? tcp_splice_read+0x8c0/0x8c0 [ 2122.049267] ? sock_has_perm+0x1ea/0x280 [ 2122.050086] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2122.051122] ? lock_downgrade+0x6d0/0x6d0 [ 2122.051958] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2122.053019] ? tcp_splice_read+0x8c0/0x8c0 [ 2122.053868] inet6_recvmsg+0x13b/0x6e0 [ 2122.054652] ? inet6_bind+0x120/0x120 [ 2122.055420] ? security_socket_recvmsg+0x95/0xc0 [ 2122.056370] ? inet6_bind+0x120/0x120 [ 2122.057151] sock_recvmsg+0xff/0x180 [ 2122.057906] __sys_recvfrom+0x1be/0x2f0 [ 2122.058706] ? __ia32_sys_send+0x100/0x100 [ 2122.059553] ? lock_downgrade+0x6d0/0x6d0 [ 2122.060410] ? wait_for_completion_io+0x270/0x270 [ 2122.061389] ? rcu_read_lock_any_held+0x75/0xa0 [ 2122.062323] ? vfs_write+0x354/0xa70 [ 2122.063073] ? fput_many+0x2f/0x1a0 [ 2122.063804] ? ksys_write+0x1a9/0x260 [ 2122.064566] ? __ia32_sys_read+0xb0/0xb0 [ 2122.065399] __x64_sys_recvfrom+0xdd/0x1b0 [ 2122.066248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2122.067283] do_syscall_64+0x33/0x40 [ 2122.068032] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2122.069076] RIP: 0033:0x7f8f443d9b19 [ 2122.069819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2122.073504] RSP: 002b:00007f8f4194f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2122.075027] RAX: ffffffffffffffda RBX: 00007f8f444ecf60 RCX: 00007f8f443d9b19 [ 2122.076451] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2122.077895] RBP: 00007f8f4194f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2122.079324] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2122.080753] R13: 00007ffc2757173f R14: 00007f8f4194f300 R15: 0000000000022000 10:28:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 6) 10:28:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:44 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 6) 10:28:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}], 0x2, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 5) [ 2135.933541] FAULT_INJECTION: forcing a failure. [ 2135.933541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2135.935830] CPU: 1 PID: 11803 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2135.936899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2135.938188] Call Trace: [ 2135.938607] dump_stack+0x107/0x167 [ 2135.939182] should_fail.cold+0x5/0xa [ 2135.939777] _copy_to_iter+0x264/0x12d0 [ 2135.940396] ? mark_lock+0xf5/0x2df0 [ 2135.940976] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2135.941796] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2135.942552] ? lock_chain_count+0x20/0x20 [ 2135.943303] ? __virt_addr_valid+0x128/0x350 [ 2135.943978] ? __check_object_size+0x319/0x440 [ 2135.944671] simple_copy_to_iter+0x4c/0x70 [ 2135.945463] __skb_datagram_iter+0x4f7/0x880 [ 2135.946078] ? zerocopy_sg_from_iter+0x110/0x110 [ 2135.946740] skb_copy_datagram_iter+0x88/0x190 [ 2135.947268] tcp_recvmsg+0x13b5/0x2930 [ 2135.947813] ? tcp_splice_read+0x8c0/0x8c0 [ 2135.948306] ? sock_has_perm+0x1ea/0x280 [ 2135.948863] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2135.949947] ? lock_downgrade+0x6d0/0x6d0 [ 2135.950975] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2135.952251] ? tcp_splice_read+0x8c0/0x8c0 [ 2135.953314] inet6_recvmsg+0x13b/0x6e0 [ 2135.954287] ? inet6_bind+0x120/0x120 [ 2135.955224] ? security_socket_recvmsg+0x95/0xc0 [ 2135.956368] ? inet6_bind+0x120/0x120 [ 2135.957306] sock_recvmsg+0xff/0x180 [ 2135.958356] __sys_recvfrom+0x1be/0x2f0 [ 2135.959517] ? __ia32_sys_send+0x100/0x100 [ 2135.960548] ? lock_downgrade+0x6d0/0x6d0 [ 2135.961782] ? wait_for_completion_io+0x270/0x270 [ 2135.962924] ? rcu_read_lock_any_held+0x75/0xa0 [ 2135.963913] ? vfs_write+0x354/0xa70 [ 2135.964792] ? fput_many+0x2f/0x1a0 [ 2135.965733] ? ksys_write+0x1a9/0x260 [ 2135.966523] ? __ia32_sys_read+0xb0/0xb0 [ 2135.967457] __x64_sys_recvfrom+0xdd/0x1b0 [ 2135.968508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2135.969616] do_syscall_64+0x33/0x40 [ 2135.970531] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2135.971761] RIP: 0033:0x7f215657db19 [ 2135.972546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2135.976849] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2135.978483] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2135.980149] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2135.981710] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2135.983429] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2135.984994] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:28:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}], 0x2, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2136.145573] FAULT_INJECTION: forcing a failure. [ 2136.145573] name failslab, interval 1, probability 0, space 0, times 0 [ 2136.149368] CPU: 1 PID: 11805 Comm: syz-executor.7 Not tainted 5.10.202 #1 [ 2136.150740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2136.152011] Call Trace: [ 2136.152417] dump_stack+0x107/0x167 [ 2136.152979] should_fail.cold+0x5/0xa [ 2136.153574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2136.154380] ? __alloc_skb+0x6d/0x5b0 [ 2136.154972] should_failslab+0x5/0x20 [ 2136.155580] kmem_cache_alloc_node+0x55/0x330 [ 2136.156295] ? kmem_cache_free+0xa7/0x2d0 [ 2136.156956] __alloc_skb+0x6d/0x5b0 [ 2136.157545] __tcp_send_ack.part.0+0x67/0x650 [ 2136.158253] ? kmem_cache_free+0x249/0x2d0 [ 2136.158890] tcp_send_ack+0x7d/0xa0 [ 2136.159447] tcp_cleanup_rbuf+0x468/0x5a0 [ 2136.160072] tcp_recvmsg+0xb85/0x2930 [ 2136.160657] ? tcp_splice_read+0x8c0/0x8c0 [ 2136.161313] ? sock_has_perm+0x1ea/0x280 [ 2136.161925] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2136.162698] ? lock_downgrade+0x6d0/0x6d0 [ 2136.163330] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2136.164117] ? tcp_splice_read+0x8c0/0x8c0 [ 2136.164759] inet6_recvmsg+0x13b/0x6e0 [ 2136.165346] ? inet6_bind+0x120/0x120 [ 2136.165921] ? security_socket_recvmsg+0x95/0xc0 [ 2136.166640] ? inet6_bind+0x120/0x120 [ 2136.167224] sock_recvmsg+0xff/0x180 [ 2136.167789] __sys_recvfrom+0x1be/0x2f0 [ 2136.168393] ? __ia32_sys_send+0x100/0x100 [ 2136.169042] ? lock_downgrade+0x6d0/0x6d0 [ 2136.169708] ? wait_for_completion_io+0x270/0x270 [ 2136.170443] ? rcu_read_lock_any_held+0x75/0xa0 [ 2136.171150] ? vfs_write+0x354/0xa70 [ 2136.171713] ? fput_many+0x2f/0x1a0 [ 2136.172264] ? ksys_write+0x1a9/0x260 [ 2136.172844] ? __ia32_sys_read+0xb0/0xb0 [ 2136.173467] __x64_sys_recvfrom+0xdd/0x1b0 [ 2136.174121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2136.174904] do_syscall_64+0x33/0x40 [ 2136.175470] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2136.176254] RIP: 0033:0x7f8f443d9b19 [ 2136.176819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2136.179604] RSP: 002b:00007f8f4194f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2136.180760] RAX: ffffffffffffffda RBX: 00007f8f444ecf60 RCX: 00007f8f443d9b19 [ 2136.181848] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2136.182925] RBP: 00007f8f4194f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2136.184031] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2136.185112] R13: 00007ffc2757173f R14: 00007f8f4194f300 R15: 0000000000022000 [ 2136.188193] FAULT_INJECTION: forcing a failure. [ 2136.188193] name failslab, interval 1, probability 0, space 0, times 0 [ 2136.190236] CPU: 1 PID: 11804 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2136.191280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2136.192523] Call Trace: [ 2136.192925] dump_stack+0x107/0x167 [ 2136.193491] should_fail.cold+0x5/0xa [ 2136.194063] ? create_object.isra.0+0x3a/0xa20 [ 2136.194752] should_failslab+0x5/0x20 [ 2136.195322] kmem_cache_alloc+0x5b/0x310 [ 2136.195942] create_object.isra.0+0x3a/0xa20 [ 2136.196609] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2136.197410] kmem_cache_alloc_node+0x169/0x330 [ 2136.198109] __alloc_skb+0x6d/0x5b0 [ 2136.198660] ? ktime_get+0x158/0x1f0 [ 2136.199220] __tcp_send_ack.part.0+0x67/0x650 [ 2136.199900] tcp_send_ack+0x7d/0xa0 [ 2136.200441] tcp_cleanup_rbuf+0x468/0x5a0 [ 2136.201066] tcp_recvmsg+0xb85/0x2930 [ 2136.201678] ? tcp_splice_read+0x8c0/0x8c0 [ 2136.202318] ? sock_has_perm+0x1ea/0x280 [ 2136.202931] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2136.203702] ? lock_downgrade+0x6d0/0x6d0 [ 2136.204327] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2136.205121] ? tcp_splice_read+0x8c0/0x8c0 [ 2136.205766] inet6_recvmsg+0x13b/0x6e0 [ 2136.206354] ? inet6_bind+0x120/0x120 [ 2136.206929] ? security_socket_recvmsg+0x95/0xc0 [ 2136.207642] ? inet6_bind+0x120/0x120 [ 2136.208210] sock_recvmsg+0xff/0x180 [ 2136.208776] __sys_recvfrom+0x1be/0x2f0 [ 2136.209386] ? __ia32_sys_send+0x100/0x100 [ 2136.210019] ? lock_downgrade+0x6d0/0x6d0 [ 2136.210662] ? wait_for_completion_io+0x270/0x270 [ 2136.211387] ? rcu_read_lock_any_held+0x75/0xa0 [ 2136.212085] ? vfs_write+0x354/0xa70 [ 2136.212648] ? fput_many+0x2f/0x1a0 [ 2136.213207] ? ksys_write+0x1a9/0x260 [ 2136.213785] ? __ia32_sys_read+0xb0/0xb0 [ 2136.214398] __x64_sys_recvfrom+0xdd/0x1b0 [ 2136.215056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2136.215845] do_syscall_64+0x33/0x40 [ 2136.216406] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2136.217180] RIP: 0033:0x7fb9928b7b19 [ 2136.217741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2136.220499] RSP: 002b:00007fb98fe2d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2136.221646] RAX: ffffffffffffffda RBX: 00007fb9929caf60 RCX: 00007fb9928b7b19 [ 2136.222717] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2136.223782] RBP: 00007fb98fe2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2136.224853] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2136.225925] R13: 00007ffd0771d97f R14: 00007fb98fe2d300 R15: 0000000000022000 10:28:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}], 0x2, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {0x0}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {0x0}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 1) 10:28:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 7) [ 2136.951517] FAULT_INJECTION: forcing a failure. [ 2136.951517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.954266] CPU: 1 PID: 11828 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2136.955655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2136.957361] Call Trace: [ 2136.957897] dump_stack+0x107/0x167 [ 2136.958638] should_fail.cold+0x5/0xa [ 2136.959412] _copy_to_iter+0x264/0x12d0 [ 2136.960227] ? mark_lock+0xf5/0x2df0 [ 2136.960989] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2136.962075] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2136.963081] ? lock_chain_count+0x20/0x20 [ 2136.963930] ? __virt_addr_valid+0x128/0x350 [ 2136.964844] ? __check_object_size+0x319/0x440 [ 2136.965792] simple_copy_to_iter+0x4c/0x70 [ 2136.966667] __skb_datagram_iter+0x122/0x880 [ 2136.967577] ? do_raw_spin_lock+0x121/0x260 [ 2136.968492] ? zerocopy_sg_from_iter+0x110/0x110 [ 2136.969497] ? mark_held_locks+0x9e/0xe0 [ 2136.970350] skb_copy_datagram_iter+0x88/0x190 [ 2136.971304] tcp_recvmsg+0x13b5/0x2930 [ 2136.972138] ? tcp_splice_read+0x8c0/0x8c0 [ 2136.973025] ? sock_has_perm+0x1ea/0x280 [ 2136.973892] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2136.974974] ? lock_downgrade+0x6d0/0x6d0 [ 2136.975845] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2136.976941] ? tcp_splice_read+0x8c0/0x8c0 [ 2136.977839] inet6_recvmsg+0x13b/0x6e0 [ 2136.978631] ? inet6_bind+0x120/0x120 [ 2136.979433] ? security_socket_recvmsg+0x95/0xc0 [ 2136.980432] ? inet6_bind+0x120/0x120 [ 2136.981256] sock_recvmsg+0xff/0x180 [ 2136.982043] __sys_recvfrom+0x1be/0x2f0 [ 2136.982879] ? __ia32_sys_send+0x100/0x100 [ 2136.983763] ? lock_downgrade+0x6d0/0x6d0 [ 2136.984663] ? wait_for_completion_io+0x270/0x270 [ 2136.985668] ? rcu_read_lock_any_held+0x75/0xa0 [ 2136.986646] ? vfs_write+0x354/0xa70 [ 2136.987438] ? fput_many+0x2f/0x1a0 [ 2136.988199] ? ksys_write+0x1a9/0x260 [ 2136.988977] ? __ia32_sys_read+0xb0/0xb0 [ 2136.989856] __x64_sys_recvfrom+0xdd/0x1b0 [ 2136.990754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2136.991804] do_syscall_64+0x33/0x40 [ 2136.992607] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2136.993716] RIP: 0033:0x7fb8d74ccb19 [ 2136.994516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2136.998433] RSP: 002b:00007fb8d4a42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2137.000031] RAX: ffffffffffffffda RBX: 00007fb8d75dff60 RCX: 00007fb8d74ccb19 [ 2137.001589] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2137.002513] FAULT_INJECTION: forcing a failure. [ 2137.002513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2137.003137] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2137.003148] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2137.003159] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 [ 2137.011379] CPU: 0 PID: 11832 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2137.012820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2137.014490] Call Trace: [ 2137.015026] dump_stack+0x107/0x167 [ 2137.015768] should_fail.cold+0x5/0xa [ 2137.016535] _copy_to_iter+0x264/0x12d0 [ 2137.017352] ? mark_lock+0xf5/0x2df0 [ 2137.018102] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2137.019162] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2137.020146] ? lock_chain_count+0x20/0x20 [ 2137.020974] ? __virt_addr_valid+0x128/0x350 [ 2137.021889] ? __check_object_size+0x319/0x440 [ 2137.022822] simple_copy_to_iter+0x4c/0x70 [ 2137.023669] __skb_datagram_iter+0x4f7/0x880 [ 2137.024560] ? zerocopy_sg_from_iter+0x110/0x110 [ 2137.025525] skb_copy_datagram_iter+0x88/0x190 [ 2137.026453] tcp_recvmsg+0x13b5/0x2930 [ 2137.027250] ? tcp_splice_read+0x8c0/0x8c0 [ 2137.028112] ? sock_has_perm+0x1ea/0x280 [ 2137.028932] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2137.029974] ? lock_downgrade+0x6d0/0x6d0 [ 2137.030807] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2137.031869] ? tcp_splice_read+0x8c0/0x8c0 [ 2137.032721] inet6_recvmsg+0x13b/0x6e0 [ 2137.033532] ? inet6_bind+0x120/0x120 [ 2137.034299] ? security_socket_recvmsg+0x95/0xc0 [ 2137.035268] ? inet6_bind+0x120/0x120 [ 2137.036038] sock_recvmsg+0xff/0x180 [ 2137.036801] __sys_recvfrom+0x1be/0x2f0 [ 2137.037608] ? __ia32_sys_send+0x100/0x100 [ 2137.038459] ? lock_downgrade+0x6d0/0x6d0 [ 2137.039313] ? wait_for_completion_io+0x270/0x270 [ 2137.040290] ? rcu_read_lock_any_held+0x75/0xa0 [ 2137.041250] ? vfs_write+0x354/0xa70 [ 2137.042002] ? fput_many+0x2f/0x1a0 [ 2137.042740] ? ksys_write+0x1a9/0x260 [ 2137.043504] ? __ia32_sys_read+0xb0/0xb0 [ 2137.044333] __x64_sys_recvfrom+0xdd/0x1b0 [ 2137.045184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2137.046228] do_syscall_64+0x33/0x40 [ 2137.046979] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2137.048016] RIP: 0033:0x7f215657db19 [ 2137.048763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2137.052476] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2137.054018] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2137.055437] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2137.056853] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2137.058275] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2137.059688] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:28:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 6) 10:28:59 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x630000, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006e80)={&(0x7f0000006ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000006a9f22ef9b3595dc00000c000000", @ANYRES32=0x0, @ANYBLOB="04000380"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x20, 0x7f, 0x40, 0x95, 0x0, 0x632e, 0x8000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7cd, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x5080, 0x8, 0x10001, 0x4, 0x8, 0x5, 0x0, 0x0, 0x768}, 0x0, 0xb, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x9, 0x5, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8000, 0x8, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0xd6, 0x6, 0xffffff28, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x80, 0x20, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x6, 0x5, 0x80, @remote, @rand_addr=' \x01\x00', 0x40, 0x7800, 0x7fff, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x248, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x796}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2000004}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r4}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x2, 0x7, 0x2}, {0x7, 0x9, 0x2, 0x80000000}, {0x7, 0x1, 0x7e, 0x6}, {0x8000, 0x81, 0x4, 0x10000}, {0xc7, 0x8, 0xa4, 0x9}]}}}]}}, {{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd039}}, {0x8}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x4005}, 0x200400d0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r2, 0x6, 0xffff, 0x80000001}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8802) r8 = fcntl$dupfd(r7, 0x0, r3) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x0, 0x5, 0x80, 0x8e, 0x0, 0x1ff, 0x10420, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x68a80, 0x4, 0x80000000, 0x0, 0xe95, 0x94c, 0x6, 0x0, 0x0, 0x0, 0x154}, 0x0, 0x6, 0xffffffffffffffff, 0x1) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:28:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 8) 10:28:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {0x0}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:28:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 2) 10:28:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:28:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2150.787453] FAULT_INJECTION: forcing a failure. [ 2150.787453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2150.790028] CPU: 0 PID: 11851 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2150.791423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.793097] Call Trace: [ 2150.793668] dump_stack+0x107/0x167 [ 2150.794413] should_fail.cold+0x5/0xa [ 2150.795192] _copy_to_iter+0x264/0x12d0 [ 2150.796008] ? mark_lock+0xf5/0x2df0 [ 2150.796767] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2150.797865] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2150.798859] ? lock_chain_count+0x20/0x20 [ 2150.799701] ? __virt_addr_valid+0x128/0x350 [ 2150.800595] ? __check_object_size+0x319/0x440 [ 2150.801567] simple_copy_to_iter+0x4c/0x70 [ 2150.802429] __skb_datagram_iter+0x4f7/0x880 [ 2150.803326] ? zerocopy_sg_from_iter+0x110/0x110 [ 2150.804393] skb_copy_datagram_iter+0x88/0x190 [ 2150.805319] tcp_recvmsg+0x13b5/0x2930 [ 2150.806148] ? tcp_splice_read+0x8c0/0x8c0 [ 2150.807015] ? sock_has_perm+0x1ea/0x280 [ 2150.807845] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2150.808892] ? lock_downgrade+0x6d0/0x6d0 [ 2150.809757] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2150.810822] ? tcp_splice_read+0x8c0/0x8c0 [ 2150.811681] inet6_recvmsg+0x13b/0x6e0 [ 2150.812470] ? inet6_bind+0x120/0x120 [ 2150.813247] ? security_socket_recvmsg+0x95/0xc0 [ 2150.814241] ? inet6_bind+0x120/0x120 [ 2150.815009] sock_recvmsg+0xff/0x180 [ 2150.815762] __sys_recvfrom+0x1be/0x2f0 [ 2150.816559] ? __ia32_sys_send+0x100/0x100 [ 2150.817434] ? lock_downgrade+0x6d0/0x6d0 [ 2150.818295] ? wait_for_completion_io+0x270/0x270 [ 2150.819270] ? rcu_read_lock_any_held+0x75/0xa0 [ 2150.820206] ? vfs_write+0x354/0xa70 [ 2150.820954] ? fput_many+0x2f/0x1a0 [ 2150.821728] ? ksys_write+0x1a9/0x260 [ 2150.822491] ? __ia32_sys_read+0xb0/0xb0 [ 2150.823314] __x64_sys_recvfrom+0xdd/0x1b0 [ 2150.824160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2150.825185] do_syscall_64+0x33/0x40 [ 2150.825963] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2150.826984] RIP: 0033:0x7fb8d74ccb19 [ 2150.827744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.831417] RSP: 002b:00007fb8d4a42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2150.832944] RAX: ffffffffffffffda RBX: 00007fb8d75dff60 RCX: 00007fb8d74ccb19 [ 2150.834398] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2150.835826] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.837244] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2150.838694] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 10:28:59 executing program 6: r0 = open(0x0, 0x100, 0x38) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) openat(r2, &(0x7f0000000340)='./file0\x00', 0x2, 0xa4) lseek(r1, 0x0, 0x2) statx(r1, &(0x7f0000000180)='./file0\x00', 0x100, 0x8, &(0x7f00000001c0)) sendfile(r0, r0, &(0x7f0000000140)=0x1, 0x6) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x100000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x2c4880, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d67642c726695c36f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.u,context=sysadm_u,hash,\x00']) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 10:28:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2150.976452] FAULT_INJECTION: forcing a failure. [ 2150.976452] name failslab, interval 1, probability 0, space 0, times 0 [ 2150.979110] CPU: 0 PID: 11849 Comm: syz-executor.0 Not tainted 5.10.202 #1 [ 2150.980489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.982173] Call Trace: [ 2150.982708] dump_stack+0x107/0x167 [ 2150.983444] should_fail.cold+0x5/0xa [ 2150.984222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2150.985271] ? __alloc_skb+0x6d/0x5b0 [ 2150.986095] should_failslab+0x5/0x20 [ 2150.986857] kmem_cache_alloc_node+0x55/0x330 [ 2150.987749] ? kmem_cache_free+0xa7/0x2d0 [ 2150.988609] __alloc_skb+0x6d/0x5b0 [ 2150.989353] __tcp_send_ack.part.0+0x67/0x650 [ 2150.990294] ? kmem_cache_free+0x249/0x2d0 [ 2150.990320] tcp_send_ack+0x7d/0xa0 [ 2150.990336] tcp_cleanup_rbuf+0x468/0x5a0 [ 2150.992878] tcp_recvmsg+0xb85/0x2930 [ 2150.993724] ? tcp_splice_read+0x8c0/0x8c0 [ 2150.994586] ? sock_has_perm+0x1ea/0x280 [ 2150.995433] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2150.996473] ? lock_downgrade+0x6d0/0x6d0 [ 2150.997317] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2150.998390] ? tcp_splice_read+0x8c0/0x8c0 [ 2150.999256] inet6_recvmsg+0x13b/0x6e0 [ 2151.000035] ? inet6_bind+0x120/0x120 [ 2151.000824] ? security_socket_recvmsg+0x95/0xc0 [ 2151.000940] FAULT_INJECTION: forcing a failure. [ 2151.000940] name failslab, interval 1, probability 0, space 0, times 0 [ 2151.001796] ? inet6_bind+0x120/0x120 [ 2151.001814] sock_recvmsg+0xff/0x180 [ 2151.001838] __sys_recvfrom+0x1be/0x2f0 [ 2151.006362] ? __ia32_sys_send+0x100/0x100 [ 2151.007230] ? lock_downgrade+0x6d0/0x6d0 [ 2151.008106] ? wait_for_completion_io+0x270/0x270 [ 2151.009098] ? rcu_read_lock_any_held+0x75/0xa0 [ 2151.010074] ? vfs_write+0x354/0xa70 [ 2151.010846] ? fput_many+0x2f/0x1a0 [ 2151.011590] ? ksys_write+0x1a9/0x260 [ 2151.012399] ? __ia32_sys_read+0xb0/0xb0 [ 2151.013409] __x64_sys_recvfrom+0xdd/0x1b0 [ 2151.014285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2151.015528] do_syscall_64+0x33/0x40 [ 2151.016310] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2151.017561] RIP: 0033:0x7fb9928b7b19 [ 2151.018330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2151.022087] RSP: 002b:00007fb98fe2d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2151.023636] RAX: ffffffffffffffda RBX: 00007fb9929caf60 RCX: 00007fb9928b7b19 [ 2151.025098] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2151.026585] RBP: 00007fb98fe2d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2151.028052] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2151.029528] R13: 00007ffd0771d97f R14: 00007fb98fe2d300 R15: 0000000000022000 [ 2151.031056] CPU: 1 PID: 11852 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2151.032614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2151.034462] Call Trace: [ 2151.035053] dump_stack+0x107/0x167 [ 2151.035872] should_fail.cold+0x5/0xa [ 2151.036873] should_failslab+0x5/0x20 [ 2151.037808] __kmalloc_node_track_caller+0x74/0x3b0 [ 2151.039033] ? __tcp_send_ack.part.0+0x67/0x650 [ 2151.040073] __alloc_skb+0xb1/0x5b0 [ 2151.040887] __tcp_send_ack.part.0+0x67/0x650 [ 2151.041891] ? kmem_cache_free+0x249/0x2d0 [ 2151.042832] tcp_send_ack+0x7d/0xa0 [ 2151.043637] tcp_cleanup_rbuf+0x468/0x5a0 [ 2151.044555] tcp_recvmsg+0xb85/0x2930 [ 2151.045448] ? tcp_splice_read+0x8c0/0x8c0 [ 2151.046393] ? sock_has_perm+0x1ea/0x280 [ 2151.047295] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2151.048437] ? lock_downgrade+0x6d0/0x6d0 [ 2151.049365] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2151.050526] ? tcp_splice_read+0x8c0/0x8c0 [ 2151.051459] inet6_recvmsg+0x13b/0x6e0 [ 2151.052323] ? inet6_bind+0x120/0x120 [ 2151.053170] ? security_socket_recvmsg+0x95/0xc0 [ 2151.054225] ? inet6_bind+0x120/0x120 [ 2151.055067] sock_recvmsg+0xff/0x180 [ 2151.055892] __sys_recvfrom+0x1be/0x2f0 [ 2151.056774] ? __ia32_sys_send+0x100/0x100 [ 2151.057728] ? lock_downgrade+0x6d0/0x6d0 [ 2151.058673] ? wait_for_completion_io+0x270/0x270 [ 2151.059739] ? rcu_read_lock_any_held+0x75/0xa0 [ 2151.060763] ? vfs_write+0x354/0xa70 [ 2151.061603] ? fput_many+0x2f/0x1a0 [ 2151.062408] ? ksys_write+0x1a9/0x260 [ 2151.063251] ? __ia32_sys_read+0xb0/0xb0 [ 2151.064161] __x64_sys_recvfrom+0xdd/0x1b0 [ 2151.065103] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2151.066262] do_syscall_64+0x33/0x40 [ 2151.067096] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2151.068236] RIP: 0033:0x7f215657db19 [ 2151.069070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2151.073165] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2151.074872] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2151.076454] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2151.078047] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2151.079623] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2151.081205] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:29:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:29:00 executing program 6: r0 = open(0x0, 0x100, 0x38) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) openat(r2, &(0x7f0000000340)='./file0\x00', 0x2, 0xa4) lseek(r1, 0x0, 0x2) statx(r1, &(0x7f0000000180)='./file0\x00', 0x100, 0x8, &(0x7f00000001c0)) sendfile(r0, r0, &(0x7f0000000140)=0x1, 0x6) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x100000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x2c4880, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d67642c726695c36f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.u,context=sysadm_u,hash,\x00']) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 10:29:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:29:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:29:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:29:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 9) 10:29:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 3) [ 2152.064554] FAULT_INJECTION: forcing a failure. [ 2152.064554] name failslab, interval 1, probability 0, space 0, times 0 [ 2152.067381] CPU: 1 PID: 11886 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2152.068783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2152.070468] Call Trace: [ 2152.071002] dump_stack+0x107/0x167 [ 2152.071742] should_fail.cold+0x5/0xa [ 2152.072504] ? create_object.isra.0+0x3a/0xa20 [ 2152.073456] should_failslab+0x5/0x20 [ 2152.074222] kmem_cache_alloc+0x5b/0x310 [ 2152.075050] create_object.isra.0+0x3a/0xa20 [ 2152.075950] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2152.076994] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2152.078059] ? __tcp_send_ack.part.0+0x67/0x650 [ 2152.079009] ? kmem_cache_free+0xa7/0x2d0 [ 2152.079846] __alloc_skb+0xb1/0x5b0 [ 2152.080584] __tcp_send_ack.part.0+0x67/0x650 [ 2152.081484] ? kmem_cache_free+0x249/0x2d0 [ 2152.082328] tcp_send_ack+0x7d/0xa0 [ 2152.083052] tcp_cleanup_rbuf+0x468/0x5a0 [ 2152.083877] tcp_recvmsg+0xb85/0x2930 [ 2152.084649] ? tcp_splice_read+0x8c0/0x8c0 [ 2152.085510] ? sock_has_perm+0x1ea/0x280 [ 2152.086321] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2152.087349] ? lock_downgrade+0x6d0/0x6d0 [ 2152.088176] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2152.089217] ? tcp_splice_read+0x8c0/0x8c0 [ 2152.090076] inet6_recvmsg+0x13b/0x6e0 [ 2152.090852] ? inet6_bind+0x120/0x120 [ 2152.091613] ? security_socket_recvmsg+0x95/0xc0 [ 2152.092553] ? inet6_bind+0x120/0x120 [ 2152.093309] sock_recvmsg+0xff/0x180 [ 2152.094062] __sys_recvfrom+0x1be/0x2f0 [ 2152.094854] ? __ia32_sys_send+0x100/0x100 [ 2152.095690] ? lock_downgrade+0x6d0/0x6d0 [ 2152.096541] ? wait_for_completion_io+0x270/0x270 [ 2152.097513] ? rcu_read_lock_any_held+0x75/0xa0 [ 2152.098437] ? vfs_write+0x354/0xa70 [ 2152.099179] ? fput_many+0x2f/0x1a0 [ 2152.099904] ? ksys_write+0x1a9/0x260 [ 2152.100659] ? __ia32_sys_read+0xb0/0xb0 [ 2152.101487] __x64_sys_recvfrom+0xdd/0x1b0 [ 2152.102324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2152.103346] do_syscall_64+0x33/0x40 [ 2152.103501] FAULT_INJECTION: forcing a failure. [ 2152.103501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2152.104085] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2152.104098] RIP: 0033:0x7f215657db19 [ 2152.104117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.104127] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2152.104146] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2152.104157] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2152.104167] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.104177] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2152.104188] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 [ 2152.122443] CPU: 0 PID: 11892 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2152.123852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2152.125531] Call Trace: [ 2152.126067] dump_stack+0x107/0x167 [ 2152.126804] should_fail.cold+0x5/0xa [ 2152.127572] _copy_to_iter+0x264/0x12d0 [ 2152.128380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2152.129438] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2152.130518] ? trace_hardirqs_on+0x5b/0x180 [ 2152.131383] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2152.132466] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2152.133469] ? __virt_addr_valid+0x128/0x350 [ 2152.134357] ? __check_object_size+0x319/0x440 [ 2152.135297] simple_copy_to_iter+0x4c/0x70 [ 2152.136153] __skb_datagram_iter+0x4f7/0x880 [ 2152.137048] ? zerocopy_sg_from_iter+0x110/0x110 [ 2152.138026] skb_copy_datagram_iter+0x88/0x190 [ 2152.138951] tcp_recvmsg+0x13b5/0x2930 [ 2152.139759] ? tcp_splice_read+0x8c0/0x8c0 [ 2152.140623] ? sock_has_perm+0x1ea/0x280 [ 2152.141464] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2152.142650] ? lock_downgrade+0x6d0/0x6d0 [ 2152.143500] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2152.144558] ? tcp_splice_read+0x8c0/0x8c0 [ 2152.145421] inet6_recvmsg+0x13b/0x6e0 [ 2152.146208] ? inet6_bind+0x120/0x120 [ 2152.146983] ? security_socket_recvmsg+0x95/0xc0 [ 2152.147934] ? inet6_bind+0x120/0x120 [ 2152.148703] sock_recvmsg+0xff/0x180 [ 2152.149461] __sys_recvfrom+0x1be/0x2f0 [ 2152.150265] ? __ia32_sys_send+0x100/0x100 [ 2152.151116] ? lock_downgrade+0x6d0/0x6d0 [ 2152.151977] ? wait_for_completion_io+0x270/0x270 [ 2152.152951] ? rcu_read_lock_any_held+0x75/0xa0 [ 2152.153907] ? vfs_write+0x354/0xa70 [ 2152.154663] ? fput_many+0x2f/0x1a0 [ 2152.155399] ? ksys_write+0x1a9/0x260 [ 2152.156166] ? __ia32_sys_read+0xb0/0xb0 [ 2152.156991] __x64_sys_recvfrom+0xdd/0x1b0 [ 2152.157854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2152.158894] do_syscall_64+0x33/0x40 [ 2152.159650] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2152.160692] RIP: 0033:0x7fb8d74ccb19 [ 2152.161456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.165206] RSP: 002b:00007fb8d4a42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2152.166773] RAX: ffffffffffffffda RBX: 00007fb8d75dff60 RCX: 00007fb8d74ccb19 [ 2152.168227] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2152.169682] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.171137] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2152.172593] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 10:29:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x300, 0xcd08, 0x0, 0x0) 10:29:14 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x300, 0xcd08, 0x0, 0x0) 10:29:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:29:14 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:29:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 4) 10:29:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:29:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:29:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 10) 10:29:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Q', 0x2}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2165.591962] FAULT_INJECTION: forcing a failure. [ 2165.591962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2165.594794] CPU: 0 PID: 11912 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2165.596182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2165.597854] Call Trace: [ 2165.598392] dump_stack+0x107/0x167 [ 2165.599127] should_fail.cold+0x5/0xa [ 2165.599900] _copy_to_iter+0x264/0x12d0 [ 2165.600713] ? zerocopy_sg_from_iter+0x110/0x110 [ 2165.601700] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2165.602706] ? __virt_addr_valid+0xa3/0x350 [ 2165.603589] ? __virt_addr_valid+0x128/0x350 [ 2165.604495] ? __check_object_size+0x319/0x440 [ 2165.605434] simple_copy_to_iter+0x4c/0x70 [ 2165.606304] __skb_datagram_iter+0x122/0x880 [ 2165.607208] ? sock_set_mark+0x130/0x130 [ 2165.608041] ? zerocopy_sg_from_iter+0x110/0x110 [ 2165.609019] skb_copy_datagram_iter+0x88/0x190 [ 2165.609954] tcp_recvmsg+0x13b5/0x2930 [ 2165.610763] ? tcp_splice_read+0x8c0/0x8c0 [ 2165.611640] ? sock_has_perm+0x1ea/0x280 [ 2165.612464] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2165.613538] ? lock_downgrade+0x6d0/0x6d0 [ 2165.614387] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2165.615465] ? tcp_splice_read+0x8c0/0x8c0 [ 2165.616321] inet6_recvmsg+0x13b/0x6e0 [ 2165.617127] ? inet6_bind+0x120/0x120 [ 2165.617906] ? security_socket_recvmsg+0x95/0xc0 [ 2165.618881] ? inet6_bind+0x120/0x120 [ 2165.619654] sock_recvmsg+0xff/0x180 [ 2165.620412] __sys_recvfrom+0x1be/0x2f0 [ 2165.621224] ? __ia32_sys_send+0x100/0x100 [ 2165.622087] ? lock_downgrade+0x6d0/0x6d0 [ 2165.622955] ? wait_for_completion_io+0x270/0x270 [ 2165.623941] ? rcu_read_lock_any_held+0x75/0xa0 [ 2165.624891] ? vfs_write+0x354/0xa70 [ 2165.625672] ? fput_many+0x2f/0x1a0 [ 2165.626415] ? ksys_write+0x1a9/0x260 [ 2165.627189] ? __ia32_sys_read+0xb0/0xb0 [ 2165.628021] __x64_sys_recvfrom+0xdd/0x1b0 [ 2165.628875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.629924] do_syscall_64+0x33/0x40 [ 2165.630680] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2165.631721] RIP: 0033:0x7fb8d74ccb19 [ 2165.632473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.636221] RSP: 002b:00007fb8d4a42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2165.637787] RAX: ffffffffffffffda RBX: 00007fb8d75dff60 RCX: 00007fb8d74ccb19 [ 2165.639240] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2165.640680] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.642144] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2165.643602] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 [ 2165.760420] FAULT_INJECTION: forcing a failure. [ 2165.760420] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.763107] CPU: 1 PID: 11913 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2165.764513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2165.766203] Call Trace: [ 2165.766740] dump_stack+0x107/0x167 [ 2165.767472] should_fail.cold+0x5/0xa 10:29:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Q', 0x2}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2165.768238] ? __alloc_skb+0x6d/0x5b0 [ 2165.769208] should_failslab+0x5/0x20 [ 2165.769996] kmem_cache_alloc_node+0x55/0x330 [ 2165.770907] ? tcp_trim_head+0x470/0x470 [ 2165.771735] __alloc_skb+0x6d/0x5b0 [ 2165.772483] tcp_collapse+0x42c/0xf20 [ 2165.773265] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2165.774109] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2165.775110] ? tcp_xmit_recovery+0x86/0x180 [ 2165.775990] ? tcp_ack+0xebc/0x5650 [ 2165.776743] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2165.777712] tcp_data_queue+0x16ba/0x47f0 [ 2165.778571] ? mark_held_locks+0x9e/0xe0 [ 2165.779400] ? tcp_data_ready+0x500/0x500 [ 2165.780234] ? tcp_urg.part.0+0x157/0x2e0 [ 2165.781075] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2165.781976] ? tcp_validate_incoming+0x431/0x16a0 [ 2165.782957] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2165.783907] tcp_rcv_established+0x868/0x1e30 [ 2165.784824] ? tcp_check_space+0x6c0/0x6c0 [ 2165.785710] tcp_v6_do_rcv+0x7b3/0x1520 [ 2165.786530] __release_sock+0x139/0x3b0 [ 2165.787348] release_sock+0x54/0x1b0 [ 2165.788099] sk_wait_data+0x1a7/0x4d0 [ 2165.788872] ? sock_set_mark+0x130/0x130 [ 2165.789709] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2165.790730] ? tcp_send_ack+0x7d/0xa0 [ 2165.791487] tcp_recvmsg+0x17b2/0x2930 [ 2165.792282] ? tcp_splice_read+0x8c0/0x8c0 [ 2165.793139] ? sock_has_perm+0x1ea/0x280 [ 2165.793982] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2165.795043] ? lock_downgrade+0x6d0/0x6d0 [ 2165.795886] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2165.796939] ? tcp_splice_read+0x8c0/0x8c0 [ 2165.797795] inet6_recvmsg+0x13b/0x6e0 [ 2165.798581] ? inet6_bind+0x120/0x120 [ 2165.799349] ? security_socket_recvmsg+0x95/0xc0 [ 2165.800298] ? inet6_bind+0x120/0x120 [ 2165.801062] sock_recvmsg+0xff/0x180 [ 2165.801829] __sys_recvfrom+0x1be/0x2f0 [ 2165.802629] ? __ia32_sys_send+0x100/0x100 [ 2165.803473] ? lock_downgrade+0x6d0/0x6d0 [ 2165.804330] ? wait_for_completion_io+0x270/0x270 [ 2165.805298] ? rcu_read_lock_any_held+0x75/0xa0 [ 2165.806239] ? vfs_write+0x354/0xa70 [ 2165.806992] ? fput_many+0x2f/0x1a0 [ 2165.807721] ? ksys_write+0x1a9/0x260 [ 2165.808483] ? __ia32_sys_read+0xb0/0xb0 [ 2165.809298] __x64_sys_recvfrom+0xdd/0x1b0 [ 2165.810163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.811196] do_syscall_64+0x33/0x40 [ 2165.811944] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2165.812970] RIP: 0033:0x7f215657db19 [ 2165.813731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.817430] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2165.818973] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2165.820412] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2165.821852] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.823287] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2165.824722] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:29:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Q', 0x2}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:29:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qe', 0x3}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:29:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 5) 10:29:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:29:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:29:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2166.807484] FAULT_INJECTION: forcing a failure. [ 2166.807484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2166.810295] CPU: 0 PID: 11939 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2166.811722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2166.813420] Call Trace: [ 2166.813989] dump_stack+0x107/0x167 [ 2166.814734] should_fail.cold+0x5/0xa [ 2166.815520] _copy_to_iter+0x264/0x12d0 [ 2166.816348] ? zerocopy_sg_from_iter+0x110/0x110 [ 2166.817317] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2166.818323] ? __virt_addr_valid+0x1b2/0x350 [ 2166.819239] ? __virt_addr_valid+0x128/0x350 [ 2166.820161] ? __check_object_size+0x319/0x440 [ 2166.821102] simple_copy_to_iter+0x4c/0x70 [ 2166.821973] __skb_datagram_iter+0x4f7/0x880 [ 2166.822865] ? zerocopy_sg_from_iter+0x110/0x110 [ 2166.823837] skb_copy_datagram_iter+0x88/0x190 [ 2166.824769] tcp_recvmsg+0x13b5/0x2930 [ 2166.825598] ? tcp_splice_read+0x8c0/0x8c0 [ 2166.826469] ? sock_has_perm+0x1ea/0x280 [ 2166.827309] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2166.828364] ? lock_downgrade+0x6d0/0x6d0 [ 2166.829212] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2166.830294] ? tcp_splice_read+0x8c0/0x8c0 [ 2166.831152] inet6_recvmsg+0x13b/0x6e0 [ 2166.831943] ? inet6_bind+0x120/0x120 [ 2166.832723] ? security_socket_recvmsg+0x95/0xc0 [ 2166.833703] ? inet6_bind+0x120/0x120 [ 2166.834481] sock_recvmsg+0xff/0x180 [ 2166.835246] __sys_recvfrom+0x1be/0x2f0 [ 2166.836064] ? __ia32_sys_send+0x100/0x100 [ 2166.836932] ? lock_downgrade+0x6d0/0x6d0 [ 2166.837812] ? wait_for_completion_io+0x270/0x270 [ 2166.838798] ? rcu_read_lock_any_held+0x75/0xa0 [ 2166.839742] ? vfs_write+0x354/0xa70 [ 2166.840507] ? fput_many+0x2f/0x1a0 [ 2166.841248] ? ksys_write+0x1a9/0x260 [ 2166.842046] ? __ia32_sys_read+0xb0/0xb0 [ 2166.842877] __x64_sys_recvfrom+0xdd/0x1b0 [ 2166.843748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2166.844803] do_syscall_64+0x33/0x40 [ 2166.845570] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2166.846626] RIP: 0033:0x7fb8d74ccb19 [ 2166.847383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2166.851135] RSP: 002b:00007fb8d4a42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2166.852690] RAX: ffffffffffffffda RBX: 00007fb8d75dff60 RCX: 00007fb8d74ccb19 [ 2166.854145] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2166.855584] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2166.857037] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2166.858527] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 10:29:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:29:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qe', 0x3}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:29:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 11) 10:29:29 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:29:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x500, 0xcd08, 0x0, 0x0) 10:29:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x66f, 0xcd08, 0x0, 0x0) 10:29:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 6) 10:29:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:29:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qe', 0x3}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2180.105254] FAULT_INJECTION: forcing a failure. [ 2180.105254] name failslab, interval 1, probability 0, space 0, times 0 [ 2180.106678] CPU: 0 PID: 11963 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2180.107533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2180.108427] Call Trace: [ 2180.108720] dump_stack+0x107/0x167 [ 2180.109109] should_fail.cold+0x5/0xa [ 2180.109529] ? create_object.isra.0+0x3a/0xa20 [ 2180.110034] should_failslab+0x5/0x20 [ 2180.110454] kmem_cache_alloc+0x5b/0x310 [ 2180.110895] create_object.isra.0+0x3a/0xa20 [ 2180.111380] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2180.111951] kmem_cache_alloc_node+0x169/0x330 [ 2180.112461] __alloc_skb+0x6d/0x5b0 [ 2180.112876] __tcp_send_ack.part.0+0x67/0x650 [ 2180.113378] tcp_send_ack+0x7d/0xa0 [ 2180.113792] tcp_cleanup_rbuf+0x468/0x5a0 [ 2180.114259] tcp_recvmsg+0xb85/0x2930 [ 2180.114689] ? tcp_splice_read+0x8c0/0x8c0 [ 2180.115169] ? sock_has_perm+0x1ea/0x280 [ 2180.115632] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2180.116202] ? lock_downgrade+0x6d0/0x6d0 [ 2180.116649] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2180.117231] ? tcp_splice_read+0x8c0/0x8c0 [ 2180.117689] inet6_recvmsg+0x13b/0x6e0 [ 2180.118148] ? inet6_bind+0x120/0x120 [ 2180.118571] ? security_socket_recvmsg+0x95/0xc0 [ 2180.119101] ? inet6_bind+0x120/0x120 [ 2180.119522] sock_recvmsg+0xff/0x180 [ 2180.119939] __sys_recvfrom+0x1be/0x2f0 [ 2180.120385] ? __ia32_sys_send+0x100/0x100 [ 2180.120856] ? lock_downgrade+0x6d0/0x6d0 [ 2180.121337] ? wait_for_completion_io+0x270/0x270 [ 2180.121895] ? rcu_read_lock_any_held+0x75/0xa0 [ 2180.122407] ? vfs_write+0x354/0xa70 [ 2180.122826] ? fput_many+0x2f/0x1a0 [ 2180.123225] ? ksys_write+0x1a9/0x260 [ 2180.123649] ? __ia32_sys_read+0xb0/0xb0 [ 2180.124085] __x64_sys_recvfrom+0xdd/0x1b0 [ 2180.124551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2180.125125] do_syscall_64+0x33/0x40 [ 2180.125544] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2180.126136] RIP: 0033:0x7fb8d74ccb19 [ 2180.126550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2180.128592] RSP: 002b:00007fb8d4a42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2180.129440] RAX: ffffffffffffffda RBX: 00007fb8d75dff60 RCX: 00007fb8d74ccb19 [ 2180.130248] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2180.131045] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2180.131848] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2180.132640] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 10:29:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000240)='/Qer', 0x4}], 0x2, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2180.339540] FAULT_INJECTION: forcing a failure. [ 2180.339540] name failslab, interval 1, probability 0, space 0, times 0 [ 2180.342025] CPU: 0 PID: 11968 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2180.343083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2180.344456] Call Trace: [ 2180.344873] dump_stack+0x107/0x167 [ 2180.345427] should_fail.cold+0x5/0xa [ 2180.346025] ? ___slab_alloc+0x155/0x700 [ 2180.346655] ? create_object.isra.0+0x3a/0xa20 [ 2180.347354] should_failslab+0x5/0x20 [ 2180.347945] kmem_cache_alloc+0x5b/0x310 [ 2180.348564] create_object.isra.0+0x3a/0xa20 [ 2180.349238] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2180.350024] kmem_cache_alloc_node+0x169/0x330 [ 2180.350727] __alloc_skb+0x6d/0x5b0 [ 2180.351281] ? ktime_get+0x158/0x1f0 [ 2180.351857] __tcp_send_ack.part.0+0x67/0x650 [ 2180.352545] tcp_send_ack+0x7d/0xa0 [ 2180.353103] tcp_cleanup_rbuf+0x468/0x5a0 [ 2180.353757] tcp_recvmsg+0xb85/0x2930 [ 2180.354356] ? tcp_splice_read+0x8c0/0x8c0 [ 2180.355009] ? sock_has_perm+0x1ea/0x280 [ 2180.355629] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2180.356414] ? lock_downgrade+0x6d0/0x6d0 [ 2180.357053] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2180.357862] ? tcp_splice_read+0x8c0/0x8c0 [ 2180.358511] inet6_recvmsg+0x13b/0x6e0 [ 2180.359115] ? inet6_bind+0x120/0x120 [ 2180.359699] ? security_socket_recvmsg+0x95/0xc0 [ 2180.360427] ? inet6_bind+0x120/0x120 [ 2180.361009] sock_recvmsg+0xff/0x180 [ 2180.361584] __sys_recvfrom+0x1be/0x2f0 [ 2180.362204] ? __ia32_sys_send+0x100/0x100 [ 2180.362850] ? lock_downgrade+0x6d0/0x6d0 [ 2180.363507] ? wait_for_completion_io+0x270/0x270 [ 2180.364242] ? rcu_read_lock_any_held+0x75/0xa0 [ 2180.364952] ? vfs_write+0x354/0xa70 [ 2180.365521] ? fput_many+0x2f/0x1a0 [ 2180.366092] ? ksys_write+0x1a9/0x260 [ 2180.366675] ? __ia32_sys_read+0xb0/0xb0 [ 2180.367301] __x64_sys_recvfrom+0xdd/0x1b0 [ 2180.367947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2180.368738] do_syscall_64+0x33/0x40 [ 2180.369310] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2180.370099] RIP: 0033:0x7f215657db19 [ 2180.370673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2180.373494] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2180.374680] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2180.375776] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2180.376872] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2180.377973] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2180.379069] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:29:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000240)='/Qer', 0x4}], 0x2, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:29:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000240)='/Qer', 0x4}], 0x2, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:29:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {0x0}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:29:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:29:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa118100300086dd6096153f00383a000000000000000000f100000000000000ff0200000000000000000000000000012b000110650000000400907800000000605503650000000000000000000000000000000000000000fc000000000000000000000000000000165ce6f32a54806a29a39f74e931ade2d4161675ce90aeddaaa7b9c8999eefb4b6996283c74b37fc1017e08336998b574dbb0561ce2ec2408328d51d1eb32c14b0a10751b5f0fae52d367046ab4c631f2010d27ff58329158338a955bd7b7b856f1e9e"], 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @val={0x2, 0x0, 0x0, 0x0, 0x3, 0x5}, @arp=@generic={0x305, 0x809b, 0x6, 0x8, 0x4, @local, "1115b84e8ea49771", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}}}, 0x26) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100}) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x20101) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) ftruncate(r3, 0x9) write$binfmt_misc(r2, 0x0, 0x0) r4 = openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r4, r0], 0x3) r5 = openat2(r1, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0xc00, 0x10, 0x1a}, 0x18) write$tun(r5, &(0x7f0000000000)={@val, @val={0x2, 0x1, 0xfff, 0x36, 0x5, 0x3}, @llc={@snap={0xaa, 0xaa, '\x00\x00', '_0&', 0x88fb, "70ee271f2f4ca6da7a817e7c494a6a3ce3831503f4968f1fbfd9214741b207182fc858e0e2c9673a1d5d0c6c644a7e55b7e35503af904e18cf2bcc473bc9dc94577f11377af1"}}}, 0x5d) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000240)={0x400, 0x9, 0x7, 0x3, 0x75, 0x8000}) lseek(0xffffffffffffffff, 0x0, 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000200)) 10:29:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:29:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 7) 10:29:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:29:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:29:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 12) 10:29:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x600, 0xcd08, 0x0, 0x0) 10:29:44 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x6e7, 0xcd08, 0x0, 0x0) 10:29:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {0x0}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:29:44 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xca0cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/3, 0x3, 0x20) r1 = dup2(r0, 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/3, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fallocate(r1, 0x2, 0x1, 0x3f) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x1a, 0x711, 0x0, 0x0, {0xd, 0x0, 0x2}}, 0x14}}, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x4, @perf_config_ext={0x2, 0x9}, 0x2101, 0x3, 0x65b, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0xe2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000012000101"], 0x20}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001e00)={{r5}, "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"}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="80"]) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0), r7, &(0x7f0000000340)=0x3ff, 0x80000000, 0x0) io_submit(0x0, 0x2, &(0x7f0000000380)=[0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 10:29:44 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000001480), &(0x7f00000014c0)='system_u:object_r:chfn_exec_t:s0\x00', 0x21, 0x0) 10:29:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x202000, 0x20) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x3c402, 0x0) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000200)="a2f04947be61cdbc42445e58ec0c7f24cc4dd50d1e776329c01a570dfb9db2a70351518acaef1a0d89640927dc567c8a0c55f20cc4a82e3150bff78836c17662ed28059359213b3846e8aaad", 0x4c}, {&(0x7f0000000280)="b0261b2e310396eb15aa5542f0bc772b8507ca000107c48da3bdc5e5269c2ccc01d53de21b4e20117bdb577c73614ab3ea35709c9b4daedd35a9aa23a729cba3521b60ee99c30730e2bfd91c00ac2b5591a9b1fb95f939bfc6b4c2074c7ede782d9213714608d8db94f912b66ba83205c575772a0846875d88ba59cc3a189fd6a784caaf028e941d51e12fc0cfcadc709ee7e03e6cac04e6bc3f394c4ea68e4c88d4d3a5e2b7135b616c83e403d9bea16628a19347ea70d66cc341599e1d71260d8f4ca4eb55e03ddeec9f1a23647e308bb07368b02fa4fcbbfd243a6619bdf91571c3b6ba6561c2180392070207", 0xee}, {&(0x7f0000000480)="431283ceeef6de5248b8660c7a88a0fe856ad762b97ab43a30976f4263cfd9d3f003ed4eceb06830a18f9e94d4fb8ba2e2f993342b1ed950c21e02cc984ece691ae555fd78f884953efb69a1d8443756e2d4db049bfadb9ff716a087699eb1b34bd1d48c2145ce22527eaec47921241520fa7c97c8fbf6ed06c45bc0f88e5f50235899719d92155c67af28eabfaecb0592068851c41063436093fea9b413b79e41e69ce89db61158923df41358575292cec01b0ab8f229262bcce839896aebc9ab25bf14461aee27501ddf994ae87b0a8cf1", 0xd2}, {&(0x7f0000000380)="9689fbe46e12da5f58d2ead552eaf9d95a584dec0e077b2792146b058ea556281c623d2cc1e7b9fe51ac0506a268341dfd0202eb1e61b593ddcb4a6187c7eaf792c50082c76e83d7c9d443eecfb295c38637f77e8ff05b4fe2f4a520c5110bc532da294af89d993287a38ff433845e23462b63b4cb46df2214d9dbbe0df11aa5a72ad4543584a0", 0x87}, {&(0x7f0000000580)="257fe8673425d6322188a1c3598b584fd8cf7903d7230c5a7978946e6a3ca5a72cdf20fc845b559eb3b3ecebf8ecc590358e0673e891af0df0b4e3228935739801762fa1d6ffa2460ded833b28745865d2fe2f8060f0ce99d132ae3da13fade9fb43c955144477b9dde83318661701987edd1c6bc8ec22afe73a078987cc4faef081b7f9de38e41e4454b0a82a79350057b58455788ef7ac397cadded2579730fc4c43fb525b", 0xa6}], 0x5) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x48, 0x0) r5 = syz_open_pts(r4, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x3, 0x3, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7f}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x76b6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x4, 0x81}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}]}, 0x60}}, 0x40010) finit_module(r4, &(0x7f00000000c0)=']\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r6, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 2195.112473] FAULT_INJECTION: forcing a failure. [ 2195.112473] name failslab, interval 1, probability 0, space 0, times 0 [ 2195.114932] CPU: 1 PID: 12012 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2195.116181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2195.117306] Call Trace: [ 2195.117583] dump_stack+0x107/0x167 [ 2195.118039] should_fail.cold+0x5/0xa [ 2195.118501] should_failslab+0x5/0x20 [ 2195.118995] __kmalloc_node_track_caller+0x74/0x3b0 [ 2195.119656] ? __tcp_send_ack.part.0+0x67/0x650 [ 2195.120171] __alloc_skb+0xb1/0x5b0 [ 2195.120638] __tcp_send_ack.part.0+0x67/0x650 [ 2195.121231] tcp_send_ack+0x7d/0xa0 [ 2195.121720] tcp_cleanup_rbuf+0x468/0x5a0 [ 2195.122241] tcp_recvmsg+0xb85/0x2930 [ 2195.122677] ? tcp_splice_read+0x8c0/0x8c0 [ 2195.123271] ? sock_has_perm+0x1ea/0x280 [ 2195.124009] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2195.125391] ? lock_downgrade+0x6d0/0x6d0 [ 2195.126566] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2195.127990] ? tcp_splice_read+0x8c0/0x8c0 [ 2195.129099] inet6_recvmsg+0x13b/0x6e0 [ 2195.130201] ? inet6_bind+0x120/0x120 [ 2195.131187] ? security_socket_recvmsg+0x95/0xc0 [ 2195.132355] ? inet6_bind+0x120/0x120 [ 2195.133481] sock_recvmsg+0xff/0x180 [ 2195.134532] __sys_recvfrom+0x1be/0x2f0 [ 2195.135493] ? __ia32_sys_send+0x100/0x100 [ 2195.136514] ? lock_downgrade+0x6d0/0x6d0 [ 2195.137539] ? wait_for_completion_io+0x270/0x270 [ 2195.138721] ? rcu_read_lock_any_held+0x75/0xa0 [ 2195.139835] ? vfs_write+0x354/0xa70 [ 2195.140739] ? fput_many+0x2f/0x1a0 [ 2195.141617] ? ksys_write+0x1a9/0x260 [ 2195.142548] ? __ia32_sys_read+0xb0/0xb0 [ 2195.143388] __x64_sys_recvfrom+0xdd/0x1b0 [ 2195.144254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2195.145307] do_syscall_64+0x33/0x40 [ 2195.146075] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2195.147124] RIP: 0033:0x7fb8d74ccb19 [ 2195.147891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2195.151766] RSP: 002b:00007fb8d4a42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2195.153502] RAX: ffffffffffffffda RBX: 00007fb8d75dff60 RCX: 00007fb8d74ccb19 [ 2195.155133] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2195.156710] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2195.158263] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2195.160094] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 [ 2195.294138] FAULT_INJECTION: forcing a failure. [ 2195.294138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2195.297052] CPU: 0 PID: 12017 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2195.298470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2195.300233] Call Trace: [ 2195.300767] dump_stack+0x107/0x167 [ 2195.301509] should_fail.cold+0x5/0xa [ 2195.302305] _copy_to_iter+0x264/0x12d0 [ 2195.303122] ? sk_wait_data+0x353/0x4d0 [ 2195.303930] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2195.304929] ? mark_held_locks+0x9e/0xe0 [ 2195.305757] ? __virt_addr_valid+0x128/0x350 [ 2195.306667] ? __check_object_size+0x319/0x440 [ 2195.307617] simple_copy_to_iter+0x4c/0x70 [ 2195.308472] __skb_datagram_iter+0x4f7/0x880 [ 2195.309375] ? zerocopy_sg_from_iter+0x110/0x110 [ 2195.310360] skb_copy_datagram_iter+0x88/0x190 [ 2195.311298] tcp_recvmsg+0x13b5/0x2930 [ 2195.312114] ? tcp_splice_read+0x8c0/0x8c0 [ 2195.312986] ? sock_has_perm+0x1ea/0x280 [ 2195.313823] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2195.314887] ? lock_downgrade+0x6d0/0x6d0 [ 2195.315736] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2195.316813] ? tcp_splice_read+0x8c0/0x8c0 [ 2195.317677] inet6_recvmsg+0x13b/0x6e0 [ 2195.318476] ? inet6_bind+0x120/0x120 [ 2195.319260] ? security_socket_recvmsg+0x95/0xc0 [ 2195.320246] ? inet6_bind+0x120/0x120 [ 2195.321021] sock_recvmsg+0xff/0x180 [ 2195.321780] __sys_recvfrom+0x1be/0x2f0 [ 2195.322581] ? __ia32_sys_send+0x100/0x100 [ 2195.323441] ? lock_downgrade+0x6d0/0x6d0 [ 2195.324317] ? wait_for_completion_io+0x270/0x270 [ 2195.325296] ? rcu_read_lock_any_held+0x75/0xa0 [ 2195.326253] ? vfs_write+0x354/0xa70 [ 2195.327011] ? fput_many+0x2f/0x1a0 [ 2195.327765] ? ksys_write+0x1a9/0x260 [ 2195.328537] ? __ia32_sys_read+0xb0/0xb0 [ 2195.329354] __x64_sys_recvfrom+0xdd/0x1b0 [ 2195.330228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2195.331279] do_syscall_64+0x33/0x40 [ 2195.332044] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2195.333087] RIP: 0033:0x7f215657db19 [ 2195.333857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2195.337619] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2195.339174] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2195.340616] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2195.342061] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2195.343504] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2195.344947] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:29:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {0x0}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:29:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 8) 10:29:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}, {&(0x7f0000000240)="6df22ea0503e7671c13629a929ffbc674eb4448434046d5eb298f8331485a699c0cb3a36a0b08c666a6b23ee3fd1e584a65648e4cae3f754b6c5e5c7e8acb67a8c9461ce4d52319d14dae7eeea7433bedf9d", 0x52, 0x5}], 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/13, 0xd}], 0x5, &(0x7f0000000740)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/238, 0xee}, {&(0x7f0000000900)=""/3, 0x3}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000a00)=""/176, 0xb0}, {&(0x7f0000000ac0)}], 0x5, &(0x7f0000000b80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/151, 0x97}, {&(0x7f0000000cc0)=""/238, 0xee}, {&(0x7f0000000dc0)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/11, 0xb}], 0x4}}, {{&(0x7f0000000f40), 0x6e, &(0x7f0000003380)=[{&(0x7f0000000fc0)=""/146, 0x92}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/19, 0x13}, {&(0x7f00000020c0)=""/201, 0xc9}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/22, 0x16}, {&(0x7f0000003200)=""/42, 0x2a}, {&(0x7f0000003240)=""/223, 0xdf}, {&(0x7f0000003340)=""/57, 0x39}], 0x9, &(0x7f0000003440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x2020, &(0x7f00000035c0)) 10:29:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 13) 10:29:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:29:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 1) 10:29:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x76b, 0xcd08, 0x0, 0x0) 10:29:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x66f, 0xcd08, 0x0, 0x0) [ 2210.119084] FAT-fs (loop6): invalid media value (0x4e) [ 2210.120256] FAT-fs (loop6): Can't find a valid FAT filesystem 10:29:59 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setlease(r1, 0x400, 0x1) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7}, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x8000) r2 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000080)=0x2) [ 2210.235180] FAULT_INJECTION: forcing a failure. [ 2210.235180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2210.238409] CPU: 0 PID: 12053 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2210.239827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2210.241494] Call Trace: [ 2210.242039] dump_stack+0x107/0x167 [ 2210.242797] should_fail.cold+0x5/0xa [ 2210.243584] _copy_to_iter+0x264/0x12d0 [ 2210.244400] ? mark_lock+0xf5/0x2df0 [ 2210.245293] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2210.246364] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2210.247350] ? lock_chain_count+0x20/0x20 [ 2210.248193] ? __virt_addr_valid+0x128/0x350 [ 2210.249083] ? __check_object_size+0x319/0x440 [ 2210.250016] simple_copy_to_iter+0x4c/0x70 [ 2210.250880] __skb_datagram_iter+0x122/0x880 [ 2210.251773] ? do_raw_spin_lock+0x121/0x260 [ 2210.252651] ? zerocopy_sg_from_iter+0x110/0x110 [ 2210.253604] ? mark_held_locks+0x9e/0xe0 [ 2210.254449] skb_copy_datagram_iter+0x88/0x190 [ 2210.255374] tcp_recvmsg+0x13b5/0x2930 [ 2210.256175] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.257042] ? sock_has_perm+0x1ea/0x280 [ 2210.257864] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2210.258913] ? lock_downgrade+0x6d0/0x6d0 [ 2210.259753] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2210.260816] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.261671] inet6_recvmsg+0x13b/0x6e0 [ 2210.262469] ? inet6_bind+0x120/0x120 [ 2210.263246] ? security_socket_recvmsg+0x95/0xc0 [ 2210.264208] ? inet6_bind+0x120/0x120 [ 2210.264981] sock_recvmsg+0xff/0x180 [ 2210.265737] __sys_recvfrom+0x1be/0x2f0 [ 2210.266559] ? __ia32_sys_send+0x100/0x100 [ 2210.267416] ? lock_downgrade+0x6d0/0x6d0 [ 2210.268282] ? wait_for_completion_io+0x270/0x270 [ 2210.269264] ? rcu_read_lock_any_held+0x75/0xa0 [ 2210.270213] ? vfs_write+0x354/0xa70 [ 2210.270972] ? fput_many+0x2f/0x1a0 [ 2210.271714] ? ksys_write+0x1a9/0x260 [ 2210.272485] ? __ia32_sys_read+0xb0/0xb0 [ 2210.273318] __x64_sys_recvfrom+0xdd/0x1b0 [ 2210.274186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2210.275233] do_syscall_64+0x33/0x40 [ 2210.275994] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2210.277034] RIP: 0033:0x7fa704a91b19 [ 2210.277790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2210.281534] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2210.283097] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2210.284548] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2210.285998] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2210.287462] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2210.288907] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 [ 2210.311529] FAULT_INJECTION: forcing a failure. [ 2210.311529] name failslab, interval 1, probability 0, space 0, times 0 [ 2210.312093] FAULT_INJECTION: forcing a failure. [ 2210.312093] name failslab, interval 1, probability 0, space 0, times 0 [ 2210.313916] CPU: 1 PID: 12054 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2210.317859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2210.319549] Call Trace: [ 2210.320093] dump_stack+0x107/0x167 [ 2210.320838] should_fail.cold+0x5/0xa [ 2210.321617] ? create_object.isra.0+0x3a/0xa20 [ 2210.322567] should_failslab+0x5/0x20 [ 2210.323343] kmem_cache_alloc+0x5b/0x310 [ 2210.324175] create_object.isra.0+0x3a/0xa20 [ 2210.325071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2210.326117] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2210.327151] ? __tcp_send_ack.part.0+0x67/0x650 [ 2210.328104] __alloc_skb+0xb1/0x5b0 [ 2210.328852] __tcp_send_ack.part.0+0x67/0x650 [ 2210.329762] ? __tcp_select_window+0x375/0x900 [ 2210.330702] tcp_send_ack+0x7d/0xa0 [ 2210.331442] __tcp_ack_snd_check+0x156/0x9f0 [ 2210.332343] tcp_rcv_established+0x955/0x1e30 [ 2210.333262] ? tcp_check_space+0x6c0/0x6c0 [ 2210.334152] tcp_v6_do_rcv+0x7b3/0x1520 [ 2210.334970] __release_sock+0x139/0x3b0 [ 2210.335788] release_sock+0x54/0x1b0 [ 2210.336544] sk_wait_data+0x1a7/0x4d0 [ 2210.337323] ? sock_set_mark+0x130/0x130 [ 2210.338164] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2210.339197] ? tcp_mstamp_refresh+0x12/0xa0 [ 2210.340084] ? sock_rfree+0x107/0x170 [ 2210.340860] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2210.341916] tcp_recvmsg+0x17b2/0x2930 [ 2210.342737] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.343607] ? sock_has_perm+0x1ea/0x280 [ 2210.344437] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2210.345485] ? lock_downgrade+0x6d0/0x6d0 [ 2210.346339] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2210.347406] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.348268] inet6_recvmsg+0x13b/0x6e0 [ 2210.349062] ? inet6_bind+0x120/0x120 [ 2210.349842] ? security_socket_recvmsg+0x95/0xc0 [ 2210.350814] ? inet6_bind+0x120/0x120 [ 2210.351587] sock_recvmsg+0xff/0x180 [ 2210.352349] __sys_recvfrom+0x1be/0x2f0 [ 2210.353161] ? __ia32_sys_send+0x100/0x100 [ 2210.354022] ? lock_downgrade+0x6d0/0x6d0 [ 2210.354911] ? wait_for_completion_io+0x270/0x270 [ 2210.355897] ? rcu_read_lock_any_held+0x75/0xa0 [ 2210.356843] ? vfs_write+0x354/0xa70 [ 2210.357603] ? fput_many+0x2f/0x1a0 [ 2210.358354] ? ksys_write+0x1a9/0x260 [ 2210.359131] ? __ia32_sys_read+0xb0/0xb0 [ 2210.359963] __x64_sys_recvfrom+0xdd/0x1b0 [ 2210.360825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2210.361876] do_syscall_64+0x33/0x40 [ 2210.362643] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2210.363688] RIP: 0033:0x7f215657db19 [ 2210.364446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2210.368196] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2210.369746] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2210.371206] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2210.372659] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2210.374116] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2210.375569] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 [ 2210.377055] CPU: 0 PID: 12050 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2210.378488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2210.380171] Call Trace: [ 2210.380707] dump_stack+0x107/0x167 [ 2210.381449] should_fail.cold+0x5/0xa [ 2210.382344] should_failslab+0x5/0x20 [ 2210.383116] __kmalloc_node_track_caller+0x74/0x3b0 [ 2210.384120] ? __tcp_send_ack.part.0+0x67/0x650 [ 2210.385057] ? kmem_cache_free+0xa7/0x2d0 [ 2210.385899] __alloc_skb+0xb1/0x5b0 [ 2210.386646] __tcp_send_ack.part.0+0x67/0x650 [ 2210.387549] ? kmem_cache_free+0x249/0x2d0 [ 2210.388409] tcp_send_ack+0x7d/0xa0 [ 2210.389143] tcp_cleanup_rbuf+0x468/0x5a0 [ 2210.389980] tcp_recvmsg+0xb85/0x2930 [ 2210.390782] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.391645] ? sock_has_perm+0x1ea/0x280 [ 2210.392466] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2210.393507] ? lock_downgrade+0x6d0/0x6d0 [ 2210.394353] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2210.395410] ? tcp_splice_read+0x8c0/0x8c0 [ 2210.396267] inet6_recvmsg+0x13b/0x6e0 [ 2210.397050] ? inet6_bind+0x120/0x120 [ 2210.397825] ? security_socket_recvmsg+0x95/0xc0 [ 2210.398804] ? inet6_bind+0x120/0x120 [ 2210.399573] sock_recvmsg+0xff/0x180 [ 2210.400326] __sys_recvfrom+0x1be/0x2f0 [ 2210.401131] ? __ia32_sys_send+0x100/0x100 [ 2210.401980] ? lock_downgrade+0x6d0/0x6d0 [ 2210.402850] ? wait_for_completion_io+0x270/0x270 [ 2210.403830] ? rcu_read_lock_any_held+0x75/0xa0 [ 2210.404767] ? vfs_write+0x354/0xa70 [ 2210.405527] ? fput_many+0x2f/0x1a0 [ 2210.406279] ? ksys_write+0x1a9/0x260 [ 2210.407048] ? __ia32_sys_read+0xb0/0xb0 [ 2210.407872] __x64_sys_recvfrom+0xdd/0x1b0 [ 2210.408724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2210.409770] do_syscall_64+0x33/0x40 [ 2210.410541] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2210.411575] RIP: 0033:0x7fb8d74ccb19 [ 2210.412327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2210.416049] RSP: 002b:00007fb8d4a42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2210.417583] RAX: ffffffffffffffda RBX: 00007fb8d75dff60 RCX: 00007fb8d74ccb19 [ 2210.419038] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2210.420478] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2210.421919] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2210.423376] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 10:29:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0xe5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x80, 0x8, 0x1, 0x0, 0x6, 0x41a01, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x1}, 0x801, 0x9, 0xfffffffd, 0x2, 0x1ff, 0xffff5a1b, 0x3, 0x0, 0x40, 0x0, 0x20}, 0xffffffffffffffff, 0x0, r0, 0x2) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r3], 0x1) r4 = syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x200, 0x5, &(0x7f0000001440)=[{&(0x7f0000000340)="8d8c500bd3384bb1670cb80ad565c7b77a5648174ae5895b91", 0x19}, {&(0x7f0000000380)="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", 0x1000, 0x5}, {&(0x7f0000001380), 0x0, 0x800}, {&(0x7f00000013c0)="8fa2b85bda98a71e428332c21918242eff8c", 0x12, 0x8}, {&(0x7f0000001400)="84fd4818309fc9e3c8a3b6eaa1d3c3b3e3f9d3338017d1f6426c9ebcefb10d7504e937ea0b4ec7bd58c7ab5f0b37905a011d5eb42111f20c09846fe1d7", 0x3d, 0x7}], 0x8, &(0x7f00000014c0)={[{'\'+},-]#+'}, {'.-(*'}, {'@@&\\:(}\''}, {':'}, {}], [{@dont_hash}, {@fsname={'fsname', 0x3d, '(.$!#$'}}]}) dup(r4) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 2210.695365] nfs: Unknown parameter ''+}' [ 2210.745746] nfs: Unknown parameter ''+}' 10:29:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/158, 0x9e}, {0x0}, {0x0}, {&(0x7f0000000800)=""/181, 0xb5}, {&(0x7f0000000980)=""/79, 0x4f}], 0x5, &(0x7f0000000ac0)=""/179, 0xb3}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, &(0x7f0000004800)={0x77359400}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x10000, 0x41) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file1\x00'}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file0/file0\x00', 0x200) write(r2, &(0x7f00000000c0)="e2dfba27c44c36cf7937d4600e67", 0xe) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000700)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000740)=0x28) sendfile(r0, r1, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x18300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0xca0cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f00000006c0)=0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'lo\x00'}) sendmsg$inet6(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="8d9de0957eb8c9aafa28a0dcc5fb272c19695d8444069146949338763e56fc7007e15ddb7956107f2d7d6850e390c7aa9f507f4552e8509ee84986b839790d730b90493f94cf3bd326a0501ea749bd23b26d5002be7267581f4d751dcbe5b2e32a493483cad5252dc22df13ea13795218d522be845d885e1c4f75dfd1f10df87817d24d83ce3827248c70addee62cb2faedb96ac669977e5fbcd2c88e77ef372fd95c3497e54895c3102a7da081ba5b8ccbcaea987d6d2398681a9744b4eec7fdaffee54201517a5c762d2cbca729a3000dcc2ac5d", 0xd5}, {&(0x7f0000000540)="fe7b71251976936484512c8c19f8bf4fb1755ed28ede5b4bfb876c09c3d58dbb57d0c4fd2205226fc282a6d693a0f5e68861c53afd70614a4a58f09250e74f69484ccdb1cfb1974f2178b13de27096b5109c69", 0x53}, {&(0x7f00000005c0)="c4eb900a9f761180e8e8e72df129b72c7031fe2322012e6e9200376340be01fa346a19b39a271e3853dc008e1f6f4682f39adbd93fac32c202eda7b8e26bd96ad0e472a96af1f1033d85228d1f639c534497683e9a54c29fa6a1f7c0b63059a34214062684557cc9c675196ba60c614482386924cb8b1cf3375068e6c261544446491fef85c3ca9baf316b659c98a46df1789027644f266951b8c61db3910603816a63d15bac3ae5efc67c5c3ad8481079ddf9383ba7ee", 0xb7}], 0x3, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x18}, 0x4000000) sendfile(r0, r3, 0x0, 0x80000001) 10:30:00 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x777, 0xcd08, 0x0, 0x0) 10:30:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:30:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 9) 10:30:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 2) 10:30:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x6e7, 0xcd08, 0x0, 0x0) 10:30:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 14) [ 2211.300220] FAULT_INJECTION: forcing a failure. [ 2211.300220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2211.303006] CPU: 0 PID: 12095 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2211.304402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2211.306060] Call Trace: [ 2211.306605] dump_stack+0x107/0x167 [ 2211.307342] should_fail.cold+0x5/0xa [ 2211.308115] _copy_to_iter+0x264/0x12d0 [ 2211.308919] ? mark_lock+0xf5/0x2df0 [ 2211.309672] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2211.310746] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2211.311732] ? lock_chain_count+0x20/0x20 [ 2211.312568] ? __virt_addr_valid+0x128/0x350 [ 2211.313458] ? __check_object_size+0x319/0x440 [ 2211.314402] simple_copy_to_iter+0x4c/0x70 [ 2211.315258] __skb_datagram_iter+0x4f7/0x880 [ 2211.316146] ? zerocopy_sg_from_iter+0x110/0x110 [ 2211.317107] skb_copy_datagram_iter+0x88/0x190 [ 2211.318038] tcp_recvmsg+0x13b5/0x2930 [ 2211.318843] ? tcp_splice_read+0x8c0/0x8c0 [ 2211.319699] ? sock_has_perm+0x1ea/0x280 [ 2211.320514] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2211.321566] ? lock_downgrade+0x6d0/0x6d0 [ 2211.322436] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2211.323489] ? tcp_splice_read+0x8c0/0x8c0 [ 2211.324338] inet6_recvmsg+0x13b/0x6e0 [ 2211.325125] ? inet6_bind+0x120/0x120 [ 2211.325893] ? security_socket_recvmsg+0x95/0xc0 [ 2211.326855] ? inet6_bind+0x120/0x120 [ 2211.327621] sock_recvmsg+0xff/0x180 [ 2211.328373] __sys_recvfrom+0x1be/0x2f0 [ 2211.329170] ? __ia32_sys_send+0x100/0x100 [ 2211.330027] ? lock_downgrade+0x6d0/0x6d0 [ 2211.330889] ? wait_for_completion_io+0x270/0x270 [ 2211.331875] ? rcu_read_lock_any_held+0x75/0xa0 [ 2211.332812] ? vfs_write+0x354/0xa70 [ 2211.333566] ? fput_many+0x2f/0x1a0 [ 2211.334323] ? ksys_write+0x1a9/0x260 [ 2211.335100] ? __ia32_sys_read+0xb0/0xb0 [ 2211.335933] __x64_sys_recvfrom+0xdd/0x1b0 [ 2211.336798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2211.337855] do_syscall_64+0x33/0x40 [ 2211.338638] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2211.339697] RIP: 0033:0x7fa704a91b19 [ 2211.340460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2211.344175] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2211.345739] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2211.347217] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2211.348677] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2211.350139] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2211.351616] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 [ 2211.358140] FAULT_INJECTION: forcing a failure. [ 2211.358140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2211.361448] CPU: 1 PID: 12093 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2211.363228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2211.365602] Call Trace: [ 2211.366274] dump_stack+0x107/0x167 [ 2211.367167] should_fail.cold+0x5/0xa [ 2211.368204] _copy_to_iter+0x264/0x12d0 [ 2211.369326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2211.370683] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2211.371970] ? trace_hardirqs_on+0x5b/0x180 [ 2211.373130] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2211.374456] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2211.375649] ? __virt_addr_valid+0x128/0x350 [ 2211.376713] ? __check_object_size+0x319/0x440 [ 2211.377973] simple_copy_to_iter+0x4c/0x70 [ 2211.379074] __skb_datagram_iter+0x122/0x880 [ 2211.380119] ? sock_set_mark+0x130/0x130 [ 2211.380957] ? zerocopy_sg_from_iter+0x110/0x110 [ 2211.382034] skb_copy_datagram_iter+0x88/0x190 [ 2211.383210] tcp_recvmsg+0x13b5/0x2930 [ 2211.384021] ? tcp_splice_read+0x8c0/0x8c0 [ 2211.384993] ? sock_has_perm+0x1ea/0x280 [ 2211.385831] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2211.386907] ? lock_downgrade+0x6d0/0x6d0 [ 2211.387752] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2211.388985] ? tcp_splice_read+0x8c0/0x8c0 [ 2211.390016] inet6_recvmsg+0x13b/0x6e0 [ 2211.390943] ? inet6_bind+0x120/0x120 [ 2211.391816] ? security_socket_recvmsg+0x95/0xc0 [ 2211.392785] ? inet6_bind+0x120/0x120 [ 2211.393564] sock_recvmsg+0xff/0x180 [ 2211.394344] __sys_recvfrom+0x1be/0x2f0 [ 2211.395153] ? __ia32_sys_send+0x100/0x100 [ 2211.396009] ? lock_downgrade+0x6d0/0x6d0 [ 2211.396874] ? wait_for_completion_io+0x270/0x270 [ 2211.397854] ? rcu_read_lock_any_held+0x75/0xa0 [ 2211.398805] ? vfs_write+0x354/0xa70 [ 2211.399563] ? fput_many+0x2f/0x1a0 [ 2211.400307] ? ksys_write+0x1a9/0x260 [ 2211.401080] ? __ia32_sys_read+0xb0/0xb0 [ 2211.401910] __x64_sys_recvfrom+0xdd/0x1b0 [ 2211.402778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2211.403825] do_syscall_64+0x33/0x40 [ 2211.404584] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2211.405622] RIP: 0033:0x7fb8d74ccb19 [ 2211.406401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2211.410134] RSP: 002b:00007fb8d4a42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2211.411677] RAX: ffffffffffffffda RBX: 00007fb8d75dff60 RCX: 00007fb8d74ccb19 [ 2211.413126] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2211.414580] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2211.416028] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2211.417476] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 [ 2211.425948] FAULT_INJECTION: forcing a failure. [ 2211.425948] name failslab, interval 1, probability 0, space 0, times 0 [ 2211.428622] CPU: 1 PID: 12098 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2211.430257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2211.432195] Call Trace: [ 2211.432844] dump_stack+0x107/0x167 [ 2211.433590] should_fail.cold+0x5/0xa [ 2211.434505] should_failslab+0x5/0x20 [ 2211.435290] __kmalloc_node_track_caller+0x74/0x3b0 [ 2211.436447] ? __tcp_send_ack.part.0+0x67/0x650 [ 2211.437532] __alloc_skb+0xb1/0x5b0 [ 2211.438367] __tcp_send_ack.part.0+0x67/0x650 [ 2211.439448] tcp_send_ack+0x7d/0xa0 [ 2211.440310] tcp_cleanup_rbuf+0x468/0x5a0 [ 2211.441160] tcp_recvmsg+0x868/0x2930 [ 2211.442034] ? tcp_splice_read+0x8c0/0x8c0 [ 2211.442994] ? sock_has_perm+0x1ea/0x280 [ 2211.444033] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2211.445173] ? lock_downgrade+0x6d0/0x6d0 [ 2211.446183] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2211.447434] ? tcp_splice_read+0x8c0/0x8c0 [ 2211.448305] inet6_recvmsg+0x13b/0x6e0 [ 2211.449206] ? inet6_bind+0x120/0x120 [ 2211.450095] ? security_socket_recvmsg+0x95/0xc0 [ 2211.451356] ? inet6_bind+0x120/0x120 [ 2211.452396] sock_recvmsg+0xff/0x180 [ 2211.453456] __sys_recvfrom+0x1be/0x2f0 [ 2211.454617] ? __ia32_sys_send+0x100/0x100 [ 2211.455655] ? lock_downgrade+0x6d0/0x6d0 [ 2211.456796] ? wait_for_completion_io+0x270/0x270 [ 2211.458184] ? rcu_read_lock_any_held+0x75/0xa0 [ 2211.459316] ? vfs_write+0x354/0xa70 [ 2211.460230] ? fput_many+0x2f/0x1a0 [ 2211.461232] ? ksys_write+0x1a9/0x260 [ 2211.462439] ? __ia32_sys_read+0xb0/0xb0 [ 2211.463610] __x64_sys_recvfrom+0xdd/0x1b0 [ 2211.464694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2211.466008] do_syscall_64+0x33/0x40 [ 2211.466855] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2211.467913] RIP: 0033:0x7f215657db19 [ 2211.468682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2211.472465] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2211.474031] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2211.475521] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2211.476982] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2211.478449] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2211.479930] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:30:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:30:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x6f3, 0xcd08, 0x0, 0x0) 10:30:14 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x7fb, 0xcd08, 0x0, 0x0) 10:30:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 10) 10:30:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 3) 10:30:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 15) 10:30:14 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(r0, &(0x7f0000000000)='./file1\x00', 0x40000, 0x8a) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0xb451, 0x100000000}) 10:30:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:14 executing program 6: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001020000082505a1a4400001200904003f02020600000b240600014ab26c711c3518c47dac2ce9875d7300e9161cb6c37f05240001000d240f01fb0000000200ff07f80a2407ff0700425c0000042402020524153f00090581030004802001090500"/111], &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x40, 0x4, 0x1, 0x8, 0x1}, 0x28, &(0x7f00000002c0)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x0, 0x0, 0x7fff, [0x0, 0xff3f00, 0xff3fc0, 0xc0cf, 0x8b3b45972f4d35e5]}]}, 0x1, [{0x8d, &(0x7f0000000300)=@string={0x8d, 0x3, "5eccf3e91b1d44c89f6c894a4c53f3b2872341725722e3455b6b3dc96f0feca02ea17b5d38642de331968d4e4e33f67d9b0e32a90646ad55b005c0687c62e4253f3604a59ff1954f416a342521a9f1ee1f72194e77083a520ffb5bf31b071b27d85d591bf8f87d3490388ad86e622b0fdafa38eada48635155662c45b9b0c04179a19e536e6aeab6826dd7"}}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x800}, 0x1c280, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0xb, 0x4}, &(0x7f0000000040)) timer_create(0xb31f1135a81fce5e, &(0x7f0000000400)={0x0, 0x4}, &(0x7f0000000440)=0x0) timer_settime(r0, 0x1, &(0x7f00000004c0)={{0x0, 0x989680}}, &(0x7f0000000500)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x280400, 0x0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) socket$netlink(0x10, 0x3, 0x10) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_gettime(0x0, &(0x7f0000000540)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000580)) read(r2, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r1, &(0x7f0000000080)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2225.527284] FAULT_INJECTION: forcing a failure. [ 2225.527284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2225.530485] CPU: 0 PID: 12122 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2225.532088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.534008] Call Trace: [ 2225.534636] dump_stack+0x107/0x167 [ 2225.535474] should_fail.cold+0x5/0xa [ 2225.536528] _copy_to_iter+0x264/0x12d0 [ 2225.537440] ? mark_lock+0xf5/0x2df0 [ 2225.538306] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2225.539492] ? mark_lock+0xf5/0x2df0 [ 2225.540330] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2225.541433] ? lock_chain_count+0x20/0x20 [ 2225.542388] ? __virt_addr_valid+0x128/0x350 [ 2225.543381] ? __check_object_size+0x319/0x440 [ 2225.544417] simple_copy_to_iter+0x4c/0x70 [ 2225.545370] __skb_datagram_iter+0x4f7/0x880 [ 2225.546376] ? zerocopy_sg_from_iter+0x110/0x110 [ 2225.547448] skb_copy_datagram_iter+0x88/0x190 [ 2225.548475] tcp_recvmsg+0x13b5/0x2930 [ 2225.549364] ? tcp_splice_read+0x8c0/0x8c0 [ 2225.550333] ? sock_has_perm+0x1ea/0x280 [ 2225.551251] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2225.552401] ? lock_downgrade+0x6d0/0x6d0 [ 2225.553333] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2225.554517] ? tcp_splice_read+0x8c0/0x8c0 [ 2225.555460] inet6_recvmsg+0x13b/0x6e0 [ 2225.556333] ? inet6_bind+0x120/0x120 [ 2225.557190] ? security_socket_recvmsg+0x95/0xc0 [ 2225.558251] ? inet6_bind+0x120/0x120 [ 2225.559108] sock_recvmsg+0xff/0x180 [ 2225.559950] __sys_recvfrom+0x1be/0x2f0 [ 2225.560832] ? __ia32_sys_send+0x100/0x100 [ 2225.561770] ? lock_downgrade+0x6d0/0x6d0 [ 2225.562741] ? wait_for_completion_io+0x270/0x270 [ 2225.563816] ? rcu_read_lock_any_held+0x75/0xa0 [ 2225.564848] ? vfs_write+0x354/0xa70 [ 2225.565672] ? fput_many+0x2f/0x1a0 [ 2225.566500] ? ksys_write+0x1a9/0x260 [ 2225.567352] ? __ia32_sys_read+0xb0/0xb0 [ 2225.568261] __x64_sys_recvfrom+0xdd/0x1b0 [ 2225.569198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2225.570348] do_syscall_64+0x33/0x40 [ 2225.571168] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2225.572297] RIP: 0033:0x7fa704a91b19 [ 2225.573117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.577178] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2225.578851] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2225.580420] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2225.581983] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.583555] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2225.585113] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 [ 2225.627460] FAULT_INJECTION: forcing a failure. [ 2225.627460] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.630280] CPU: 0 PID: 12129 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2225.631771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.633654] Call Trace: [ 2225.634220] dump_stack+0x107/0x167 [ 2225.635035] should_fail.cold+0x5/0xa [ 2225.635858] ? create_object.isra.0+0x3a/0xa20 10:30:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2225.636844] should_failslab+0x5/0x20 [ 2225.637817] kmem_cache_alloc+0x5b/0x310 [ 2225.638703] create_object.isra.0+0x3a/0xa20 [ 2225.639646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2225.640738] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2225.641820] ? __tcp_send_ack.part.0+0x67/0x650 [ 2225.642830] __alloc_skb+0xb1/0x5b0 [ 2225.643619] __tcp_send_ack.part.0+0x67/0x650 [ 2225.644581] tcp_send_ack+0x7d/0xa0 [ 2225.645367] tcp_cleanup_rbuf+0x468/0x5a0 [ 2225.646252] tcp_recvmsg+0x868/0x2930 [ 2225.647110] ? tcp_splice_read+0x8c0/0x8c0 [ 2225.648030] ? sock_has_perm+0x1ea/0x280 [ 2225.648912] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2225.650022] ? lock_downgrade+0x6d0/0x6d0 [ 2225.650932] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2225.652060] ? tcp_splice_read+0x8c0/0x8c0 [ 2225.652976] inet6_recvmsg+0x13b/0x6e0 [ 2225.653814] ? inet6_bind+0x120/0x120 [ 2225.654656] ? security_socket_recvmsg+0x95/0xc0 [ 2225.655673] ? inet6_bind+0x120/0x120 [ 2225.656493] sock_recvmsg+0xff/0x180 [ 2225.657295] __sys_recvfrom+0x1be/0x2f0 [ 2225.658144] ? __ia32_sys_send+0x100/0x100 [ 2225.659057] ? lock_downgrade+0x6d0/0x6d0 [ 2225.660033] ? wait_for_completion_io+0x270/0x270 [ 2225.661075] ? rcu_read_lock_any_held+0x75/0xa0 [ 2225.662059] ? vfs_write+0x354/0xa70 [ 2225.662921] ? fput_many+0x2f/0x1a0 [ 2225.663778] ? ksys_write+0x1a9/0x260 [ 2225.664659] ? __ia32_sys_read+0xb0/0xb0 [ 2225.665586] __x64_sys_recvfrom+0xdd/0x1b0 [ 2225.666553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2225.667731] do_syscall_64+0x33/0x40 [ 2225.668600] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2225.669780] RIP: 0033:0x7f215657db19 [ 2225.670650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.674897] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2225.676622] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2225.678256] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2225.679924] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.681544] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2225.683209] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 [ 2225.792416] FAULT_INJECTION: forcing a failure. [ 2225.792416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2225.794201] CPU: 1 PID: 12140 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2225.795166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.796311] Call Trace: [ 2225.796691] dump_stack+0x107/0x167 [ 2225.797194] should_fail.cold+0x5/0xa [ 2225.797764] _copy_to_iter+0x264/0x12d0 [ 2225.798341] ? sk_wait_data+0x353/0x4d0 [ 2225.798909] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2225.799615] ? mark_held_locks+0x9e/0xe0 [ 2225.800184] ? __virt_addr_valid+0x128/0x350 [ 2225.800827] ? __check_object_size+0x319/0x440 [ 2225.801500] simple_copy_to_iter+0x4c/0x70 [ 2225.802123] __skb_datagram_iter+0x4f7/0x880 [ 2225.802793] ? zerocopy_sg_from_iter+0x110/0x110 [ 2225.803478] skb_copy_datagram_iter+0x88/0x190 [ 2225.804147] tcp_recvmsg+0x13b5/0x2930 [ 2225.804722] ? tcp_splice_read+0x8c0/0x8c0 [ 2225.805354] ? sock_has_perm+0x1ea/0x280 [ 2225.805952] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2225.806707] ? lock_downgrade+0x6d0/0x6d0 [ 2225.807287] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2225.808044] ? tcp_splice_read+0x8c0/0x8c0 [ 2225.808674] inet6_recvmsg+0x13b/0x6e0 [ 2225.809242] ? inet6_bind+0x120/0x120 [ 2225.809774] ? security_socket_recvmsg+0x95/0xc0 [ 2225.810461] ? inet6_bind+0x120/0x120 [ 2225.811019] sock_recvmsg+0xff/0x180 [ 2225.811560] __sys_recvfrom+0x1be/0x2f0 [ 2225.812137] ? __ia32_sys_send+0x100/0x100 [ 2225.812750] ? lock_downgrade+0x6d0/0x6d0 [ 2225.813361] ? wait_for_completion_io+0x270/0x270 [ 2225.814050] ? rcu_read_lock_any_held+0x75/0xa0 [ 2225.814739] ? vfs_write+0x354/0xa70 [ 2225.815280] ? fput_many+0x2f/0x1a0 [ 2225.815802] ? ksys_write+0x1a9/0x260 [ 2225.816344] ? __ia32_sys_read+0xb0/0xb0 [ 2225.816925] __x64_sys_recvfrom+0xdd/0x1b0 [ 2225.817533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2225.818279] do_syscall_64+0x33/0x40 [ 2225.818817] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2225.819558] RIP: 0033:0x7fb8d74ccb19 [ 2225.820101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.822176] RSP: 002b:00007fb8d49df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2225.823018] RAX: ffffffffffffffda RBX: 00007fb8d75e01a0 RCX: 00007fb8d74ccb19 [ 2225.823795] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2225.824573] RBP: 00007fb8d49df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.825346] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2225.826119] R13: 00007ffe8e8306ff R14: 00007fb8d49df300 R15: 0000000000022000 [ 2225.835963] udc-core: couldn't find an available UDC or it's busy [ 2225.837454] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 10:30:14 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:30:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893", 0x7f}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 16) 10:30:28 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x800, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f4100b408a9940c0"]) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)=[&(0x7f00000002c0)='cgroup\x00', &(0x7f00000004c0)='cgr\x00\x00p\x00g\xddI\x05\x94\xd6\r\x91\x9fz\x91\x14A!Qh-\x8f\x88\xcf|\xb6h]\xdb\xcf\x91\xf3p\xc3\x80\xac)\xec@A:\x19\xce\xcc\x12\xb4\xb6\x1f\xd19\x04m|s\xa6!\x83+\xa3]\x1c\xbb\x15\xa6\xfao\xd8\xca\xe8Y:\x88(_\t\\\x16\x82K\xb8n\xce:\xc1\'L\xa85.\xe6B=:g\x0f$\x81\xe4,\xda\x16\'\x96\x04g\xc7K'], &(0x7f0000000100)=[&(0x7f0000000380)='cgroup\x00', &(0x7f00000003c0)='cgroup\x00', &(0x7f0000000400)='cgroup\x00']) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) 10:30:28 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x9ff, 0xcd08, 0x0, 0x0) 10:30:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 11) 10:30:28 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893", 0x7f}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 4) 10:30:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:30:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x700, 0xcd08, 0x0, 0x0) 10:30:28 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2404c081}, 0x40000) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x8001) setsockopt(0xffffffffffffffff, 0x80000001, 0x0, &(0x7f0000000000)="d6547e36fc54c90660b7476ebee6fc625172f9fb41501b197b5f3f70983636a6339e1e85d66136c9ab9c4c4ac9f47e62e803b9ef933f94e7743dd3f042e684ce17f03e969718e964ee18366ffdfce76af1d45d6363a4174148eed0ed680f244413688cf5740d20bfec520e6a149e3680f24f23ef267afc48c0982fa7", 0x7c) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x9]}, 0x8) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, 0x14, 0xc21, 0x0, 0x0, {0xa}, [@generic="a455b385482bd088a60ed5497b17e450"]}, 0x24}}, 0x20000004) r4 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r3, @ANYRES32]) dup2(r4, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50970}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2239.486412] FAULT_INJECTION: forcing a failure. [ 2239.486412] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.489522] CPU: 1 PID: 12167 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2239.491085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2239.492925] Call Trace: [ 2239.493520] dump_stack+0x107/0x167 [ 2239.494335] should_fail.cold+0x5/0xa [ 2239.495183] ? create_object.isra.0+0x3a/0xa20 [ 2239.496202] should_failslab+0x5/0x20 [ 2239.497051] kmem_cache_alloc+0x5b/0x310 [ 2239.497968] create_object.isra.0+0x3a/0xa20 [ 2239.498968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2239.500115] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2239.501253] ? __tcp_send_ack.part.0+0x67/0x650 [ 2239.502301] __alloc_skb+0xb1/0x5b0 [ 2239.503154] __tcp_send_ack.part.0+0x67/0x650 [ 2239.504155] ? __tcp_select_window+0x375/0x900 [ 2239.505294] tcp_send_ack+0x7d/0xa0 [ 2239.506276] __tcp_ack_snd_check+0x156/0x9f0 [ 2239.507336] tcp_rcv_established+0x955/0x1e30 [ 2239.508488] ? tcp_check_space+0x6c0/0x6c0 [ 2239.509539] tcp_v6_do_rcv+0x7b3/0x1520 [ 2239.510437] __release_sock+0x139/0x3b0 [ 2239.511356] release_sock+0x54/0x1b0 [ 2239.512188] sk_wait_data+0x1a7/0x4d0 [ 2239.513041] ? sock_set_mark+0x130/0x130 [ 2239.514050] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2239.515459] tcp_recvmsg+0x17b2/0x2930 [ 2239.516345] ? tcp_splice_read+0x8c0/0x8c0 [ 2239.517298] ? sock_has_perm+0x1ea/0x280 [ 2239.518209] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2239.519366] ? lock_downgrade+0x6d0/0x6d0 [ 2239.520426] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2239.521787] ? tcp_splice_read+0x8c0/0x8c0 [ 2239.522736] inet6_recvmsg+0x13b/0x6e0 [ 2239.523609] ? inet6_bind+0x120/0x120 [ 2239.524461] ? security_socket_recvmsg+0x95/0xc0 [ 2239.525520] ? inet6_bind+0x120/0x120 [ 2239.526481] sock_recvmsg+0xff/0x180 [ 2239.527453] __sys_recvfrom+0x1be/0x2f0 [ 2239.528402] ? __ia32_sys_send+0x100/0x100 [ 2239.529343] ? lock_downgrade+0x6d0/0x6d0 [ 2239.530286] ? wait_for_completion_io+0x270/0x270 [ 2239.531378] ? rcu_read_lock_any_held+0x75/0xa0 [ 2239.532477] ? vfs_write+0x354/0xa70 [ 2239.533401] ? fput_many+0x2f/0x1a0 [ 2239.534337] ? ksys_write+0x1a9/0x260 [ 2239.535193] ? __ia32_sys_read+0xb0/0xb0 [ 2239.536091] __x64_sys_recvfrom+0xdd/0x1b0 [ 2239.537043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2239.538176] do_syscall_64+0x33/0x40 [ 2239.539004] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2239.540146] RIP: 0033:0x7fb8d74ccb19 [ 2239.540967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2239.545311] RSP: 002b:00007fb8d4a42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2239.546990] RAX: ffffffffffffffda RBX: 00007fb8d75dff60 RCX: 00007fb8d74ccb19 [ 2239.548552] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2239.550097] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2239.551647] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2239.553179] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 10:30:28 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893", 0x7f}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2239.684493] FAULT_INJECTION: forcing a failure. [ 2239.684493] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.687214] CPU: 0 PID: 12163 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2239.688612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2239.690284] Call Trace: [ 2239.690834] dump_stack+0x107/0x167 [ 2239.691573] should_fail.cold+0x5/0xa [ 2239.692340] ? __alloc_skb+0x6d/0x5b0 [ 2239.693123] should_failslab+0x5/0x20 [ 2239.693891] kmem_cache_alloc_node+0x55/0x330 [ 2239.694821] __alloc_skb+0x6d/0x5b0 [ 2239.695496] FAULT_INJECTION: forcing a failure. [ 2239.695496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2239.695565] __tcp_send_ack.part.0+0x67/0x650 [ 2239.698774] ? __tcp_select_window+0x375/0x900 [ 2239.699712] tcp_send_ack+0x7d/0xa0 [ 2239.700447] __tcp_ack_snd_check+0x156/0x9f0 [ 2239.701345] tcp_rcv_established+0x955/0x1e30 [ 2239.702283] ? tcp_check_space+0x6c0/0x6c0 [ 2239.703169] tcp_v6_do_rcv+0x7b3/0x1520 [ 2239.703993] __release_sock+0x139/0x3b0 [ 2239.704819] release_sock+0x54/0x1b0 [ 2239.705572] sk_wait_data+0x1a7/0x4d0 [ 2239.706347] ? sock_set_mark+0x130/0x130 [ 2239.707200] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2239.708241] tcp_recvmsg+0x17b2/0x2930 [ 2239.709054] ? tcp_splice_read+0x8c0/0x8c0 [ 2239.709921] ? sock_has_perm+0x1ea/0x280 [ 2239.710772] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2239.711812] ? lock_downgrade+0x6d0/0x6d0 [ 2239.712651] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2239.713720] ? tcp_splice_read+0x8c0/0x8c0 [ 2239.714587] inet6_recvmsg+0x13b/0x6e0 [ 2239.715390] ? inet6_bind+0x120/0x120 [ 2239.716165] ? security_socket_recvmsg+0x95/0xc0 [ 2239.717130] ? inet6_bind+0x120/0x120 [ 2239.717909] sock_recvmsg+0xff/0x180 [ 2239.718685] __sys_recvfrom+0x1be/0x2f0 [ 2239.719492] ? __ia32_sys_send+0x100/0x100 [ 2239.720358] ? lock_downgrade+0x6d0/0x6d0 [ 2239.721231] ? wait_for_completion_io+0x270/0x270 [ 2239.722228] ? rcu_read_lock_any_held+0x75/0xa0 [ 2239.723173] ? vfs_write+0x354/0xa70 [ 2239.723940] ? fput_many+0x2f/0x1a0 [ 2239.724675] ? ksys_write+0x1a9/0x260 [ 2239.725458] ? __ia32_sys_read+0xb0/0xb0 [ 2239.726288] __x64_sys_recvfrom+0xdd/0x1b0 [ 2239.727162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2239.728210] do_syscall_64+0x33/0x40 [ 2239.728992] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2239.730028] RIP: 0033:0x7f215657db19 [ 2239.730804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2239.734535] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2239.736069] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2239.737502] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2239.738967] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2239.740404] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2239.741854] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 [ 2239.743342] CPU: 1 PID: 12165 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2239.744900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2239.746720] Call Trace: [ 2239.747306] dump_stack+0x107/0x167 [ 2239.748108] should_fail.cold+0x5/0xa [ 2239.748942] _copy_to_iter+0x264/0x12d0 [ 2239.749821] ? sk_wait_data+0x353/0x4d0 [ 2239.750701] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2239.751771] ? mark_held_locks+0x9e/0xe0 [ 2239.752654] ? __virt_addr_valid+0x128/0x350 [ 2239.753621] ? __check_object_size+0x319/0x440 [ 2239.754647] simple_copy_to_iter+0x4c/0x70 [ 2239.755572] __skb_datagram_iter+0x4f7/0x880 [ 2239.756538] ? zerocopy_sg_from_iter+0x110/0x110 [ 2239.757585] skb_copy_datagram_iter+0x88/0x190 [ 2239.758601] tcp_recvmsg+0x13b5/0x2930 [ 2239.759470] ? tcp_splice_read+0x8c0/0x8c0 [ 2239.760418] ? sock_has_perm+0x1ea/0x280 [ 2239.761306] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2239.762433] ? lock_downgrade+0x6d0/0x6d0 [ 2239.763358] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2239.764506] ? tcp_splice_read+0x8c0/0x8c0 [ 2239.765427] inet6_recvmsg+0x13b/0x6e0 [ 2239.766276] ? inet6_bind+0x120/0x120 [ 2239.767117] ? security_socket_recvmsg+0x95/0xc0 [ 2239.768152] ? inet6_bind+0x120/0x120 [ 2239.768989] sock_recvmsg+0xff/0x180 [ 2239.769807] __sys_recvfrom+0x1be/0x2f0 [ 2239.770678] ? __ia32_sys_send+0x100/0x100 [ 2239.771599] ? lock_downgrade+0x6d0/0x6d0 [ 2239.772533] ? wait_for_completion_io+0x270/0x270 [ 2239.773786] ? rcu_read_lock_any_held+0x75/0xa0 [ 2239.774806] ? vfs_write+0x354/0xa70 [ 2239.775622] ? fput_many+0x2f/0x1a0 [ 2239.776413] ? ksys_write+0x1a9/0x260 [ 2239.777261] ? __ia32_sys_read+0xb0/0xb0 [ 2239.778151] __x64_sys_recvfrom+0xdd/0x1b0 [ 2239.779092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2239.780215] do_syscall_64+0x33/0x40 [ 2239.781026] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2239.782147] RIP: 0033:0x7fa704a91b19 [ 2239.782983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2239.787004] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2239.788662] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2239.790214] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2239.791777] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2239.793334] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2239.794917] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 10:30:28 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x406, r0) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000280)="e7ce4f58d4f88b1445f79704ca3ccd980586fb252b219f0d4c8317e378fd2edc55d92d940bee34450a42e8262e26586c78b7b47466e9b746b80248fbffd08001e64f20981b02d7eef822779e9f300fd881484ab17f5cc3290c74e7b68241f8b884878f421d6ab40d88ab634a5b728a82bcf902c4ffc791dbb38b6a2d69d185a4a816910ccd6a6203d4b08744022692a557e7d247c0492fb1460aa4ff3ca8cb51a6cf3c15fb05d1ba8474b75e5fe9dd8a26fbc8a93e", 0xb5}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="8d0227a691893b19af15f9d30bc5efec52b1379d3d2408bf53007dce547d2c86ed6abd54bddf20a8bb96a3a5104f4398a075b45ef8483fe161f69d95fcba233a7c601471f59fcff798cc100629efedfb2d540a845e8f79d118fb2885aa25f274e1edbf7325852bf283f4cb6b204bc0971e3b1ee1fe66a0f2ac96f0bb8622f3da1f989da6f9b27e2e7115c099220d9ac6258ce247d61c41d0a6cae3acb2acbc6cc64a924f6dc864ecbfa4ef3537a6c4ca4bc6b8c1cc2997c6c8275bbbfacc4ef9b62c69ee8f57fa757bb2e95e8c78b8e0", 0xd0}, {&(0x7f0000000140)="e5b3750a133823047aa236c40ecc3aa846185c25e4601cf8a84ef62fb71afab9", 0x20}, {&(0x7f0000001440)="7a73a425c665e8b2cce037ef16a3e25fb68de428d308330e1d0aa9b6cb034240bda5e595f3e6c7d4bc9686aeea11382c331d60505e2e162f32b3eac2b44b6e2e67111d45db7555ede7498ef2e14f27e5df22bb33d2d7121c846357f64120f2d61f54c379e19f62106d19147c876867d8fb49aca8df3bc65de972f8d8c68a2695bcfec892b484fa871e5f34a67ef1e51c8738853164c729fdb0ebff1976d9147e127399a16a5bf7de79524e2387e8f4274fce066f903d86e0484a6fe24605366e0d2dc168cf95c90e3e1cdab178240b5bda4873e4da93dd28ad51c784c1f8650d40d2dafb6a6b8ca030d695fc82331332f6cb970839", 0xf5}, {&(0x7f0000001540)="cd7d1f7193a5ec618ad91221da554e87544735a2944411f16557cc3356ed0cb2423e4845deeabf642d0a976eb1f45c7de56285636c5885", 0x37}, {&(0x7f0000001580)="59c9ed325fbb83bef6976150f89171f34088ee703fe4a87677b28afe3bf0e789bbfa80feb0b5566f4a6011708d83693c199c42bb1da3ec11667f9dd3a92eefce69bd4ced6452fcc0ca4b1ac48d70974f4a297634b9f3e4d6dcb52d836a473d78956c37c4d33e20bfd5e804773a24fde92e22c660814d382d4b138b6c79e376aa3fa9a7944be5d9a7a659a8e5786ef868c92ff53b63785429382f556b8b616190218cd3efe189a55c58f992778bac4e86df63a061b5d103cce9642bbbabe43cb1e89b948d78266756637743585054029d967bb5eb5bd9a393c8b2c1006d504d497d02", 0xe2}, {&(0x7f0000001680)="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", 0xfc}, {&(0x7f0000001780)="cba32413750fb8f76f7b7e0fb24d9820203a2f2b51861370bc47f12b1259bbcc7967ac727d2caa997b828cb4a327eb58de9eebf320f8d95b51c45b", 0x3b}, {&(0x7f00000017c0)="0c61c636a2eac08b44cadb37f688f3ea8e7fc5bbb7d26506741767590e30bf04706b1bf3bbded33d4ac358fd4ea9bc16e201f4af9d33f9338908456f492d9f", 0x3f}], 0xa) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000004, 0x2}]}) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000200)) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4004894) fallocate(r0, 0x22, 0xfffffffffffffff8, 0x6) 10:30:28 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c226", 0xbf}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 10:30:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 12) 10:30:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 5) 10:30:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 17) 10:30:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:30:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x777, 0xcd08, 0x0, 0x0) 10:30:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xb07, 0xcd08, 0x0, 0x0) 10:30:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c226", 0xbf}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022ce03000000d71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f07000000000100000088cb564c5127467341e4376c1319a3cb91e35718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888ba19ea763a6372e3668ad38b4998b12b7f74f557998f5ab174fbc688112a84bc098580cf84ab6ebc3e0df6d79a1f9fd6329e898945a721494a669b17517da39f3b33d14a1546424082d5e66ec3492e60b1b4219"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x8) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\t', &(0x7f0000000940)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000ac0)='\x00\xb7Is_;\xceJ\xb0\xa8\x0e\xc0Y\x06=<\x1bv<<\x13 @ \xd8\x8c\x8d\x8a\xf1j wHnp\xd1\xe43\x87\xf52C\x04\xe9\xc4\x1e:\x001\xd2\xc8C2\xef\xf7\xd56`\a\xd3\\^#8\xb7G\xd54\xcf<\xba\x90\xf6k\x0f\xbcB5o\x15\x98\x1d\x9fd\x1e\xc93\x17\x8fJ\xfa\xaf\xbb\xbe\xde\x14\xa5\xf4S&5\xd1t\xaeZ\a\xb9s\xe6`\x827M<\x88\xf4M\xe3\x1bv=\x9e.\xf4\xe5)UkO\x0e}[\x81\xbb\xaeM\x02=\xfc\xc3@\xd0s\xc2r:\xb6\x92\xaf2\x15\x92\x95:\xa4xs\xd2\xf1\xd9\x1a*\xe0\x96[\xc6\xb0\x04R\xc7\x84\x8d\xf4=1\x15\t\xee\xb2\xf3\xa9\x81f\xc8:\x1cx\xf3\xaa\xcf\xf3\xee\x87bx\x88\x0f\xe9\xb5\x13c:)\x1d\xd759C\xe2\x14m`m~\xd2\x82\xe1\x80\xb7?', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) [ 2240.592314] FAULT_INJECTION: forcing a failure. [ 2240.592314] name failslab, interval 1, probability 0, space 0, times 0 [ 2240.593683] CPU: 1 PID: 12212 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2240.594469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2240.595403] Call Trace: [ 2240.595709] dump_stack+0x107/0x167 [ 2240.596139] should_fail.cold+0x5/0xa [ 2240.596570] should_failslab+0x5/0x20 [ 2240.596997] __kmalloc_node_track_caller+0x74/0x3b0 [ 2240.597556] ? __tcp_send_ack.part.0+0x67/0x650 [ 2240.598088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2240.598710] __alloc_skb+0xb1/0x5b0 [ 2240.599119] __tcp_send_ack.part.0+0x67/0x650 [ 2240.599625] tcp_send_ack+0x7d/0xa0 [ 2240.600034] tcp_cleanup_rbuf+0x468/0x5a0 [ 2240.600502] tcp_recvmsg+0xb85/0x2930 [ 2240.600941] ? tcp_splice_read+0x8c0/0x8c0 [ 2240.601425] ? sock_has_perm+0x1ea/0x280 [ 2240.601887] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2240.602475] ? lock_downgrade+0x6d0/0x6d0 [ 2240.602970] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2240.603574] ? tcp_splice_read+0x8c0/0x8c0 [ 2240.604061] inet6_recvmsg+0x13b/0x6e0 [ 2240.604512] ? inet6_bind+0x120/0x120 [ 2240.604950] ? security_socket_recvmsg+0x95/0xc0 [ 2240.605487] ? inet6_bind+0x120/0x120 [ 2240.605925] sock_recvmsg+0xff/0x180 [ 2240.606360] __sys_recvfrom+0x1be/0x2f0 [ 2240.606831] ? __ia32_sys_send+0x100/0x100 [ 2240.607317] ? lock_downgrade+0x6d0/0x6d0 [ 2240.607802] ? wait_for_completion_io+0x270/0x270 [ 2240.608354] ? rcu_read_lock_any_held+0x75/0xa0 [ 2240.608888] ? vfs_write+0x354/0xa70 [ 2240.609314] ? fput_many+0x2f/0x1a0 [ 2240.609731] ? ksys_write+0x1a9/0x260 [ 2240.610171] ? __ia32_sys_read+0xb0/0xb0 [ 2240.610660] __x64_sys_recvfrom+0xdd/0x1b0 [ 2240.611141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2240.611749] do_syscall_64+0x33/0x40 [ 2240.612174] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2240.612762] RIP: 0033:0x7f215657db19 [ 2240.613193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2240.615322] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2240.616210] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2240.617048] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2240.617869] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2240.618700] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2240.619497] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 [ 2240.623655] FAULT_INJECTION: forcing a failure. [ 2240.623655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2240.625284] CPU: 1 PID: 12211 Comm: syz-executor.3 Not tainted 5.10.202 #1 [ 2240.626080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2240.627019] Call Trace: [ 2240.627329] dump_stack+0x107/0x167 [ 2240.627749] should_fail.cold+0x5/0xa [ 2240.628206] _copy_from_user+0x2e/0x1b0 [ 2240.628664] kstrtouint_from_user+0xbd/0x220 [ 2240.629164] ? kstrtou8_from_user+0x210/0x210 [ 2240.629682] ? lock_acquire+0x1b9/0x470 [ 2240.630153] proc_fail_nth_write+0x78/0x220 [ 2240.630652] ? proc_task_getattr+0x1f0/0x1f0 [ 2240.631162] ? __fget_files+0x296/0x4c0 [ 2240.631620] ? proc_task_getattr+0x1f0/0x1f0 [ 2240.632122] vfs_write+0x29a/0xa70 [ 2240.632531] ksys_write+0x12d/0x260 [ 2240.632945] ? __ia32_sys_read+0xb0/0xb0 [ 2240.633399] ? ksys_write+0x260/0x260 [ 2240.633835] ? __x64_sys_write+0xd/0xb0 [ 2240.634285] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2240.634845] do_syscall_64+0x33/0x40 [ 2240.635267] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2240.635862] RIP: 0033:0x7fb8d747f5ff [ 2240.636285] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2240.638370] RSP: 002b:00007fb8d4a42170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2240.639258] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb8d747f5ff [ 2240.640058] RDX: 0000000000000001 RSI: 00007fb8d4a421e0 RDI: 0000000000000006 [ 2240.640872] RBP: 00007fb8d4a421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2240.641673] R10: 000000000000cd08 R11: 0000000000000293 R12: 0000000000000002 [ 2240.642508] R13: 00007ffe8e8306ff R14: 00007fb8d4a42300 R15: 0000000000022000 [ 2240.645037] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 10:30:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c226", 0xbf}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2240.792059] FAULT_INJECTION: forcing a failure. [ 2240.792059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2240.795247] CPU: 0 PID: 12209 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2240.796916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2240.798773] Call Trace: [ 2240.799368] dump_stack+0x107/0x167 [ 2240.800184] should_fail.cold+0x5/0xa [ 2240.801039] _copy_to_iter+0x264/0x12d0 [ 2240.801955] ? sk_wait_data+0x353/0x4d0 [ 2240.802862] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2240.803945] ? mark_held_locks+0x9e/0xe0 [ 2240.804843] ? __virt_addr_valid+0x128/0x350 [ 2240.805797] ? __check_object_size+0x319/0x440 [ 2240.806819] simple_copy_to_iter+0x4c/0x70 [ 2240.807733] __skb_datagram_iter+0x4f7/0x880 [ 2240.808711] ? zerocopy_sg_from_iter+0x110/0x110 [ 2240.809748] skb_copy_datagram_iter+0x88/0x190 [ 2240.810777] tcp_recvmsg+0x13b5/0x2930 [ 2240.811656] ? tcp_splice_read+0x8c0/0x8c0 [ 2240.812579] ? sock_has_perm+0x1ea/0x280 [ 2240.813479] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2240.814614] ? lock_downgrade+0x6d0/0x6d0 [ 2240.815536] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2240.816673] ? tcp_splice_read+0x8c0/0x8c0 [ 2240.817612] inet6_recvmsg+0x13b/0x6e0 [ 2240.818472] ? inet6_bind+0x120/0x120 [ 2240.819327] ? security_socket_recvmsg+0x95/0xc0 [ 2240.820374] ? inet6_bind+0x120/0x120 [ 2240.821213] sock_recvmsg+0xff/0x180 [ 2240.822030] __sys_recvfrom+0x1be/0x2f0 [ 2240.822936] ? __ia32_sys_send+0x100/0x100 [ 2240.823860] ? lock_downgrade+0x6d0/0x6d0 [ 2240.824798] ? wait_for_completion_io+0x270/0x270 [ 2240.825845] ? rcu_read_lock_any_held+0x75/0xa0 [ 2240.826875] ? vfs_write+0x354/0xa70 [ 2240.827699] ? fput_many+0x2f/0x1a0 [ 2240.828500] ? ksys_write+0x1a9/0x260 [ 2240.829345] ? __ia32_sys_read+0xb0/0xb0 [ 2240.830244] __x64_sys_recvfrom+0xdd/0x1b0 [ 2240.831188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2240.832325] do_syscall_64+0x33/0x40 [ 2240.833153] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2240.834289] RIP: 0033:0x7fa704a91b19 [ 2240.835139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2240.839195] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2240.840866] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2240.842436] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2240.844028] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2240.845549] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2240.847072] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 10:30:30 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r1, 0x609}, 0x14}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x4}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x1c}}, 0x24004004) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x10b, 0x1) 10:30:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8", 0xdf}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c226", 0xbf}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8", 0xdf}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xc00, 0xcd08, 0x0, 0x0) 10:30:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 18) [ 2241.849258] FAULT_INJECTION: forcing a failure. [ 2241.849258] name failslab, interval 1, probability 0, space 0, times 0 [ 2241.852116] CPU: 1 PID: 12246 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2241.853766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2241.855733] Call Trace: [ 2241.856268] dump_stack+0x107/0x167 [ 2241.857001] should_fail.cold+0x5/0xa [ 2241.857771] should_failslab+0x5/0x20 [ 2241.858543] __kmalloc_node_track_caller+0x74/0x3b0 [ 2241.859544] ? skb_prepare_for_shift+0x160/0x1e0 [ 2241.860494] pskb_expand_head+0x15a/0x1040 [ 2241.861352] skb_prepare_for_shift+0x160/0x1e0 [ 2241.862267] skb_shift+0x4e4/0x18b0 [ 2241.863013] ? __ip6_finish_output.part.0+0x376/0xbc0 [ 2241.864060] tcp_sacktag_walk+0x6ab/0x1220 [ 2241.864921] tcp_sacktag_write_queue+0x13a8/0x2bb0 [ 2241.865921] ? tcp_sacktag_walk+0x1220/0x1220 [ 2241.866852] tcp_ack+0x2dab/0x5650 [ 2241.867588] ? __lock_acquire+0xbb1/0x5b00 [ 2241.868433] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2241.869417] ? tcp_mstamp_refresh+0x12/0xa0 [ 2241.870276] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2241.871328] ? tcp_validate_incoming+0x431/0x16a0 [ 2241.872298] tcp_rcv_established+0x57e/0x1e30 [ 2241.873199] ? tcp_check_space+0x6c0/0x6c0 [ 2241.874059] tcp_v6_do_rcv+0x7b3/0x1520 [ 2241.874900] __release_sock+0x139/0x3b0 [ 2241.875716] release_sock+0x54/0x1b0 [ 2241.876466] sk_wait_data+0x1a7/0x4d0 [ 2241.877237] ? sock_set_mark+0x130/0x130 [ 2241.878058] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2241.879111] ? tcp_send_ack+0x7d/0xa0 [ 2241.879870] tcp_recvmsg+0x17b2/0x2930 [ 2241.880683] ? tcp_splice_read+0x8c0/0x8c0 [ 2241.881534] ? sock_has_perm+0x1ea/0x280 [ 2241.882363] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2241.883409] ? lock_downgrade+0x6d0/0x6d0 [ 2241.884235] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2241.885280] ? tcp_splice_read+0x8c0/0x8c0 [ 2241.886128] inet6_recvmsg+0x13b/0x6e0 [ 2241.886923] ? inet6_bind+0x120/0x120 [ 2241.887702] ? security_socket_recvmsg+0x95/0xc0 [ 2241.888668] ? inet6_bind+0x120/0x120 [ 2241.889442] sock_recvmsg+0xff/0x180 [ 2241.890203] __sys_recvfrom+0x1be/0x2f0 [ 2241.891027] ? __ia32_sys_send+0x100/0x100 [ 2241.891868] ? lock_downgrade+0x6d0/0x6d0 [ 2241.892715] ? wait_for_completion_io+0x270/0x270 [ 2241.893677] ? rcu_read_lock_any_held+0x75/0xa0 [ 2241.894609] ? vfs_write+0x354/0xa70 [ 2241.895357] ? fput_many+0x2f/0x1a0 [ 2241.896081] ? ksys_write+0x1a9/0x260 [ 2241.896844] ? __ia32_sys_read+0xb0/0xb0 [ 2241.897658] __x64_sys_recvfrom+0xdd/0x1b0 [ 2241.898500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2241.899588] do_syscall_64+0x33/0x40 [ 2241.900339] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2241.901372] RIP: 0033:0x7f215657db19 [ 2241.902120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2241.905840] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2241.907377] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2241.908812] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2241.910238] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2241.911672] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2241.913103] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 [ 2242.742658] Bluetooth: hci1: command 0x0405 tx timeout 10:30:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 6) 10:30:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x903, 0xcd08, 0x0, 0x0) 10:30:44 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xc9f, 0xcd08, 0x0, 0x0) 10:30:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 19) 10:30:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext, 0x0, 0x100000000, 0x2, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x9) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:30:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8", 0xdf}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x300, 0xcd08, 0x0, 0x0) 10:30:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:30:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x161, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6669315d67813138cc91e27e2cca506c74657200f9ffffffeeffffffffffffff00000000000000002300000000040000000000550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf77b11269652d6cc0133ae6ff000000e6fbabe76a64fee488969966c384edbdc7e802491f87845ddf5ea63721ca0036266cd744f5fa5d36f73c36747c49d9a0f2e784a38d61f09026a009d966fe9b3af748f55b9ea689e0c000"], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8000, 0xfffffffffffffffd]}, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x8bb1, 0xffffffee, 0x0, 0xb6dca0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000007c0)="3f7623c0fd5713364c901d3cbce75250", 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.stat\x00', 0x0, 0x0) r5 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x200001, 0x1e2) sendfile(0xffffffffffffffff, r5, 0x0, 0x80000001) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r6}}, 0x5) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xad11}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x1) 10:30:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d12", 0xef}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2255.503479] FAULT_INJECTION: forcing a failure. [ 2255.503479] name failslab, interval 1, probability 0, space 0, times 0 [ 2255.507190] CPU: 1 PID: 12261 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2255.508743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2255.510578] Call Trace: [ 2255.511179] dump_stack+0x107/0x167 [ 2255.511991] should_fail.cold+0x5/0xa [ 2255.512853] should_failslab+0x5/0x20 [ 2255.513706] __kmalloc_node_track_caller+0x74/0x3b0 [ 2255.514955] ? __tcp_send_ack.part.0+0x67/0x650 [ 2255.516140] __alloc_skb+0xb1/0x5b0 [ 2255.517004] __tcp_send_ack.part.0+0x67/0x650 [ 2255.518008] tcp_send_ack+0x7d/0xa0 [ 2255.518829] tcp_cleanup_rbuf+0x468/0x5a0 [ 2255.519756] tcp_recvmsg+0xb85/0x2930 [ 2255.520632] ? tcp_splice_read+0x8c0/0x8c0 [ 2255.521587] ? sock_has_perm+0x1ea/0x280 [ 2255.522496] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2255.523699] ? lock_downgrade+0x6d0/0x6d0 [ 2255.524698] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2255.526006] ? tcp_splice_read+0x8c0/0x8c0 [ 2255.526986] inet6_recvmsg+0x13b/0x6e0 [ 2255.527855] ? inet6_bind+0x120/0x120 [ 2255.528698] ? security_socket_recvmsg+0x95/0xc0 [ 2255.529743] ? inet6_bind+0x120/0x120 [ 2255.530586] sock_recvmsg+0xff/0x180 [ 2255.531424] __sys_recvfrom+0x1be/0x2f0 [ 2255.532309] ? __ia32_sys_send+0x100/0x100 [ 2255.533244] ? lock_downgrade+0x6d0/0x6d0 [ 2255.534189] ? wait_for_completion_io+0x270/0x270 [ 2255.535261] ? rcu_read_lock_any_held+0x75/0xa0 [ 2255.536286] ? vfs_write+0x354/0xa70 [ 2255.537112] ? fput_many+0x2f/0x1a0 [ 2255.537914] ? ksys_write+0x1a9/0x260 [ 2255.538754] ? __ia32_sys_read+0xb0/0xb0 [ 2255.539656] __x64_sys_recvfrom+0xdd/0x1b0 [ 2255.540585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2255.541723] do_syscall_64+0x33/0x40 [ 2255.542550] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2255.543698] RIP: 0033:0x7fa704a91b19 [ 2255.544520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2255.548545] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2255.550214] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2255.551747] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2255.553298] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2255.554831] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2255.556385] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 [ 2255.568540] FAULT_INJECTION: forcing a failure. [ 2255.568540] name failslab, interval 1, probability 0, space 0, times 0 [ 2255.571519] CPU: 1 PID: 12266 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2255.573106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2255.574877] Call Trace: [ 2255.575449] dump_stack+0x107/0x167 [ 2255.576237] should_fail.cold+0x5/0xa [ 2255.577065] ? create_object.isra.0+0x3a/0xa20 [ 2255.578064] should_failslab+0x5/0x20 [ 2255.578916] kmem_cache_alloc+0x5b/0x310 [ 2255.579807] create_object.isra.0+0x3a/0xa20 [ 2255.580766] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2255.581875] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2255.582994] ? skb_prepare_for_shift+0x160/0x1e0 [ 2255.584037] pskb_expand_head+0x15a/0x1040 [ 2255.584982] skb_prepare_for_shift+0x160/0x1e0 [ 2255.585978] skb_shift+0x4e4/0x18b0 [ 2255.586816] tcp_sacktag_walk+0x6ab/0x1220 [ 2255.587746] tcp_sacktag_write_queue+0x13a8/0x2bb0 [ 2255.588840] ? tcp_sacktag_walk+0x1220/0x1220 [ 2255.589833] tcp_ack+0x2dab/0x5650 [ 2255.590640] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2255.591732] ? tcp_mstamp_refresh+0x12/0xa0 [ 2255.592674] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2255.593805] ? tcp_validate_incoming+0x431/0x16a0 [ 2255.594846] tcp_rcv_established+0x57e/0x1e30 [ 2255.595811] ? tcp_check_space+0x6c0/0x6c0 [ 2255.596728] ? ip6_dst_check+0x2fa/0x8d0 [ 2255.597603] tcp_v6_do_rcv+0x7b3/0x1520 [ 2255.598463] __release_sock+0x139/0x3b0 [ 2255.599347] release_sock+0x54/0x1b0 [ 2255.600147] sk_wait_data+0x1a7/0x4d0 [ 2255.600971] ? sock_set_mark+0x130/0x130 [ 2255.601857] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2255.602958] ? tcp_send_ack+0x7d/0xa0 [ 2255.603791] tcp_recvmsg+0x17b2/0x2930 [ 2255.604655] ? tcp_splice_read+0x8c0/0x8c0 [ 2255.605587] ? sock_has_perm+0x1ea/0x280 [ 2255.606476] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2255.607616] ? lock_downgrade+0x6d0/0x6d0 [ 2255.608521] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2255.609671] ? tcp_splice_read+0x8c0/0x8c0 [ 2255.610601] inet6_recvmsg+0x13b/0x6e0 [ 2255.611457] ? inet6_bind+0x120/0x120 [ 2255.612295] ? security_socket_recvmsg+0x95/0xc0 [ 2255.613337] ? inet6_bind+0x120/0x120 [ 2255.614167] sock_recvmsg+0xff/0x180 [ 2255.614994] __sys_recvfrom+0x1be/0x2f0 [ 2255.615864] ? __ia32_sys_send+0x100/0x100 [ 2255.616789] ? lock_downgrade+0x6d0/0x6d0 [ 2255.617721] ? wait_for_completion_io+0x270/0x270 [ 2255.618780] ? rcu_read_lock_any_held+0x75/0xa0 [ 2255.619791] ? vfs_write+0x354/0xa70 [ 2255.620606] ? fput_many+0x2f/0x1a0 [ 2255.621396] ? ksys_write+0x1a9/0x260 [ 2255.622225] ? __ia32_sys_read+0xb0/0xb0 [ 2255.623119] __x64_sys_recvfrom+0xdd/0x1b0 [ 2255.624043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2255.625174] do_syscall_64+0x33/0x40 [ 2255.625991] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2255.627126] RIP: 0033:0x7f215657db19 [ 2255.627945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2255.631969] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2255.633626] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2255.635193] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2255.636742] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2255.638305] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2255.639832] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:30:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d12", 0xef}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d12", 0xef}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:30:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 20) 10:30:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 7) [ 2256.601409] FAULT_INJECTION: forcing a failure. [ 2256.601409] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.604425] CPU: 1 PID: 12302 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2256.606096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.608113] Call Trace: [ 2256.608756] dump_stack+0x107/0x167 [ 2256.609648] should_fail.cold+0x5/0xa [ 2256.610590] ? create_object.isra.0+0x3a/0xa20 [ 2256.611711] should_failslab+0x5/0x20 [ 2256.612629] kmem_cache_alloc+0x5b/0x310 [ 2256.613617] create_object.isra.0+0x3a/0xa20 [ 2256.614681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2256.615873] kmem_cache_alloc_node+0x169/0x330 [ 2256.616867] ? kmem_cache_free+0xa7/0x2d0 [ 2256.617783] __alloc_skb+0x6d/0x5b0 [ 2256.618583] __tcp_send_ack.part.0+0x67/0x650 [ 2256.619569] ? kmem_cache_free+0x249/0x2d0 [ 2256.620495] tcp_send_ack+0x7d/0xa0 [ 2256.621289] tcp_cleanup_rbuf+0x468/0x5a0 [ 2256.622188] tcp_recvmsg+0xb85/0x2930 [ 2256.623034] ? tcp_splice_read+0x8c0/0x8c0 [ 2256.623963] ? sock_has_perm+0x1ea/0x280 [ 2256.624855] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2256.625980] ? lock_downgrade+0x6d0/0x6d0 [ 2256.626898] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2256.628046] ? tcp_splice_read+0x8c0/0x8c0 [ 2256.628967] inet6_recvmsg+0x13b/0x6e0 [ 2256.629820] ? inet6_bind+0x120/0x120 [ 2256.630658] ? security_socket_recvmsg+0x95/0xc0 [ 2256.631693] ? inet6_bind+0x120/0x120 [ 2256.632529] sock_recvmsg+0xff/0x180 [ 2256.633345] __sys_recvfrom+0x1be/0x2f0 [ 2256.634217] ? __ia32_sys_send+0x100/0x100 [ 2256.635170] ? lock_downgrade+0x6d0/0x6d0 [ 2256.636105] ? wait_for_completion_io+0x270/0x270 [ 2256.637178] ? rcu_read_lock_any_held+0x75/0xa0 [ 2256.638172] ? vfs_write+0x354/0xa70 [ 2256.638985] ? fput_many+0x2f/0x1a0 [ 2256.639765] ? ksys_write+0x1a9/0x260 [ 2256.640580] ? __ia32_sys_read+0xb0/0xb0 [ 2256.641453] __x64_sys_recvfrom+0xdd/0x1b0 [ 2256.642360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2256.643472] do_syscall_64+0x33/0x40 [ 2256.644274] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2256.645395] RIP: 0033:0x7f215657db19 [ 2256.646207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.650244] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2256.651916] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2256.653469] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2256.655039] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2256.656597] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2256.658117] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 [ 2256.667181] FAULT_INJECTION: forcing a failure. [ 2256.667181] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.670063] CPU: 0 PID: 12303 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2256.671613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.673482] Call Trace: [ 2256.674080] dump_stack+0x107/0x167 [ 2256.674921] should_fail.cold+0x5/0xa [ 2256.675777] ? create_object.isra.0+0x3a/0xa20 [ 2256.676798] should_failslab+0x5/0x20 [ 2256.677649] kmem_cache_alloc+0x5b/0x310 [ 2256.678555] create_object.isra.0+0x3a/0xa20 [ 2256.679547] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2256.680681] kmem_cache_alloc_node+0x169/0x330 [ 2256.681692] ? kmem_cache_free+0xa7/0x2d0 [ 2256.682615] __alloc_skb+0x6d/0x5b0 [ 2256.683451] __tcp_send_ack.part.0+0x67/0x650 [ 2256.684446] ? kmem_cache_free+0x249/0x2d0 [ 2256.685388] tcp_send_ack+0x7d/0xa0 [ 2256.686185] tcp_cleanup_rbuf+0x468/0x5a0 [ 2256.687104] tcp_recvmsg+0xb85/0x2930 [ 2256.687958] ? tcp_splice_read+0x8c0/0x8c0 [ 2256.688898] ? sock_has_perm+0x1ea/0x280 [ 2256.689791] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2256.690948] ? lock_downgrade+0x6d0/0x6d0 [ 2256.691860] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2256.693017] ? tcp_splice_read+0x8c0/0x8c0 [ 2256.693947] inet6_recvmsg+0x13b/0x6e0 [ 2256.694828] ? inet6_bind+0x120/0x120 [ 2256.695669] ? security_socket_recvmsg+0x95/0xc0 [ 2256.696713] ? inet6_bind+0x120/0x120 [ 2256.697550] sock_recvmsg+0xff/0x180 [ 2256.698382] __sys_recvfrom+0x1be/0x2f0 [ 2256.699263] ? __ia32_sys_send+0x100/0x100 [ 2256.700175] ? lock_downgrade+0x6d0/0x6d0 [ 2256.701111] ? wait_for_completion_io+0x270/0x270 [ 2256.702152] ? rcu_read_lock_any_held+0x75/0xa0 [ 2256.703177] ? vfs_write+0x354/0xa70 [ 2256.703989] ? fput_many+0x2f/0x1a0 [ 2256.704782] ? ksys_write+0x1a9/0x260 [ 2256.705608] ? __ia32_sys_read+0xb0/0xb0 [ 2256.706514] __x64_sys_recvfrom+0xdd/0x1b0 [ 2256.707449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2256.708613] do_syscall_64+0x33/0x40 [ 2256.709520] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2256.710639] RIP: 0033:0x7fa704a91b19 [ 2256.711455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.715457] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2256.717107] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2256.718657] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2256.720217] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2256.721753] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2256.723291] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 10:30:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xd23, 0xcd08, 0x0, 0x0) 10:30:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xb13, 0xcd08, 0x0, 0x0) 10:30:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 8) 10:30:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 21) 10:30:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832", 0xf7}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:30:59 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x4d, 0x1}, 0x7) fallocate(r0, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000006c0)=ANY=[@ANYBLOB="010018f6ff000000000000004c5e9af04119e5ec675b082584e02483d9c3fae0bc28d870c6fa62a53ae8e283164957092a616ae159e7ac290b6a6dd86f1756f5b4651833f8b5072e14cdd4e9e16733fab2233a4c6abc9807be3d2ec5246a700e538822f04a6689f1232267d81e2c163519090e0d107a64a363726726598755c73f8f02ccdd10bb6d679d9185e9093e3794943fa354784d62c834cb6c3205b3c90dee332d638b5ec8033e2a46a16e3212fbe46e90922d", @ANYRES32, @ANYBLOB="00000000000000002e2f66696c653000c1b886380c4057b38cd510e805d7d0112831e7a944676c7e95b254bc0d9d7d957cbbd300b613b700c9807eea4817805c6e74fda9ee305c373666232f9fdcd3e85373ddfe0a2d43da8e583ffa62305853f2bd5769f1b2790c77c519c1bbf7cc0511fcba3dc225889d86a1a6fbd460e2847000000000005c6e4eb7937eb75193d8"]) r1 = syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x7ff, 0x0, &(0x7f00000003c0), 0x408, &(0x7f0000000400)={[{@check_strict}, {@overriderock}, {@unhide}], [{@smackfshat={'smackfshat', 0x3d, '%'}}, {@uid_gt={'uid>', 0xee00}}, {@appraise_type}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0xbaa}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'veth1_to_team\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'io.stat\x00'}}]}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000500)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000100)={'veth1_to_team\x00', 0xca2}) pipe(&(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, 0x32, 0xc21, 0x70bd2b, 0x8000000, {0xa}, [@typed={0x8, 0x76, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x1f, 0x0, 0x0, @fd=r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$netlink(0x10, 0x3, 0x13) lseek(0xffffffffffffffff, 0x0, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000001, 0x50, 0xffffffffffffffff, 0x71414000) r6 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x104, 0x0, 0x0, {0x3, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8844}, 0x800) 10:30:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:30:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x66f, 0xcd08, 0x0, 0x0) 10:31:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832", 0xf7}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2271.289098] FAULT_INJECTION: forcing a failure. [ 2271.289098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2271.291870] CPU: 0 PID: 12318 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2271.293365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2271.295147] Call Trace: [ 2271.295725] dump_stack+0x107/0x167 [ 2271.296503] should_fail.cold+0x5/0xa [ 2271.297332] _copy_to_iter+0x264/0x12d0 [ 2271.298182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2271.299322] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2271.300466] ? trace_hardirqs_on+0x5b/0x180 [ 2271.301405] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2271.302550] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2271.303635] ? __virt_addr_valid+0x128/0x350 [ 2271.304571] ? __check_object_size+0x319/0x440 [ 2271.305571] simple_copy_to_iter+0x4c/0x70 [ 2271.306467] __skb_datagram_iter+0x4f7/0x880 [ 2271.307443] ? zerocopy_sg_from_iter+0x110/0x110 [ 2271.308478] skb_copy_datagram_iter+0x88/0x190 [ 2271.309453] tcp_recvmsg+0x13b5/0x2930 [ 2271.310319] ? tcp_splice_read+0x8c0/0x8c0 [ 2271.311233] ? sock_has_perm+0x1ea/0x280 [ 2271.312118] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2271.313209] ? lock_downgrade+0x6d0/0x6d0 [ 2271.314114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2271.315243] ? tcp_splice_read+0x8c0/0x8c0 [ 2271.316165] inet6_recvmsg+0x13b/0x6e0 [ 2271.317013] ? inet6_bind+0x120/0x120 [ 2271.317823] ? security_socket_recvmsg+0x95/0xc0 [ 2271.318854] ? inet6_bind+0x120/0x120 [ 2271.319673] sock_recvmsg+0xff/0x180 [ 2271.320485] __sys_recvfrom+0x1be/0x2f0 [ 2271.321350] ? __ia32_sys_send+0x100/0x100 [ 2271.322267] ? lock_downgrade+0x6d0/0x6d0 [ 2271.323181] ? wait_for_completion_io+0x270/0x270 [ 2271.324236] ? rcu_read_lock_any_held+0x75/0xa0 [ 2271.325246] ? vfs_write+0x354/0xa70 [ 2271.326060] ? fput_many+0x2f/0x1a0 [ 2271.326856] ? ksys_write+0x1a9/0x260 [ 2271.327701] ? __ia32_sys_read+0xb0/0xb0 [ 2271.328587] __x64_sys_recvfrom+0xdd/0x1b0 [ 2271.329508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2271.330628] do_syscall_64+0x33/0x40 [ 2271.331451] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2271.332565] RIP: 0033:0x7fa704a91b19 [ 2271.333378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2271.337392] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2271.339067] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2271.340622] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2271.342172] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2271.343730] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2271.345280] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 [ 2271.355952] FAULT_INJECTION: forcing a failure. [ 2271.355952] name failslab, interval 1, probability 0, space 0, times 0 [ 2271.357326] CPU: 1 PID: 12323 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2271.358132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2271.359179] Call Trace: [ 2271.359555] dump_stack+0x107/0x167 [ 2271.359989] should_fail.cold+0x5/0xa [ 2271.360424] ? ___slab_alloc+0x360/0x700 [ 2271.360870] ? create_object.isra.0+0x3a/0xa20 [ 2271.361364] should_failslab+0x5/0x20 [ 2271.361869] kmem_cache_alloc+0x5b/0x310 [ 2271.362303] create_object.isra.0+0x3a/0xa20 [ 2271.362943] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2271.363540] kmem_cache_alloc_node+0x169/0x330 [ 2271.364061] __alloc_skb+0x6d/0x5b0 [ 2271.364447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2271.365040] sk_stream_alloc_skb+0x109/0xc30 [ 2271.365506] tcp_write_xmit+0x1e78/0x5c10 [ 2271.365988] ? tcp_validate_incoming+0x431/0x16a0 [ 2271.366538] __tcp_push_pending_frames+0xaa/0x330 [ 2271.367102] tcp_rcv_established+0x8f0/0x1e30 [ 2271.367750] ? tcp_check_space+0x6c0/0x6c0 [ 2271.368242] tcp_v6_do_rcv+0x7b3/0x1520 [ 2271.368683] __release_sock+0x139/0x3b0 [ 2271.369245] release_sock+0x54/0x1b0 [ 2271.369658] sk_wait_data+0x1a7/0x4d0 [ 2271.370184] ? sock_set_mark+0x130/0x130 [ 2271.370701] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2271.371291] ? tcp_send_ack+0x7d/0xa0 [ 2271.371715] tcp_recvmsg+0x17b2/0x2930 [ 2271.372153] ? tcp_splice_read+0x8c0/0x8c0 [ 2271.372643] ? sock_has_perm+0x1ea/0x280 [ 2271.373205] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2271.373775] ? lock_downgrade+0x6d0/0x6d0 [ 2271.374300] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2271.374967] ? tcp_splice_read+0x8c0/0x8c0 [ 2271.375578] inet6_recvmsg+0x13b/0x6e0 [ 2271.376083] ? inet6_bind+0x120/0x120 [ 2271.376509] ? security_socket_recvmsg+0x95/0xc0 [ 2271.377036] ? inet6_bind+0x120/0x120 [ 2271.377466] sock_recvmsg+0xff/0x180 [ 2271.377891] __sys_recvfrom+0x1be/0x2f0 [ 2271.378333] ? __ia32_sys_send+0x100/0x100 [ 2271.378811] ? lock_downgrade+0x6d0/0x6d0 [ 2271.379414] ? wait_for_completion_io+0x270/0x270 [ 2271.379945] ? rcu_read_lock_any_held+0x75/0xa0 [ 2271.380463] ? vfs_write+0x354/0xa70 [ 2271.380880] ? fput_many+0x2f/0x1a0 [ 2271.381278] ? ksys_write+0x1a9/0x260 [ 2271.381700] ? __ia32_sys_read+0xb0/0xb0 [ 2271.382149] __x64_sys_recvfrom+0xdd/0x1b0 [ 2271.382731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2271.383305] do_syscall_64+0x33/0x40 [ 2271.383719] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2271.384346] RIP: 0033:0x7f215657db19 [ 2271.384848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2271.386942] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2271.387788] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2271.388576] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2271.389513] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2271.390304] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2271.391209] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:31:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832", 0xf7}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f", 0xfb}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x6e7, 0xcd08, 0x0, 0x0) 10:31:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 9) 10:31:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x76b, 0xcd08, 0x0, 0x0) 10:31:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f", 0xfb}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:31:14 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1002, 0xcd08, 0x0, 0x0) 10:31:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 22) 10:31:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xda7, 0xcd08, 0x0, 0x0) 10:31:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) write$binfmt_elf64(r1, &(0x7f0000002180)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x3}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cb80)={0x0, [], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cb80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cb80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000004d340)={{0x0, 0x9, 0x4, 0x0, 0x9, 0x80, 0x2, 0x7, 0xfc000000, 0xfff, 0x7, 0x80, 0x0, 0xff}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004e340)={0x0, 0x0, "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", "d843fd3e412d6b2f4ad7b93de4e3495134308067086d3b3e75df2e9fe48cc2f5883083ec8bebde1e39633fc2783e42c9afad8d029a588dc43343cab2be7abaae7fedba05c4a52984ee281acddc4308e2b75a5c217de9dc54b78b7615fd32a243255f30c2e23b8457a18312f26c359687b449b0a18a58810ffec18ae4e4645d86c5cad00f4a76812f649659bfe8955887255c016105e431426c75c1861750998604daf746fa989cd4b53eb3c8c1ccd5593f0d992d244a3b5c8ed4b7219a0ce4a11772dc1d337f7924a37e75fd30a09179656d2193699961face2d67645e755b80bf65dc422793f4120cc4cac5e754bec0b816628fe070ac044e61e5672b850866e4ab031c51d92fd906e1a0d0a25073a124d83378acb962c1458da8d523038007727bbfc3b572dda8cd361e27da85806999a4c338f534ba8b70fe2e8a2f83572bbf4622074ad18fe4eb95f7e32118e5b2060cc13e9946691b96a4ae987f55100ee55b74a87e72a4cb4aa495c2123300479a28850a81e8fb050784104c1339a050d4ae59806ee4eff5512863a669b997165c72f18b6227b12bc05def042edd831858ef1c2fdc833bb1d6b37c3580d7a6181a1d5b46b96773b81a9138eda65ec1b562206022576ce412b7939195a9e8e307c1ad9d3d665fa8068927bb241b5f1c02c86ad98af218241df35478c17170f6719bffbbcee753fceb5c5faf8b06d72d786962d40995148cb57e4707330510f70e1cdd0544b5dd5e74ec856828fd559c23256b501db0067394b1d8c76bd568befaafa439814958046663acdfe5f07da1a5b631855421b076a2e9276c4d98d7dd4b02925bd7c1d9f1f578536a6fbd5d43bdf5034b036c0475b4f24fe1937cc8a7443f65c37d15bab11aaa78447a4fd42888781d1511f65f0734694747888a55024ffd62b1f3d8fca823391bda2221236716031678b6308bac9f54da2acb4836c03a73b4109918b8d7f23d4cc87a67221bcc774bdf3d813ebe143c2d83a4233ce576fe12c2eb7ad87ce3d3427876fa076ea9d192bce8b3e78f0c9de2e6a3b973e7425ec9cbde6e235a9192b5da8f110bf6fb4c9345b5678328b1290f287158db316c860390f954d0701b893569a13fe9b10f80f9fb39c42f0202f3618299c88ece019046ffb9b7120041c1193d26e030e87e5f8ce760143e6b102a2d72c73aaf3e5abc19c066c5ceb4c504ce8e97d3a13ec1f705aeacb1f0b2f8d719230dc031ff6796287bf8bccfc6bb419b250597fcd019c0fe2979eff3627e50c9a01e00cf3ec22d3b560b45b1eb773297d1760ce181c2961f69fcc468e093b830fefc3a06d56d23c55511fc9aa642430373a9215845a596e75c8f0cbd832197d30fdbad676ab5f5fd5560267c43c5994c7997dec48dba24579231cf69cdce0b37e8e130911eca1cc31d1f0f65134f6a8ce715813d8b3f327bf9a761a9d530440fea5a67b8241118a7d9ff1cdb3c424261fccecf1990948ce625e86639e327ae1bcb138923f173bd1e3661996d358b29ae859df9e590976b69d1f2d1dc30f4953adaae96d7a2847d1a5acfb41029c770dab9789f6727a8bd9123567a5283330c0b0294a7cbaf5b9ffc49648a10659e7d404220625c5424d3e6462cff306377940806fa6d56f67fbef98073d2f359c52b30ae909ca275f4f3b29078bbbc53d59f9fe5694ee92d8354f1f72bd5b65e59e7229fbc597dc3ca716ec8c216724e99912596ef72c89d850b5a647249bdd72e99db4d5eb0d6f0e2d30a0e4cc02db1ad0de1d504ede1138a1cd54a6b2d778c07eae6590a0498a721e1947a4eabbb04672a95582f4b4177fff442141260399c127d0d89527d82849b5df8e55b3ddbf0786fc606200bb5908fa74fd1a0c0e21cb76a2791c51af7cdc2057a06ea492879d26d0f523f11e028ef6137483f162c6dc3a970caecba8dd3ee17c3cfc153dcc253d6984c1153d1d3adab4d8a7727eb6d0d6975ad427e59da2f549b360e938c12580000da0aae315ee46bd29ffe3f00712490d12fe72b56d4550ba65a95b13d0484f39df8e93fdafc310db4195646708157a42e36b90b8caa2488039ea81c88af35720a2f60ed58e559f3ed678591dc2e8f35b62b2eec42e25d8435d35465ab3c28f73afa4e2dee981d1e291654fdaca5e444de58e1e66ea4a9aa86d10fd40d0b4537e9e29310d906cae636a677e852fe486b9e3f7a8791e70de651d121cfe35a33e58ce837bae8387999b3590bd881a189c5e95ee5e4986fb4e63a80a0098eb128ee5208c25738c2e9862399154f5c78e45f5424d37c9d205a6a5adfaae9eb5db2d294cb31a4de9feb95f1c3ec9c8f1e05b4d3671c2be4656094d135f0b10a121c28348836666fcc984e8bfccf7bc9183b07869ed3f03fc8ca4e3cc571da70f4075f6b80c5bfcdda527065750ea6db05745fac1597506783b9c2300b94a8caa38e62a6c2de84bae74a21d26828b881272c76b42b92bd427cb8403a1a66b5f454c2983bb19984e3c2a15604a8a547bf716759a6ca96f0a3e38cd0aea2d111508144832a48a6cb13f2f99ba1b1a7c53366f267d7a53c11d4a47839aff9bcea37eb906e028eb2422516f3684bc31bdea712f40f33ea980eaaca0c84a8ff1939892eae6a9aed4cc6f7238b8931a6ad1896959b0e485d0c5aff5aa37d007144d154c4a279b8847015f49c149d7f6c3fe386fddabf5ce648b4297afce47b4c00c88c078eccbbf373d1bb730caf6571f6d3cdc27d43b9faa32e3332d112547545f7f59c864b59c5afb4192e2a01967cdb9e48339e7729573a5392bbf2164027c8eb692edc0dabbe696824152f074da8327f15d80d030fe941375fea3be558e1fbb5cada272d50bfdac41b27e88bdf385a662619e593c723dcef5938ce47b19a5ae24c43640451900a71ecd5f141ea04e84292a72572bae3533376387afc394acd2f7468d9fd97389395f62e9866a0348b9918c7204799307af525829b283b9f29c71acf0a2e09811886a7c8e8369afcfdc6de6e738dc37cd3ba6aa1cd125b407abb24dbcd84f1dc6de661c941da24785a96d09d2f41b9320b02fc0282656fa03c233db9e366a893a130eca313b03d8625816916cd782aa0d70c406f5a4630067b8484f5b1cf4b7c52dcf11db9f5ab69c5a26fd9fbda702d424cd4739984e04166c6fbfa0533425bfc19f27e51e3d92cc457096ee3af75c7e94ece85a9003d3e593c923100418c4650b104f738c7e2275cc5ce06e1adcb24b01a8de57524515112ca5b2e7850138de2aacaaba933bcbf4136e8c1a2111ae9e171f5a697214c7eadb3e6200acc3598670e1ac05a4d6562024f56a1df8e292af5d511af6ed28106e97feddb605cf832b55db7c6d9a0d0e0e7e8388229b1f8a072bb6a339997d86c0d4d4723f29dd56947e7ac633c6fc40206ad221643a52a2ded428bd903f0d4e1629282600b31cf6b743019ef6ace298a7fe33531c9165140a14bfbf927bbb057c0afaf188167657667cf2fcbf98cecde1f121a1f04f92c58d75137959bba67f03b1a661253b45fe14236e8e81119f12024ecc4d5ba621a8b0f2594ef62cd30d9f5515f983a9fa3e898a5c2db340f72331127ff0f75ba3c307583e3d6098c3c271f526154513b737ad8c949b7e70ca02cef5bfefaa5a2a84ee07566bdc2e95b85aaaa65c4ce4ecf8351058724aee5ca7efdc38bf3241ab676d0c7f856a5b22e6117cd297ece2f4e03ee10fdfa3b4e0bdb6d0f99d26e2880d5220e96850e8a3a2bc3332b9d867a4103125f905b75839cc1afa0f56d95ac81299cbd20276076b992327a16fc14dbddbdc2e4712340a3245f7a7b59a3a7a46149609ab3b417a56d52519ab24060d39769c74914e32fc2b8ad1d9e1d23a544e43931d171fdde55cc679943eee7a4f6d59a3f381a786fbf32c1870bb795530de66ae33f396b4e80b92d4362a6a73c63f5bbbbfcc8a89f9f53555a5e672c10653f7bf4d8141c226515edb8961db0dfc0368e0d67a09dcbb5f602c98f2b5d2fc268b5c7ac3de23cc84d06f2ea56042de7fda468d3f3b8a19b1620dcb41949734315b8d2208a3024eb2324bb8ff58c35b1610628d5be301d87da8a26e6d40b2b9954fe1d7cf6721e8ca01ea6c93d122382b56380ecba3fb9ca4a7c61abf4ceaea16322740805287dc2024a7495c1ff3acb45e937b77e7b75c5d8bce1881cf68a3d06d293d493dff6c1aa0ddf6856b900a0d616a717618c54e886553b8a1cdcf158740925317cad7b072fc5fa65c20fc07bae2b20de35ae6da258d315bc59328ccf24c3ddca121e6943a095540a6bc2c623785b9bfc2ea33a770b391079946fbd8da39707b6f5f0634ff614050a76e99476dba74a24a40ea90f433400d2b622a90c190ddf44fc3c5732a5311c30a27f118ea3abecb0954ffb2de872f3b6c0116647720ccafcc35585d1750b713c4d54e8172cae5d94fbbf3f971f354bba9f6a4671e2d7890cabc8bd5aaff9dc883a26469f142cc86633dd7fbfb88f79a5c3e3b4ccd196d8e6a97c28154ff426c66fc31c7d25b528fb2cb30e4741ff0d0089e61af04215b0300e232da326f08a0a06ea25d940f5e390cecf2e019d181d783bc5e18076f8243d9d6f168e1349886727a356325c8668b68cf23117c8de66efd357bb42a44ae94106962427348a4e2cb86d0d698ce6a74eee52c28da31b10adad1367286dd8f54eb04649a7ca5dd3c3b9f44355f66be01b9a24b21cfd13b3222d1b2d78af0d79bc2282647676dd77eeba5a187fa65845fabd6bfb89f42d3dd4c5f58cf8f986ea251ce3d0b55a2bd49a5dfc745c022e0993a463f5d927d069d9695db92892208672b11d255585d8cb696a7e2b7d00f03e2aa9767db35d798908e569e8af54dcd806496fa6cdc6ab7acfa9f0cbb170396acb9e4a183e352ca9400fe3063236f7d5b22c519f316cfd8f028dbe987bf66aeb6e612cab082e4dd65f16328479d85e71d903ed5bce1f44e15b8a5e4897e3f6e5df7d563a600a75f57d35d544ba54d08e6edf09b433623d7427ef0d22012bdc0267bc7b5cfce415136a2243aa143c20bb3b2ee4146d9b82836766adb43e3f14f056db052fcffd05e7f09faa4db75e1c9d5dc9162be2e2f7797532ee97dba4d0ecae6a8f24bc498c99d12046293c438422581826af9b1f4837a9978c190453948319c9565bdbee6ba5690a1b8a18f409e5fe8308b3ebed2ddbe0c2fdd495cfdd452b815a2c688a85aa818b148a448ae0343a6600a923e57aa92b88f7f88b5b418c6e55459d8e3fb9623be00f383ebe3b352d21231c8e49a669f694f8fa33e0948cd1726ce8be66b7b72e6cd3307a53807696361e865b020bd510855cd199a6a0c5a4b782ac145e99e9a43e3f2a192dbbdc8f5ba66b8a55313c654052536a6f7dccbb22ed51"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000004f340)={{0x0, 0x9, 0x5, 0x0, 0x80000001, 0x80000000, 0x2, 0x7ff, 0x1, 0x9, 0x7f, 0x69, 0x6, 0x3f}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000050340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051340)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf7, "97ec866b9a419f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000052340)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6, r7}, {r11, r12}, {r13}, {}, {r14}, {0x0, r15}], 0x4, "7c269bee5712bb"}) 10:31:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832", 0xf7}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2286.329969] FAULT_INJECTION: forcing a failure. [ 2286.329969] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.332410] CPU: 0 PID: 12369 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2286.333188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2286.334101] Call Trace: [ 2286.334397] dump_stack+0x107/0x167 [ 2286.334802] should_fail.cold+0x5/0xa [ 2286.335237] ? create_object.isra.0+0x3a/0xa20 [ 2286.335743] should_failslab+0x5/0x20 [ 2286.336164] kmem_cache_alloc+0x5b/0x310 [ 2286.336619] create_object.isra.0+0x3a/0xa20 [ 2286.337102] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2286.337668] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2286.338316] ? __tcp_send_ack.part.0+0x67/0x650 [ 2286.338823] __alloc_skb+0xb1/0x5b0 [ 2286.339237] __tcp_send_ack.part.0+0x67/0x650 [ 2286.339733] ? kmem_cache_free+0x249/0x2d0 [ 2286.340202] tcp_send_ack+0x7d/0xa0 [ 2286.340608] tcp_cleanup_rbuf+0x468/0x5a0 [ 2286.341068] tcp_recvmsg+0xb85/0x2930 [ 2286.341499] ? tcp_splice_read+0x8c0/0x8c0 [ 2286.341973] ? sock_has_perm+0x1ea/0x280 [ 2286.342425] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2286.343000] ? lock_downgrade+0x6d0/0x6d0 [ 2286.343474] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2286.344061] ? tcp_splice_read+0x8c0/0x8c0 [ 2286.344529] inet6_recvmsg+0x13b/0x6e0 [ 2286.344963] ? inet6_bind+0x120/0x120 [ 2286.345392] ? security_socket_recvmsg+0x95/0xc0 [ 2286.345926] ? inet6_bind+0x120/0x120 [ 2286.346345] sock_recvmsg+0xff/0x180 [ 2286.346760] __sys_recvfrom+0x1be/0x2f0 [ 2286.347211] ? __ia32_sys_send+0x100/0x100 [ 2286.347684] ? lock_downgrade+0x6d0/0x6d0 [ 2286.348162] ? wait_for_completion_io+0x270/0x270 [ 2286.348704] ? rcu_read_lock_any_held+0x75/0xa0 [ 2286.349219] ? vfs_write+0x354/0xa70 [ 2286.349620] ? fput_many+0x2f/0x1a0 [ 2286.350029] ? ksys_write+0x1a9/0x260 [ 2286.350451] ? __ia32_sys_read+0xb0/0xb0 [ 2286.350908] __x64_sys_recvfrom+0xdd/0x1b0 [ 2286.351390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2286.351970] do_syscall_64+0x33/0x40 [ 2286.352380] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2286.352949] RIP: 0033:0x7fa704a91b19 10:31:15 executing program 6: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x800}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r4 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x8000, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="836acc9659000000100000f8755c2d16b8d1b2a113f86dc76fc7062b2d130afb2c4f576048b47c7a9d7f6bf9c6f01323aa8451763956f499e5370b7c045581c53ab5a8a967b80400eaf600000000000077255693f271e3314166da164400"/110, @ANYRES32=r3], 0x10}}], 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r2, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="7f93c584e2000000000000", @ANYRES16, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c900) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 2286.353354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2286.355567] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2286.356416] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2286.357182] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2286.357973] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2286.358759] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2286.359565] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 [ 2286.416984] FAULT_INJECTION: forcing a failure. [ 2286.416984] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.418264] CPU: 0 PID: 12368 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2286.419118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2286.420024] Call Trace: [ 2286.420314] dump_stack+0x107/0x167 [ 2286.420712] should_fail.cold+0x5/0xa [ 2286.421120] ? create_object.isra.0+0x3a/0xa20 [ 2286.421605] should_failslab+0x5/0x20 [ 2286.422010] kmem_cache_alloc+0x5b/0x310 [ 2286.422450] create_object.isra.0+0x3a/0xa20 [ 2286.422927] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2286.423503] kmem_cache_alloc_node+0x169/0x330 [ 2286.424003] ? kmem_cache_free+0xa7/0x2d0 [ 2286.424465] __alloc_skb+0x6d/0x5b0 [ 2286.424876] __tcp_send_ack.part.0+0x67/0x650 [ 2286.425372] ? kmem_cache_free+0x249/0x2d0 [ 2286.425838] tcp_send_ack+0x7d/0xa0 [ 2286.426241] tcp_cleanup_rbuf+0x468/0x5a0 [ 2286.426685] tcp_recvmsg+0xb85/0x2930 [ 2286.427135] ? tcp_splice_read+0x8c0/0x8c0 [ 2286.427609] ? sock_has_perm+0x1ea/0x280 [ 2286.428061] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2286.428635] ? lock_downgrade+0x6d0/0x6d0 [ 2286.429097] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2286.429681] ? tcp_splice_read+0x8c0/0x8c0 [ 2286.430150] inet6_recvmsg+0x13b/0x6e0 [ 2286.430584] ? inet6_bind+0x120/0x120 [ 2286.431006] ? security_socket_recvmsg+0x95/0xc0 [ 2286.431531] ? inet6_bind+0x120/0x120 [ 2286.431941] sock_recvmsg+0xff/0x180 [ 2286.432351] __sys_recvfrom+0x1be/0x2f0 [ 2286.432795] ? __ia32_sys_send+0x100/0x100 [ 2286.433262] ? lock_downgrade+0x6d0/0x6d0 [ 2286.433735] ? wait_for_completion_io+0x270/0x270 [ 2286.434271] ? rcu_read_lock_any_held+0x75/0xa0 [ 2286.434789] ? vfs_write+0x354/0xa70 [ 2286.435209] ? fput_many+0x2f/0x1a0 [ 2286.435612] ? ksys_write+0x1a9/0x260 [ 2286.436024] ? __ia32_sys_read+0xb0/0xb0 [ 2286.436479] __x64_sys_recvfrom+0xdd/0x1b0 [ 2286.436954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2286.437520] do_syscall_64+0x33/0x40 [ 2286.437929] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2286.438490] RIP: 0033:0x7f215657db19 [ 2286.438900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2286.440952] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2286.441789] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2286.442573] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2286.443380] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2286.444177] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2286.444940] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 10:31:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c50", 0xfd}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)="1ddb7cc06cae252401acf436dea95b7ae16ccd867ab2cbb44f3be11abaae341bab929eb38a9afa899548aaa6a7d79761e7641f4f299ee9f1197bbdd0effaf037b479407c29ddf231330954f0ef282248ea914bdd517503bff5a0de2e84a11496267ab2689187d29240423667e18d522f1ee05cb5250f8b67f4bb", 0x7a}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c50", 0xfd}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x263d, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x2) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) stat(0x0, &(0x7f0000000380)) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000140)=""/230, &(0x7f0000000040)=0xe6) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x4, r2, &(0x7f0000000400)="9f2c020ab62e6df110a0fb3ae437f41419f18a0bee2d52d4fdc29344ea9774a1adbafe5772dd9e2f1faee1beb443ed7b0161c51674e173a0032f581c5ed196a2feda0f42a313b7f706a2daede9bc7bbd6cee9a5d20110cd8800f40c6670f211a2ffa7093c44de8b829bd4a296fe052540d86c6554a05a51fff9b126488b37e649670adaff87e4aa3ea6862a286f2fab3bd71c4a8e22ca21c4d4dbf126568", 0x9e, 0x7, 0x0, 0x1}, &(0x7f0000000280)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r5 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x100000001) 10:31:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x2, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 23) 10:31:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x10, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='.\x00', 0x0) utimensat(r0, 0x0, &(0x7f0000000200), 0x0) r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r1, 0x0) sendfile(r0, r1, &(0x7f00000001c0), 0xc3) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x200040, 0x0, 0x1}, 0x18) syz_open_dev$vcsn(0x0, 0xef03, 0x40000) open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x0, 0x11b) 10:31:28 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x2, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 10) 10:31:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:31:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x777, 0xcd08, 0x0, 0x0) 10:31:28 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1003, 0xcd08, 0x0, 0x0) 10:31:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xe00, 0xcd08, 0x0, 0x0) 10:31:29 executing program 6: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x9f30c000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:31:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x2, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2300.253203] FAULT_INJECTION: forcing a failure. [ 2300.253203] name failslab, interval 1, probability 0, space 0, times 0 [ 2300.256024] CPU: 0 PID: 12412 Comm: syz-executor.5 Not tainted 5.10.202 #1 [ 2300.257564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2300.259416] Call Trace: [ 2300.260009] dump_stack+0x107/0x167 [ 2300.260830] should_fail.cold+0x5/0xa [ 2300.261681] ? __alloc_skb+0x6d/0x5b0 [ 2300.262534] should_failslab+0x5/0x20 [ 2300.263393] kmem_cache_alloc_node+0x55/0x330 [ 2300.264390] ? tcp_trim_head+0x470/0x470 [ 2300.265297] __alloc_skb+0x6d/0x5b0 [ 2300.266114] tcp_collapse+0x42c/0xf20 [ 2300.266976] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2300.267901] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2300.268990] ? tcp_xmit_recovery+0x86/0x180 [ 2300.269953] ? tcp_ack+0xebc/0x5650 [ 2300.270780] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2300.271936] tcp_data_queue+0x16ba/0x47f0 [ 2300.272940] ? mark_held_locks+0x9e/0xe0 [ 2300.273910] ? tcp_data_ready+0x500/0x500 [ 2300.274882] ? tcp_urg.part.0+0x157/0x2e0 [ 2300.275891] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2300.276935] ? tcp_validate_incoming+0x431/0x16a0 [ 2300.278064] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2300.279175] tcp_rcv_established+0x868/0x1e30 [ 2300.280251] ? tcp_check_space+0x6c0/0x6c0 [ 2300.281264] tcp_v6_do_rcv+0x7b3/0x1520 [ 2300.282206] __release_sock+0x139/0x3b0 [ 2300.283157] release_sock+0x54/0x1b0 [ 2300.284047] sk_wait_data+0x1a7/0x4d0 [ 2300.284952] ? sock_set_mark+0x130/0x130 [ 2300.285927] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2300.287135] ? tcp_send_ack+0x7d/0xa0 [ 2300.288060] tcp_recvmsg+0x17b2/0x2930 [ 2300.289016] ? tcp_splice_read+0x8c0/0x8c0 [ 2300.290023] ? sock_has_perm+0x1ea/0x280 [ 2300.290983] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2300.292215] ? lock_downgrade+0x6d0/0x6d0 [ 2300.293193] ? tcp_splice_read+0x8c0/0x8c0 [ 2300.294180] inet6_recvmsg+0x13b/0x6e0 [ 2300.295107] ? inet6_bind+0x120/0x120 [ 2300.296030] ? security_socket_recvmsg+0x95/0xc0 [ 2300.297142] ? inet6_bind+0x120/0x120 [ 2300.298049] sock_recvmsg+0xff/0x180 [ 2300.298936] __sys_recvfrom+0x1be/0x2f0 [ 2300.299889] ? __ia32_sys_send+0x100/0x100 [ 2300.300890] ? lock_downgrade+0x6d0/0x6d0 [ 2300.301905] ? wait_for_completion_io+0x270/0x270 [ 2300.303047] ? rcu_read_lock_any_held+0x75/0xa0 [ 2300.304179] ? vfs_write+0x354/0xa70 [ 2300.305066] ? fput_many+0x2f/0x1a0 [ 2300.305937] ? ksys_write+0x1a9/0x260 [ 2300.306837] ? __ia32_sys_read+0xb0/0xb0 [ 2300.307815] __x64_sys_recvfrom+0xdd/0x1b0 [ 2300.308839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.310074] do_syscall_64+0x33/0x40 [ 2300.310978] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2300.312225] RIP: 0033:0x7f215657db19 [ 2300.313123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.317557] RSP: 002b:00007f2153af3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2300.319396] RAX: ffffffffffffffda RBX: 00007f2156690f60 RCX: 00007f215657db19 [ 2300.321072] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2300.322736] RBP: 00007f2153af31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.324434] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2300.326110] R13: 00007ffc403d9c9f R14: 00007f2153af3300 R15: 0000000000022000 [ 2300.337193] FAULT_INJECTION: forcing a failure. [ 2300.337193] name failslab, interval 1, probability 0, space 0, times 0 [ 2300.340040] CPU: 0 PID: 12419 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2300.341614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2300.343538] Call Trace: [ 2300.344149] dump_stack+0x107/0x167 [ 2300.345008] should_fail.cold+0x5/0xa [ 2300.345880] ? __alloc_skb+0x6d/0x5b0 [ 2300.346764] should_failslab+0x5/0x20 [ 2300.347656] kmem_cache_alloc_node+0x55/0x330 [ 2300.348821] ? tcp_trim_head+0x470/0x470 [ 2300.349758] __alloc_skb+0x6d/0x5b0 [ 2300.350595] tcp_collapse+0x42c/0xf20 [ 2300.351496] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2300.352421] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2300.353534] ? tcp_xmit_recovery+0x86/0x180 [ 2300.354518] ? tcp_ack+0xebc/0x5650 [ 2300.355379] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2300.356504] tcp_data_queue+0x16ba/0x47f0 [ 2300.357495] ? mark_held_locks+0x9e/0xe0 [ 2300.358456] ? tcp_data_ready+0x500/0x500 [ 2300.359451] ? tcp_urg.part.0+0x157/0x2e0 [ 2300.360427] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2300.361460] ? tcp_validate_incoming+0x431/0x16a0 [ 2300.362586] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2300.363687] tcp_rcv_established+0x868/0x1e30 [ 2300.364740] ? tcp_check_space+0x6c0/0x6c0 [ 2300.365740] tcp_v6_do_rcv+0x7b3/0x1520 [ 2300.366671] __release_sock+0x139/0x3b0 [ 2300.367608] release_sock+0x54/0x1b0 [ 2300.368488] sk_wait_data+0x1a7/0x4d0 [ 2300.369375] ? sock_set_mark+0x130/0x130 [ 2300.370325] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2300.371527] ? tcp_send_ack+0x7d/0xa0 [ 2300.372433] tcp_recvmsg+0x17b2/0x2930 [ 2300.373358] ? tcp_splice_read+0x8c0/0x8c0 [ 2300.374351] ? sock_has_perm+0x1ea/0x280 [ 2300.375305] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2300.376508] ? lock_downgrade+0x6d0/0x6d0 [ 2300.377467] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2300.378685] ? tcp_splice_read+0x8c0/0x8c0 [ 2300.379673] inet6_recvmsg+0x13b/0x6e0 [ 2300.380579] ? inet6_bind+0x120/0x120 [ 2300.381461] ? security_socket_recvmsg+0x95/0xc0 [ 2300.382552] ? inet6_bind+0x120/0x120 [ 2300.383429] sock_recvmsg+0xff/0x180 [ 2300.384293] __sys_recvfrom+0x1be/0x2f0 [ 2300.385209] ? __ia32_sys_send+0x100/0x100 [ 2300.386180] ? lock_downgrade+0x6d0/0x6d0 [ 2300.387156] ? wait_for_completion_io+0x270/0x270 [ 2300.388288] ? rcu_read_lock_any_held+0x75/0xa0 [ 2300.389353] ? vfs_write+0x354/0xa70 [ 2300.390211] ? fput_many+0x2f/0x1a0 [ 2300.391043] ? ksys_write+0x1a9/0x260 [ 2300.391920] ? __ia32_sys_read+0xb0/0xb0 [ 2300.392849] __x64_sys_recvfrom+0xdd/0x1b0 [ 2300.393816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.394986] do_syscall_64+0x33/0x40 [ 2300.395854] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2300.397015] RIP: 0033:0x7fa704a91b19 [ 2300.397860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.402046] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2300.403788] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2300.405391] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2300.407005] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.408650] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2300.410269] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 10:31:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 24) 10:31:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:31:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1002, 0xcd08, 0x0, 0x0) 10:31:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:31:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x7fb, 0xcd08, 0x0, 0x0) 10:31:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 1) 10:31:44 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1004, 0xcd08, 0x0, 0x0) 10:31:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 11) 10:31:44 executing program 6: unshare(0x0) unshare(0x20000000) unshare(0x70400) 10:31:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1003, 0xcd08, 0x0, 0x0) 10:31:44 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r4}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x9, 0x0, 0x1, 0xdc, 0x0, 0x8, 0x800, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x7, 0x9, 0x1, 0x80000001, 0x1, 0xaf8, 0x0, 0x5, 0x0, 0x101}, r4, 0x0, 0xffffffffffffffff, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) dup2(r5, 0xffffffffffffffff) shutdown(r5, 0x1) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2315.163032] FAULT_INJECTION: forcing a failure. [ 2315.163032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2315.166022] CPU: 1 PID: 12462 Comm: syz-executor.1 Not tainted 5.10.202 #1 [ 2315.167603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.169500] Call Trace: [ 2315.170109] dump_stack+0x107/0x167 [ 2315.170954] should_fail.cold+0x5/0xa [ 2315.171844] _copy_to_iter+0x264/0x12d0 [ 2315.172745] ? mark_lock+0xf5/0x2df0 [ 2315.173574] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2315.174766] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2315.175908] ? lock_chain_count+0x20/0x20 [ 2315.176867] ? __virt_addr_valid+0x128/0x350 [ 2315.177896] ? __check_object_size+0x319/0x440 [ 2315.178958] simple_copy_to_iter+0x4c/0x70 [ 2315.180155] __skb_datagram_iter+0x122/0x880 [ 2315.181299] ? do_raw_spin_lock+0x121/0x260 [ 2315.182427] ? zerocopy_sg_from_iter+0x110/0x110 [ 2315.183701] ? mark_held_locks+0x9e/0xe0 [ 2315.184641] skb_copy_datagram_iter+0x88/0x190 [ 2315.185968] tcp_recvmsg+0x13b5/0x2930 [ 2315.186934] ? tcp_splice_read+0x8c0/0x8c0 [ 2315.187374] FAULT_INJECTION: forcing a failure. [ 2315.187374] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.187948] ? sock_has_perm+0x1ea/0x280 [ 2315.187981] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2315.192269] ? lock_downgrade+0x6d0/0x6d0 [ 2315.193248] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2315.194467] ? tcp_splice_read+0x8c0/0x8c0 [ 2315.195459] inet6_recvmsg+0x13b/0x6e0 [ 2315.196369] ? inet6_bind+0x120/0x120 [ 2315.197260] ? security_socket_recvmsg+0x95/0xc0 [ 2315.198360] ? inet6_bind+0x120/0x120 [ 2315.199246] sock_recvmsg+0xff/0x180 [ 2315.200124] __sys_recvfrom+0x1be/0x2f0 [ 2315.201024] ? __ia32_sys_send+0x100/0x100 [ 2315.201995] ? lock_downgrade+0x6d0/0x6d0 [ 2315.202994] ? wait_for_completion_io+0x270/0x270 [ 2315.204125] ? rcu_read_lock_any_held+0x75/0xa0 [ 2315.205197] ? vfs_write+0x354/0xa70 [ 2315.206081] ? fput_many+0x2f/0x1a0 [ 2315.206938] ? ksys_write+0x1a9/0x260 [ 2315.207848] ? __ia32_sys_read+0xb0/0xb0 [ 2315.208806] __x64_sys_recvfrom+0xdd/0x1b0 [ 2315.209778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.210981] do_syscall_64+0x33/0x40 [ 2315.211852] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2315.213052] RIP: 0033:0x7f8e938dfb19 [ 2315.213938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.218235] RSP: 002b:00007f8e90e55188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2315.220036] RAX: ffffffffffffffda RBX: 00007f8e939f2f60 RCX: 00007f8e938dfb19 [ 2315.221681] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2315.223179] RBP: 00007f8e90e551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2315.224622] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2315.226043] R13: 00007ffd47e82b4f R14: 00007f8e90e55300 R15: 0000000000022000 [ 2315.227517] CPU: 0 PID: 12466 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2315.228924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.230573] Call Trace: [ 2315.231093] dump_stack+0x107/0x167 [ 2315.231829] should_fail.cold+0x5/0xa [ 2315.232593] should_failslab+0x5/0x20 [ 2315.233358] __kmalloc_node_track_caller+0x74/0x3b0 [ 2315.234357] ? tcp_collapse+0x42c/0xf20 [ 2315.235164] __alloc_skb+0xb1/0x5b0 [ 2315.235907] tcp_collapse+0x42c/0xf20 [ 2315.236683] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2315.237500] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2315.238466] ? tcp_xmit_recovery+0x86/0x180 [ 2315.239326] ? tcp_ack+0xebc/0x5650 [ 2315.240083] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2315.241034] tcp_data_queue+0x16ba/0x47f0 [ 2315.241879] ? tcp_data_ready+0x500/0x500 [ 2315.242705] ? tcp_urg.part.0+0x157/0x2e0 [ 2315.243543] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2315.244412] ? tcp_validate_incoming+0x431/0x16a0 [ 2315.245377] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2315.246317] tcp_rcv_established+0x868/0x1e30 [ 2315.247221] ? tcp_check_space+0x6c0/0x6c0 10:31:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000400)="c8be9fd7c0a29e59bf7b82f8456d985a5ec116c38a5a6633475c55e00df6ca5400e76c060238627a7a7069f2528ed1ba3c1dbc7fac538101a5dd4a5e9fe123c077304afbdef0c30d98c92cea78fb5e374ea6a23a6d9bb355353c56bab3e9cbc0290c0c67b3821c0f7988de9b6db80f69dd761e8452e02bb094e8ee765db893531c132938b747420e50c186e85a29bc78bdcd2f84af88640362ae2dd64e461ef950330cfcc12d988b74a72375d6b88ff975522ef42e358f67da66fcd7b3c22613b3bb038f1c0648422e5f9ff35b042572f1244ea60cfb782b0a3e5a6f1bffb8f735e8978683be80a243e46f3c158d1279fca7edd71c2832c97b3d4f3c5044", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2315.248086] tcp_v6_do_rcv+0x7b3/0x1520 [ 2315.249077] __release_sock+0x139/0x3b0 [ 2315.249890] release_sock+0x54/0x1b0 [ 2315.250648] sk_wait_data+0x1a7/0x4d0 [ 2315.251418] ? sock_set_mark+0x130/0x130 [ 2315.252261] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2315.253289] ? tcp_send_ack+0x7d/0xa0 [ 2315.254058] tcp_recvmsg+0x17b2/0x2930 [ 2315.254856] ? tcp_splice_read+0x8c0/0x8c0 [ 2315.255719] ? sock_has_perm+0x1ea/0x280 [ 2315.256512] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2315.257552] ? lock_downgrade+0x6d0/0x6d0 [ 2315.258400] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2315.259472] ? tcp_splice_read+0x8c0/0x8c0 [ 2315.260329] inet6_recvmsg+0x13b/0x6e0 [ 2315.261116] ? inet6_bind+0x120/0x120 [ 2315.261883] ? security_socket_recvmsg+0x95/0xc0 [ 2315.262833] ? inet6_bind+0x120/0x120 [ 2315.263604] sock_recvmsg+0xff/0x180 [ 2315.264354] __sys_recvfrom+0x1be/0x2f0 [ 2315.265154] ? __ia32_sys_send+0x100/0x100 [ 2315.266002] ? lock_downgrade+0x6d0/0x6d0 [ 2315.266857] ? wait_for_completion_io+0x270/0x270 [ 2315.267841] ? rcu_read_lock_any_held+0x75/0xa0 [ 2315.268774] ? vfs_write+0x354/0xa70 [ 2315.269524] ? fput_many+0x2f/0x1a0 [ 2315.270260] ? ksys_write+0x1a9/0x260 [ 2315.271023] ? __ia32_sys_read+0xb0/0xb0 [ 2315.271861] __x64_sys_recvfrom+0xdd/0x1b0 [ 2315.272710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.273746] do_syscall_64+0x33/0x40 [ 2315.274495] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2315.275536] RIP: 0033:0x7fa704a91b19 [ 2315.276283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.279989] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2315.281517] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2315.282954] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2315.284396] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2315.285835] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2315.287272] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 10:31:44 executing program 6: r0 = open(&(0x7f0000000000)='./file1\x00', 0x600000, 0x1b2) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x1, r0, 0x9) lseek(r1, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) fallocate(r1, 0x3, 0x52, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080), 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400032, r6}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x950) r7 = syz_open_dev$vcsa(&(0x7f0000000840), 0x800000000000407, 0x28180) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f0000000880)=0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x7f, 0x9, 0x81, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffff046, 0x2}, 0x40804, 0xc5c5, 0xfc9, 0x2, 0x2, 0x7, 0x0, 0x0, 0x10001, 0x0, 0x5}, 0x0, 0xe, r1, 0xa) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r8, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2435235dcb0b3434020d0f4d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0xff69, 0x3ff03) 10:31:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) 10:31:44 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018004afe8d892bb1f6ac15713c5739689e0000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x6, 0x4, 0x1, 0x2, 0x0, 0xffffffffffff974f, 0x10000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x1f}, 0x2000, 0x5, 0x3, 0x7, 0x8000, 0x3, 0xfe00, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x6, r2, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000100)=""/152, 0x98}, {&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000300)=""/85, 0x55}], 0x5, 0x7fff, 0x1ff) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) write$rfkill(r0, &(0x7f0000000400)={0x4, 0x7, 0x2, 0x0, 0x1}, 0x8) 10:31:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r6}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {r5, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r5, 0x8, 0x0, 0x8000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f00000001c0)=""/89, 0x59, 0x80000001, 0x6}) openat(r5, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd_index=0x3, 0xc000000000000000, &(0x7f0000000500)=[{&(0x7f0000000380)}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000240)='/Qer', 0x4}], 0x3, 0x2, 0x0, {0x1}}, 0xf137) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$setstatus(r4, 0x4, 0x0) [ 2315.840353] [ 2315.840738] ====================================================== [ 2315.841996] WARNING: possible circular locking dependency detected [ 2315.843252] 5.10.202 #1 Not tainted [ 2315.844014] ------------------------------------------------------ [ 2315.845300] syz-executor.6/12493 is trying to acquire lock: [ 2315.846452] ffff88801af84b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2315.848839] [ 2315.848839] but task is already holding lock: [ 2315.850239] ffffffff856193e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2315.853520] [ 2315.853520] which lock already depends on the new lock. [ 2315.853520] [ 2315.857297] [ 2315.857297] the existing dependency chain (in reverse order) is: [ 2315.859056] [ 2315.859056] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 2315.860668] __mutex_lock+0x13d/0x10b0 [ 2315.861702] rfkill_register+0x36/0xa10 [ 2315.862754] hci_register_dev+0x42e/0xc00 [ 2315.863855] __vhci_create_device+0x2c8/0x5c0 [ 2315.865023] vhci_open_timeout+0x38/0x50 [ 2315.866092] process_one_work+0x9a9/0x14b0 [ 2315.867198] worker_thread+0x61d/0x1310 [ 2315.868256] kthread+0x38f/0x470 [ 2315.869171] ret_from_fork+0x22/0x30 [ 2315.870151] [ 2315.870151] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 2315.871700] __mutex_lock+0x13d/0x10b0 [ 2315.872732] vhci_send_frame+0x63/0xa0 [ 2315.873765] hci_send_frame+0x1b9/0x320 [ 2315.874813] hci_tx_work+0x10af/0x1660 [ 2315.875851] process_one_work+0x9a9/0x14b0 [ 2315.876958] worker_thread+0x61d/0x1310 [ 2315.878008] kthread+0x38f/0x470 [ 2315.878917] ret_from_fork+0x22/0x30 [ 2315.879915] [ 2315.879915] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2315.881749] __flush_work+0x105/0xa90 [ 2315.882750] hci_dev_do_close+0x131/0x1240 [ 2315.883858] hci_unregister_dev+0x149/0x430 [ 2315.884995] vhci_release+0x70/0xf0 [ 2315.885970] __fput+0x285/0x980 [ 2315.886862] task_work_run+0xe2/0x1a0 [ 2315.887881] do_exit+0xb6f/0x2600 [ 2315.888805] do_group_exit+0x125/0x310 [ 2315.889833] get_signal+0x4bc/0x22f0 [ 2315.890826] arch_do_signal_or_restart+0x2b7/0x1990 [ 2315.892123] exit_to_user_mode_prepare+0x10f/0x190 [ 2315.893394] syscall_exit_to_user_mode+0x38/0x1e0 [ 2315.894639] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2315.895952] [ 2315.895952] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2315.897437] __mutex_lock+0x13d/0x10b0 [ 2315.898462] bg_scan_update+0x82/0x500 [ 2315.899661] process_one_work+0x9a9/0x14b0 [ 2315.900908] worker_thread+0x61d/0x1310 [ 2315.902034] kthread+0x38f/0x470 [ 2315.903088] ret_from_fork+0x22/0x30 [ 2315.904123] [ 2315.904123] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2315.906098] __lock_acquire+0x29e7/0x5b00 [ 2315.907180] lock_acquire+0x197/0x470 [ 2315.908199] __flush_work+0x105/0xa90 [ 2315.909205] __cancel_work_timer+0x368/0x4c0 [ 2315.910335] hci_request_cancel_all+0x73/0x230 [ 2315.911508] hci_dev_do_close+0xd9/0x1240 [ 2315.912580] hci_rfkill_set_block+0x166/0x1a0 [ 2315.913737] rfkill_set_block+0x1fd/0x540 [ 2315.914812] rfkill_fop_write+0x253/0x4b0 [ 2315.915906] vfs_write+0x29a/0xa70 [ 2315.916841] ksys_write+0x1f6/0x260 [ 2315.917795] do_syscall_64+0x33/0x40 [ 2315.918774] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2315.920089] [ 2315.920089] other info that might help us debug this: [ 2315.920089] [ 2315.921921] Chain exists of: [ 2315.921921] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2315.921921] [ 2315.925043] Possible unsafe locking scenario: [ 2315.925043] [ 2315.926412] CPU0 CPU1 [ 2315.927474] ---- ---- [ 2315.928533] lock(rfkill_global_mutex); [ 2315.929478] lock(&data->open_mutex); [ 2315.930942] lock(rfkill_global_mutex); [ 2315.932461] lock((work_completion)(&hdev->bg_scan_update)); [ 2315.933813] [ 2315.933813] *** DEADLOCK *** [ 2315.933813] [ 2315.935175] 1 lock held by syz-executor.6/12493: [ 2315.936252] #0: ffffffff856193e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2315.938385] [ 2315.938385] stack backtrace: [ 2315.939407] CPU: 1 PID: 12493 Comm: syz-executor.6 Not tainted 5.10.202 #1 [ 2315.940990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.942880] Call Trace: [ 2315.943492] dump_stack+0x107/0x167 [ 2315.944337] check_noncircular+0x263/0x2e0 [ 2315.945304] ? register_lock_class+0xbb/0x17b0 [ 2315.946350] ? print_circular_bug+0x470/0x470 [ 2315.947395] ? find_first_zero_bit+0x94/0xb0 [ 2315.948429] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 2315.949479] __lock_acquire+0x29e7/0x5b00 [ 2315.950472] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2315.951687] ? SOFTIRQ_verbose+0x10/0x10 [ 2315.952636] ? tracing_generic_entry_update+0x1ed/0x270 [ 2315.953878] lock_acquire+0x197/0x470 [ 2315.954755] ? __flush_work+0xdd/0xa90 [ 2315.955677] ? lock_release+0x680/0x680 [ 2315.956732] ? __flush_work+0x78c/0xa90 [ 2315.957766] ? lock_downgrade+0x6d0/0x6d0 [ 2315.958751] __flush_work+0x105/0xa90 [ 2315.959624] ? __flush_work+0xdd/0xa90 [ 2315.960502] ? lock_chain_count+0x20/0x20 [ 2315.961514] ? queue_delayed_work_on+0xe0/0xe0 [ 2315.962683] ? mark_lock+0xf5/0x2df0 [ 2315.963575] ? lock_acquire+0x197/0x470 [ 2315.964488] ? find_held_lock+0x2c/0x110 [ 2315.965433] ? __wake_up_common_lock+0xde/0x140 [ 2315.966634] ? mark_held_locks+0x9e/0xe0 [ 2315.967644] __cancel_work_timer+0x368/0x4c0 [ 2315.968660] ? try_to_grab_pending+0xe0/0xe0 [ 2315.969666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2315.970858] ? cancel_delayed_work+0x1b8/0x2b0 [ 2315.971989] ? cancel_delayed_work_sync+0x20/0x20 [ 2315.973238] hci_request_cancel_all+0x73/0x230 [ 2315.974276] hci_dev_do_close+0xd9/0x1240 [ 2315.975224] ? rfkill_set_block+0x18f/0x540 [ 2315.976347] ? hci_dev_open+0x350/0x350 [ 2315.977356] ? mark_held_locks+0x9e/0xe0 [ 2315.978387] hci_rfkill_set_block+0x166/0x1a0 [ 2315.979503] ? hci_power_off+0x20/0x20 [ 2315.980516] rfkill_set_block+0x1fd/0x540 [ 2315.981542] rfkill_fop_write+0x253/0x4b0 [ 2315.982615] ? rfkill_sync_work+0xa0/0xa0 [ 2315.983627] ? security_file_permission+0x24e/0x570 [ 2315.984892] ? rfkill_sync_work+0xa0/0xa0 [ 2315.985875] vfs_write+0x29a/0xa70 [ 2315.986792] ksys_write+0x1f6/0x260 [ 2315.987650] ? __ia32_sys_read+0xb0/0xb0 [ 2315.988630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2315.989931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.991100] do_syscall_64+0x33/0x40 [ 2315.991960] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2315.993110] RIP: 0033:0x7f436f09cb19 [ 2315.993948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.998091] RSP: 002b:00007f436c612188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2315.999812] RAX: ffffffffffffffda RBX: 00007f436f1aff60 RCX: 00007f436f09cb19 [ 2316.001396] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2316.002967] RBP: 00007f436f0f6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2316.004666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2316.006433] R13: 00007ffe8a8e97bf R14: 00007f436c612300 R15: 0000000000022000 10:31:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x66f, 0xcd08, 0x0, 0x0) 10:31:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 2) 10:31:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 12) 10:31:45 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/118, 0x76}, &(0x7f0000000300)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x6805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/69, 0x45, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) setgid(0x0) setsockopt$sock_int(r1, 0x1, 0x19, &(0x7f0000000100)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202692, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1005, 0xcd08, 0x0, 0x0) [ 2316.197398] FAULT_INJECTION: forcing a failure. [ 2316.197398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2316.200137] CPU: 1 PID: 12508 Comm: syz-executor.1 Not tainted 5.10.202 #1 [ 2316.201497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.203120] Call Trace: [ 2316.203653] dump_stack+0x107/0x167 [ 2316.204372] should_fail.cold+0x5/0xa [ 2316.205129] _copy_to_iter+0x264/0x12d0 [ 2316.205919] ? SOFTIRQ_verbose+0x10/0x10 [ 2316.206703] ? 0xffffffffa0000000 [ 2316.207371] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2316.208341] ? __is_insn_slot_addr+0x14c/0x290 [ 2316.209218] ? __virt_addr_valid+0x128/0x350 [ 2316.210074] ? __check_object_size+0x319/0x440 [ 2316.210958] simple_copy_to_iter+0x4c/0x70 [ 2316.211783] __skb_datagram_iter+0x4f7/0x880 [ 2316.212630] ? zerocopy_sg_from_iter+0x110/0x110 [ 2316.213550] skb_copy_datagram_iter+0x88/0x190 [ 2316.214444] tcp_recvmsg+0x13b5/0x2930 [ 2316.215198] ? tcp_splice_read+0x8c0/0x8c0 [ 2316.216030] ? lock_acquire+0x3ef/0x470 [ 2316.216794] ? lock_release+0x4d1/0x680 [ 2316.217556] ? sock_has_perm+0x1ea/0x280 [ 2316.218335] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2316.219329] ? __might_fault+0xd3/0x180 [ 2316.220107] ? lock_downgrade+0x6d0/0x6d0 [ 2316.220908] ? tcp_splice_read+0x8c0/0x8c0 [ 2316.221722] inet6_recvmsg+0x13b/0x6e0 [ 2316.222468] ? inet6_bind+0x120/0x120 [ 2316.223196] ? security_socket_recvmsg+0x95/0xc0 [ 2316.224104] ? inet6_bind+0x120/0x120 [ 2316.224833] sock_recvmsg+0xff/0x180 [ 2316.225544] __sys_recvfrom+0x1be/0x2f0 [ 2316.226301] ? __ia32_sys_send+0x100/0x100 [ 2316.227106] ? lock_downgrade+0x6d0/0x6d0 [ 2316.227915] ? lock_release+0x4d1/0x680 [ 2316.228684] ? wait_for_completion_io+0x270/0x270 [ 2316.229603] ? vfs_write+0x354/0xa70 [ 2316.230314] ? fput_many+0x2f/0x1a0 [ 2316.231017] ? ksys_write+0x1a9/0x260 [ 2316.231753] ? __ia32_sys_read+0xb0/0xb0 [ 2316.232527] __x64_sys_recvfrom+0xdd/0x1b0 [ 2316.233338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.234322] do_syscall_64+0x33/0x40 [ 2316.235033] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2316.236033] RIP: 0033:0x7f8e938dfb19 [ 2316.236746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.240290] RSP: 002b:00007f8e90e55188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2316.241737] RAX: ffffffffffffffda RBX: 00007f8e939f2f60 RCX: 00007f8e938dfb19 [ 2316.243102] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2316.244461] RBP: 00007f8e90e551d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.245806] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2316.247154] R13: 00007ffd47e82b4f R14: 00007f8e90e55300 R15: 0000000000022000 [ 2316.616169] FAULT_INJECTION: forcing a failure. [ 2316.616169] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.619103] CPU: 0 PID: 12515 Comm: syz-executor.4 Not tainted 5.10.202 #1 [ 2316.620666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.622518] Call Trace: [ 2316.623105] dump_stack+0x107/0x167 [ 2316.623945] should_fail.cold+0x5/0xa [ 2316.624800] should_failslab+0x5/0x20 [ 2316.625647] __kmalloc_node_track_caller+0x74/0x3b0 [ 2316.626752] ? tcp_collapse+0x42c/0xf20 [ 2316.627647] __alloc_skb+0xb1/0x5b0 [ 2316.628452] tcp_collapse+0x42c/0xf20 [ 2316.629297] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2316.630198] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2316.631281] ? tcp_xmit_recovery+0x86/0x180 [ 2316.632245] ? tcp_ack+0xebc/0x5650 [ 2316.633054] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2316.634089] tcp_data_queue+0x16ba/0x47f0 [ 2316.635007] ? lock_release+0x680/0x680 [ 2316.635904] ? lock_downgrade+0x6d0/0x6d0 [ 2316.636823] ? tcp_data_ready+0x500/0x500 [ 2316.637728] ? tcp_urg.part.0+0x157/0x2e0 [ 2316.638635] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2316.639605] ? tcp_validate_incoming+0x431/0x16a0 [ 2316.640663] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2316.641684] tcp_rcv_established+0x868/0x1e30 [ 2316.642670] ? tcp_check_space+0x6c0/0x6c0 [ 2316.643618] tcp_v6_do_rcv+0x7b3/0x1520 [ 2316.644488] __release_sock+0x139/0x3b0 [ 2316.645360] release_sock+0x54/0x1b0 [ 2316.646173] sk_wait_data+0x1a7/0x4d0 [ 2316.647009] ? sock_set_mark+0x130/0x130 [ 2316.647907] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2316.649021] ? tcp_send_ack+0x7d/0xa0 [ 2316.649853] tcp_recvmsg+0x17b2/0x2930 [ 2316.650717] ? tcp_splice_read+0x8c0/0x8c0 [ 2316.651642] ? lock_acquire+0x3ef/0x470 [ 2316.652507] ? lock_release+0x4d1/0x680 [ 2316.653373] ? sock_has_perm+0x1ea/0x280 [ 2316.654261] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2316.655380] ? __might_fault+0xd3/0x180 [ 2316.656259] ? lock_downgrade+0x6d0/0x6d0 [ 2316.657161] ? tcp_splice_read+0x8c0/0x8c0 [ 2316.658081] inet6_recvmsg+0x13b/0x6e0 [ 2316.658928] ? inet6_bind+0x120/0x120 [ 2316.659766] ? security_socket_recvmsg+0x95/0xc0 [ 2316.660793] ? inet6_bind+0x120/0x120 [ 2316.661616] sock_recvmsg+0xff/0x180 [ 2316.662424] __sys_recvfrom+0x1be/0x2f0 [ 2316.663286] ? __ia32_sys_send+0x100/0x100 [ 2316.664220] ? lock_downgrade+0x6d0/0x6d0 [ 2316.665140] ? lock_release+0x4d1/0x680 [ 2316.666037] ? wait_for_completion_io+0x270/0x270 [ 2316.667121] ? vfs_write+0x354/0xa70 [ 2316.667964] ? fput_many+0x2f/0x1a0 [ 2316.668779] ? ksys_write+0x1a9/0x260 [ 2316.669631] ? __ia32_sys_read+0xb0/0xb0 [ 2316.670541] __x64_sys_recvfrom+0xdd/0x1b0 [ 2316.671506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.672666] do_syscall_64+0x33/0x40 [ 2316.673418] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2316.674451] RIP: 0033:0x7fa704a91b19 [ 2316.675202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.678938] RSP: 002b:00007fa702007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2316.680449] RAX: ffffffffffffffda RBX: 00007fa704ba4f60 RCX: 00007fa704a91b19 [ 2316.681864] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2316.683274] RBP: 00007fa7020071d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.684708] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2316.686121] R13: 00007ffced24f3df R14: 00007fa702007300 R15: 0000000000022000 VM DIAGNOSIS: 10:31:45 Registers: info registers vcpu 0 RAX=1ffff11001d266d1 RBX=ffff88800e933658 RCX=ffffffff8127d421 RDX=dffffc0000000000 RSI=ffff888050109fb0 RDI=ffff88800e933688 RBP=ffff888047982f30 RSP=ffff88800c9a7a30 R8 =0000000000000246 R9 =0000000000000003 R10=ffffed1001934f34 R11=0000000000000001 R12=ffff888020398c48 R13=ffff888047982f78 R14=ffff888047982f80 R15=ffff888050109ee0 RIP=ffffffff816f02fe RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbf9b1328c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559d69b8da50 CR3=000000000b9a2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041366e4000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822ca59c RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff88804a8af170 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d088 R14=fffffbfff0f3d03e R15=dffffc0000000000 RIP=ffffffff822ca5f0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f436c612700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa726bbb7a0 CR3=0000000049260000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000