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"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @hopopts={{0x100, 0x29, 0x36, {0x3a, 0x1c, '\x00', [@enc_lim={0x4, 0x1, 0xc2}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x3f, 0xbe, "25fb0dcd15c0be4e5fb92e4a7139ef144909609e58948584776b6dfb0dfa687f58d0c7b883008044cef85d2dd88ce9386853d89a413d24e057172242f945079cbea72cfddde8143c6025924187f653b01039a3190c9cdaffb33c721af15a92047a54061ec6b3a5b5377b9f0e029f95155bae852a62e585f9d88abe8cc714ea4d183a7153790b07c48b6ec24faf580382a01a575abf697130b633a01da1a09752a75729f6adc8da276702bd2fb456d7a09cb8834603c506fbcb2f1cf618f6"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8001}}, @dstopts={{0x50, 0x29, 0x37, {0x3b, 0x6, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x3f}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffe}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x33, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x40}, @pad1, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hopopts={{0x150, 0x29, 0x36, {0x87, 0x26, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @generic={0xe2, 0xe1, "bd8cfb0b1b273cac2c855973bcb6abcad987bc1268db8d11d9b7dff22572e79ea36de79f12a88c560ddde206dcc6914314cb1f54f940af61e8948ea14b041c7b11318bf20168c37e5da2209af68eeb3a0bfc35212adf4b30838cc38ff96a4d30e0f6a548cfeb69865c62c7e74ab3077aca66bc1ebf4fe693b6669bca8c3a4acdea88500e7f746321c125b1090e1f141a509965eb3d28d1b22d5c50ef37bda9b37661a848b6625a35958a0f868eeebf6c74b391823c7d6514d55f8ca902c5608995b327df5887fc57caaf61031ec1bc787b2aa6853550bbb46794893abf2ba21d37"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x89, 0x8, [0x0, 0x5, 0x5, 0x7, 0x5, 0x47]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x1ff}, @padn={0x1, 0x1, [0x0]}]}}}], 0x13c8}}, {{&(0x7f0000005840)={0xa, 0x4e22, 0x8001, @loopback, 0xffff}, 0x1c, &(0x7f0000006e00)=[{&(0x7f0000005880)="072b3a10cdf25ee29f36e3dad8de79f44e7c76a853dd00053367ec4a219f3c0ac862d7f227a51162fbe7470564b47afaa704b3830d075df2c87a086de0ddb123c303c79a86a83e61d64a73106d59dc677ce3709e7ad82bb1cd8b54e1db011fb8187d2d5dffb1bc4b912f0cab2c6966922ef078e1020626b35db7b516f7bea364e885987b0f095e18ad4c33899dde9a76eeb98de16650357188b038edb7aa7f", 0x9f}, {&(0x7f0000005940)="17342191ba5261d9191bc2f92c8d79b2622f6eb1a2c1e8d1d28d5d26208d5257a031cc4c47ca6fbc4a818b3358639aae1e16cba773b8af67e2f7085c49ccd3bf7b5162765ceb53f2b5535fa9080f47860acadc5dd901", 0x56}, {&(0x7f00000059c0)="92523d19b0c1978cc2efed34f933d730100b62b98f998e0df1d0b7f7fa4893b61c10d7321264d3987e7df92cffe7f0f3e8563cc778b7f4e8", 0x38}, {&(0x7f0000005a00)="5bbc2dd56e0418cd90080c81bb9375327a45916be7f00df2863e79d0e0aaa0636ecfa4ea159364679a8cc86477ff40c6dd482cdfbcdfd3dd69e237761f4ef8f63fa8859d2b42cc5649b1c2b27c3b70fb7073e33ead5b5fc7a90deb44e7606259bc669377b2f0a75d2e810aa51f28acf28b7f3e733889fc361ee394a07bc83d2fb1ce6cb2737f060022fe40a70eb21fa66e4b745f337bd513897ac3e8e1b0b85b3b0736e46fdb03c7b0be77700dabbfce6dd342441a09d760e345249e6fdd5481371864ce1c5cd895f9c4c4af1a93049b887b1ee408be16270d2a4d2d5edc3e8a40fa2bbe", 0xe4}, {&(0x7f0000005b00)="9ec908d54299ebc5c8fd8289f5b1153f80fc91805c1501be789df9724e9c415b7896701d22feea5cf1426f27ff8fde7b8f1193f53ce64934fe9122dc03d5b875d9928d69b4e1ae9cff450e0688c5ed71de5ce8093e0dcbdc41cb10af1829de7f0fe731450e6847f30a593b8fcda390f74751f1b676358943ceed38", 0x7b}, {&(0x7f0000005b80)="8d3810ea6c10b3de6e08a0bb93b00687204984c4aa647b439a01d8a3590a9354148a1bef3760c1fd7b79fa7b43fe795d9fe96c9250eeb88810b94559cc022a762a3a797871005c63f1b91773e853696e0cba9e3e9f77055174fcf43ff5837b32d1b456d2c29b3bd3906f0fd499f27ee9de560423737726df8944a75d714df17266e436b56082ed5f2b298654b0b6763f090bd30263b6f45864933980ace96cedb971894cd051fbae78771b", 0xab}, {&(0x7f0000005c40)="28a1fcea6388def727ecdb4835f2eff26092e11b953fd32b81fed63769f7c4f90c13e11a2e692b1b76a6b16594f98da1bca5d5c5a3f0c0bca1bd8ac40940b300a3017f1a46879f262d3fce2b4fc78610fed1bb5d884f5e727109abbbbe137fa4d5dcb880be4e643df15d7fd17770607dc599ec87e3118c0fdc7a8460de20d038c77327f1f3fe26ad8010f671b9a301e02abb2af6321e55036af4f90c29b93c0ab086d5f1e48663b5e7bcc64b767d065f065a156ae81f4844972dfe6687747e68bc042f08d23a6662160410c020de414c65fdf0de7803631b86d9fe2fb3f2d2d1806c47796db17848649e17", 0xeb}, {&(0x7f0000005d40)="8a94265143d0bb927ad4c39f1833000cc3f10476c41a54ce716fc0d903faaf33c7be07857a92e3284c8d11bbf177d0b111d4fb1fa80828c08c01895e3c607763238377e48f7fe4363e6eb4626c796316838352d1e455c135701dd1a37c036103b3029de45cf8b1b7a5c224189cc06dbeef859fdc4d4a6f1b449a58bb3eaa4de0ef827a8d5192124cb7181e9ffa", 0x8d}, {&(0x7f0000005e00)="76e942b30bcae3cc1acb1ca757c52cefcfe962a5f237d925433516c70400cbf432ce83bab2724824d5cb38f438c7fa62a728b53ebee5dc5197179456c46707092e0de726a49a2e9384c388312fd60ae17f12bcd08e4af70a9b2860917d0b3b63dcbaaa05e65d71c9f11ca3979244897ff4fd47aba7c1f2dfb1d5ac55572ffa4ce1f402320ce20f5b097f26379b0d73f6903e24d52a1aec176aac42514812ce492546a7e6dc7fb5579f726d9bff98d442fe02476103debe88427a60b487c3b4271a99c280ef638248ed33c719f5a5fa10ffef700c436da292876ccc4a1b976652eedca499cec0808faecdaf0060d1b25db14f1781f7e28a4246c6992ef2a7a112dafc965ba880fc3e672ebed0058e78a526338e1778aebba488bb88a76c6106dff072eae2c039bf794b7074e5f253c75105319f3f183ac1a69647d5e4aff6db79077c056ebe7d33408e897414283bd76787f4a7d3ae88abbba2613e0c910ef6da1a4785e4c182481db81b39560336ae3c440775d5fc197bc6cc5c109da3bbfdc589a4831d9d8b475694999173a1ceac01ace74f189cf501579fa0ad249e2382f25f4c4353defd55537981b0531168f00f968b4398c454821972254c6bcab38ba7137f6f8fda719037d1a718783aeb503fbc40eb0651abf5fc1cb0d2e04df6b1bd0103653426973c13024746cf44cbca2e10f5621e2cb2e8cc1dc088a1773182c332ac6fc08a20a31744d024d68e6a0bc49551e025db8cb73bac1c902a4968a4fb287905736d3ae32cc25a5f04aace64b9e28d5646da72f1653b708811a56012b6d7a50eec8a87560641ef02138efdd6cafc810a5701d0c9eb58ad286e933fc04e51c9a8b29e9154c586be0995d1bdfdc6c47cec781c9ba78c53cfe23d56ce2be10bc7c12847443e5191055048659d1ea5ee3fe242027adcdf6d29ef55daa8d8db0e940ef3b3cb89861a27d2dcfaa80401041c1cd29ed507f07cd9132e5e4dcccdca40902af5351e733516bcdeb053327fa45b2b1650cd50420c7efc70a734383233bf73f8e86006fe7c42e86deec0ec42fc26d98f4f13afa7c044988ee11314f075b8dc3e9de109873f8b5b88394b7381c5790d739f48a8e692a584ac994392255e58d1d0885dd4a46e743686d04478a4eb998648e110cd6b998ea47a9c11205396862725065a029f32ea70e9e258bdc406ee2605cf14ca9dcdda1df5bb300fb0c792ddb2d7fd0f3119177d2efc0be5e782dfe121605a36dc810f6575f7d89ded39ae5eadb2dc14f3fdc8b5d5911e203112aa07d96309ead49867ea003e40172622f3ada1bf36ba6a68e13d1791b2105fd0b667bc7b5e862be7593463eaf1831e488901de54e7f3bf0cb53016640d8a10d43f158c4471fcead046b35f9aae19bb242878c8a19823e5db9df19e3f5435e41a82d80fedeab7a69f2967879070b24c8e3f7ab88ca46728287198aaf7d223ab7bb850a0921ffb7bad8bf7263bc4f286003508e8e42f7f7a8daa1dbf98ea824e65495e227b7e5af0554054837c82017aa750cdace01e24cfb2df5de94567403149f8a453d7ef262060ba8be71a651bf07075afb026732c0e6df1b0ac60c6f5a402a8b7b83f8f39bc4eaa42c797a1070d6187534f5c4486f837e01410435c917f7b8ff53920a3414f6386d95a36a4d5f7d620979161b9102cc49b7a79fd150b13a82c4aaf72892213189150d157520161297868064ecf240ceaf0ef0521e7b7479b35011d7afc73478feff387e590ef95d795685dd082c28ef0208e18fdb85308fa076a7a427d77900fcbf3cc461730447828768bdb7670d2ce720562309571b668ab11198d9495e3023b9ff7f7c3a0edeb0be345d6b19331926969a77a6d4497e22b4b58b635718bf88a1bc5f4d01cb60ed8414783827dd6333eae424469c4fea181e01cc08fc5e5144b6d3ffd5a57b5e925364135e07766abbc43c5338de7e1697ee84ef9cf59beb4f29e49eff2eb53fcd47840161333a7308530120b1045f3a6e7d0355f29af1f87dc5ab02164af2805a2b4fc932243733ad46fbcb3f468dbe6fd2667a62b56dd06e19036a90dc6d2a585df22ad81bb3c2a95bf4ddc3c3a83400a9ac96084aca51c5066e6ddbfd5f0f6fae3b3f98eef710f44c484a505c10240df6fcb66bb575af5da21cd5915df75fca8a82ab1fde8e0724de3847e567700fae0e5f1ea61a2582b02d5f053b4b4ba40698a66008153a1993252040481d3742d019827b7d39c637746c90355942968bf5af4ecf1d91b4d29ea285b1a2ab53639e6e82f313a291cff9bc53eb3f7b5533d1b396cc127b8ed56acf665122005d26e3ac6c961305c24f1a2e27e8a2614e7167267cd7d7849e769d2b136337241519d5bf7f4be700489e88409ac940d8aed437494b15384f962ffe4c5a0176295f821aaf68cebba42a32ec5bc8921cee4d85195ae4ddad23ac4cfb78ef1fc9eb1c87a5d3e1fb1e63d09e66d5d57efe44a9b0b9459f60ee77de3863060a9436f3f5080eb3303573bde53f7e89ffa287afd9823d771d18476e71bf570541fe3642887a247571bb3d3100071c31e3bd67fb7a07963e733c10e6e8c481a08f7d80bfb4ff04286046274c8e3908cba3894f316ab0a955e69aa79618c84065fc7bca99d23702ad5376a69692b181cb76f724a6e2e5eaf72c3a6a20df78f05fdf6d425ad1dfe4e34c700570bbb29f5a3ed28b20df0de51809c7af561ee8e5b495deccebef61361cb1d03ee0442718497a50750285029dfa27a773b4638c896c74d16590b2c6e2491544118690dae6d24c3fa6e177f1d57ec2b6c6220ed5f718bef1608af4e5739e3a71c3390efb76d017ee3e8f2ae9cf39d5432e58e6d8e167f686734d7f183dcc9b91fbe0604c0e1e0820ef29845f335e7c6259aaf192766a452ee9056e396493f17fcdb53eefd86a6fd2ca937ce0d8269059c6e0f3b963110fb771003f8ab132c48b86db48addaf01e5b6aefcf24ad4f6809252e5d7275511603e56f5578a7a61c52401d45667a5d3b8dd9c1f99cc195486345249dc78fca035c6e94a690f43a05c2548fa38f964f551aa88dfed8688b4354954f9a4ee7bf9a86efb263bf2767937701759d935585f9ff115377d50074ebcf61e3b2d2d9adfb1cfbc866236120fd4b4a05845d38ed57a44cbac4948a890537bf906bfb9a4d236e3ff4185bae3214e5cc987128f42f015162bf0c5c0be076120661afac169a335f02539900a93e75cc4376f77f298c31476f2211b65178d1c3d182005e98681f8e4a4ebb9efe9c1d281683edddee4f0c620d369a779459719ea37a023a58b77a29cdd71b12b4ba11bebda78f5a9f38800dfc2ac0e8c05093b2f35513aba3e584455f6fe7ddd7dd74dbb71a6ddc0c65039db3bef192efb4be53c0c1dcac7bbc5b61d0623c2e02434075a4553ba9f963777b57d8ac3ccf677616a93d54353015cce5da6d7d0300d8c17aa11378931a8b48e9c85a631d051df23b1d1a3dddf941f1c488e39a8a7253fb82560495449e40952fc3eeae511a9d5b576c197e74ad184a99ff2e8aa977d6f91aa87b42fb45d92fae9f1f01fd73b809c43beb8156ed99fdce4d42103278cdc0a4f24a88c7e590eaa8519756370ac0d5e970b6f370ebae5da6d811e903ff76bce35a626cf720d497c66fc230911db142e35a1559e4f6ad307cfd021c0e15decb34c7b275790a7095b8b8f8c0ea4c9a0d4017a47070c285cef34b7b32fea56be29f9363a111c9bc16737ed3bf1b2c444fde76a8ace4365183eca311f85636d1348c18ffa1a506db9f16054d430444a29d0766981e9ecb092ae88b97635d7f93e2fcf1e1db2f255e7137c599821a4268d1f698fe95edf4208f2e592dc31ab3116042485280b83b24cfcb8672805c1fcac730b6f3cc250ea1acf3c46a8f929b205fafd71fa914c40222f327fe06f334cb2b8e6a32ba2abae0500f60f2ce3955073f0b39c97ed6ecd7891f11c52720b7549d2288b52d6265e0bde670c7bac757f81c2fef05043c5e3352aa51acb6639d04ae7c83b66df7345442c7ba882deed322971f8bdb4e5e0407fea32c095e27fe8be0d196775e8c034dcfa80c41f96a28c25650c71f13a9fd03dd2e156d319467872fc411a3c23979e93a60b22a72adb7497c565264869b2342c391233d998cbfa87fd7f62b2a0a5c81056cfd106007ce66615aaee5f2adc74b0727134c7033ae0346e652159d8f14b9a3d097ad6759f7c734991106daa252f7ce32dd4ab0b2cf6175210424fefc648696a02dc29082af50306b95e29dc598762d04dc60a74f0a014708dd3b44e93a90e80d50a4f107cbf635cca1e2d5d4b5f3ca2869d41fd34757324c2577a76818deac01f2bc4fa984a2e6e3372e09bba30b0071d52f18d554a34f88496d89b154a8dd41d8ec462e3a962f56e7c6b1a3d053f2d1d6cc759196dcf6d2fb0d322be801c64bf54c4bd6e5bf20d31c2f3f441cfdf6213f5279043b0ebbd707ca8fff585aaab5400e71211b246a7a367e9af31e01afaa22f2bb806efa3cc67bac498d3863bfc0933f4baf5b8aed478a7ba4347af239be55be0abc91cbb688ff2f56c533964e5292564b259f9092da4a0327673b2b2d12b446c893ae3795bb41bdeb10f3d6e46154c5a0e793f3ed9e20b5ca05c803ac9bfd70c6e5353c6796f3b47158ceb36ea89c3fce16e2fd0e48fab86a7a37abc8ad96e2cf4360adfcdecb47c0c9f5351213463ceec2e4b7998aaea62fd29ce8aa328473085f644be39dd70353086d500ed4dc54c1b405b4532697e2724dc3879bf54fdfdf7af966248999a1f16c84306353d4a4f5da98c5e8309c79e41f036110e8011c7cf33b72d1b9984981a524cae466e8fa19d0fc472eaadc1c06ee32aaf50c51f6720e35c9a0ee309475df4760d96a2240d18eb30619b8a1b9fa4d853706dbc9f1573a3b3c5c83bee8f7a7723a9a45f05f28338ef81c7d9812d953d910c453bfc3eab2bcbf54b47e0c4ca140758bef4d26f47fed1a9de81fd8590e53c76807aeee52508003dbe3b95ab02686cd6099bc5d88955ba697068cf65248a3d5da71f51c737c1a29d3605e98377f33db8c605afe4cb70a95470dd595ea23b1b377ff6e06efbe3469e89daf9da294693388d7f52505b7bfa4a7897074c8eb8e8a54eb3583a3cbb55ccd3061eccbacdeab84ec9a40d7ab713f32c66c6f76a7605e58dd37f4784d21db121da833d1fcedaf73139450c5f1a6126618e7a1f534a0354cc98601df7e844bcf680855dd5b871ffccde8a824bc94551088b4e24856334a42b036a7d2786ba9d904c5d3d5e25f5b72fc2805c83ce96c1f78a2fe2d14a5786bd9a8795353323acf2438281221ae73c6046230f505d717398b2318ff5ab2e01fbed1f8a7537a19e10994595591620387fb36ea9daddb6d5b665f5d9f3b18c08bb647c71a1a61022f9635e3bb85dee2287cc84032030cbcf42d6385ff72aa50fe30a72391eafe905088cbb0a6edfaa624ccb50eee83a22208094379a37a9805cf7648cc1a4af4174bab3df1dd979efd32e12b039a86b8c395b7f8cc570358a7591bcf698448497e1dfe1e3d397bdc7271af0a16b76cf4bb55b0c3c8167ed597e20786acb02a3d99b03d1c3aaa6284bf0a191e57b5d522d762675a8aa390d313153cadb8232e12b8eeba3aa65edc86a6ae27552c727b4e53da657ea9e2e943604384189508f3afcb15b7b234a351ef99ef44d3b24a4faa50d59b303f0654dca370280ad44f3acf88057a2fa8e846cb8c5a41ffb3876a5983d292b39ea6eac868df41ec9e14d", 0x1000}], 0x9, &(0x7f0000006ec0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @dstopts={{0xe8, 0x29, 0x37, {0x67, 0x19, '\x00', [@pad1, @pad1, @generic={0x20, 0x69, "345e830b2f2feb261617229b0273fe836403b679ba37f058c88605114cf0aa562adc3bb075f7e978e15b16403902a37f8af8bd3c15165e18b2dc891803a716d796f27fd9e7fb4a09c23e450304b8aeed507b41a0c108eed907bf393f850fb2f5461dfa5f9c4fbc6dd5"}, @generic={0x7, 0x26, "e6fd73c9c547fdee51320b1d52638ece99a4f9cb2137b21e017c4441637724c580fbf7d8563a"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7e, 0xfe01, [0xffff, 0x8, 0x3f, 0x5d29f265]}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8df}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x67}}}, @tclass={{0x14, 0x29, 0x43, 0x400}}], 0x188}}, {{&(0x7f0000007080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f0000007240)=[{&(0x7f00000070c0)="4dd791d3a45d8073bec96445090b7d58acfd864a4ec6a2171386a74994bfff08ce2b0014035b58247ea9c4ebe9552eb3b801b34b32e4a552395f1cb6f7d61e0c4bbff40133264f4ce1fb0a2a917e58cde2589f0e2bf4f60b1627952cc643b99893d8d9e34c502b37ffcee0bbe1cdd3380d4f7542c61bd6dbd3d7e56afdd4cd2ca43ae847374b80922cd5cfbe08ec83f1ca0d346ae2553061d289b77b40a9e2d2ad6d7585243db939cb661362ec4f345f5736ac7dec", 0xb5}, {&(0x7f0000007180)="88b0802d56947083dc556bd2337d99d30e2c0fef2a79a5c787df3c16f67a7a43fa527c647bed36423a4a0f6a9cab1a5404b05536419a5eac496f8c657e62c4e0fde5b710fb32653013a1b30f8506fe501df046e165c397db5d476afd82306a0153f6", 0x62}, {&(0x7f0000007200)="e9fd2486b411307978eddde67be8a8aac1734ce4d8cf3a21a0b0b34d32", 0x1d}], 0x3, &(0x7f0000007280)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r6}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000007440)=[{&(0x7f0000007300)="f747047490e601f957371dd0126e214e54dfee1a70cb0df2529d320de432dfa87c0716007f3ba422", 0x28}, {&(0x7f0000007340)="999bf9082b32de8cef790e039ae90d066f124df0d25c60b283cc6e821bb688258095ec1c50d99b5cf9d920573480f54b39c7a47d91fb34a8635d352e5760eb81315bdf53ee4ed7bb88132fa7a54804589ddcdf186746e5e2f069d88eb7cb8ce989fadc2f7c", 0x65}, {&(0x7f00000073c0)="c5ca8d63886633ffed8a524935be46f24969f9933dae02d9795c1eb2ca7f9a25430a3c73a5b7246232dc0e7dcb87ba41f3678ea073a40461a5a26be798f228d5d1f688412f0531031082f507358f5b4c7750718dd942dc1db809e887258e4925ec", 0x61}], 0x3, &(0x7f0000007480)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x3b, 0xc, 0x1, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private0, @mcast1, @empty, @local, @mcast1]}}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x2fe183695d3648e3, 0x10, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x7, [0x7, 0x6c03c3f9, 0x7, 0xfffffffffffffffe, 0x8, 0x3fff800000000, 0x9, 0x8]}}, @generic={0x3, 0x2e, "0d483c1f1ae310036521d65ed969589a34e2db5962dde3e5b87969ca36d5c09d92578f3786572c46e40c5454ef54"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x128}}], 0x8, 0x20004004) 12:08:24 executing program 5: getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/106, 0x6a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x221}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x8000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000080)) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r2, &(0x7f0000000000), 0x5ac, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) 12:08:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 9) 12:08:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2={0xff, 0x2, '\x00', 0x0}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:08:24 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x2, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1480.537463] FAULT_INJECTION: forcing a failure. [ 1480.537463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1480.538794] CPU: 1 PID: 10008 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1480.539506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1480.540047] audit: type=1326 audit(1707739704.788:112): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9996 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb660b19 code=0x7ffc0000 [ 1480.540364] Call Trace: [ 1480.540389] dump_stack+0x107/0x167 [ 1480.544623] audit: type=1326 audit(1707739704.788:113): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9996 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb660b19 code=0x7ffc0000 [ 1480.544829] should_fail.cold+0x5/0xa [ 1480.548900] _copy_from_user+0x2e/0x1b0 [ 1480.549319] __copy_msghdr_from_user+0x91/0x4b0 [ 1480.549809] ? __ia32_sys_shutdown+0x80/0x80 [ 1480.550261] ? udp_v6_push_pending_frames+0x360/0x360 [ 1480.550795] ? inet6_sendmsg+0xbd/0x140 [ 1480.551206] ? inet6_compat_ioctl+0x320/0x320 [ 1480.551665] ? __sock_sendmsg+0x55/0x190 [ 1480.552100] sendmsg_copy_msghdr+0xa1/0x160 [ 1480.552545] ? do_recvmmsg+0x6d0/0x6d0 [ 1480.552959] ? __lock_acquire+0x1657/0x5b00 [ 1480.553415] ___sys_sendmsg+0xc6/0x170 [ 1480.553819] ? sendmsg_copy_msghdr+0x160/0x160 [ 1480.554287] ? vmacache_find+0x55/0x2a0 [ 1480.554701] ? __lockdep_reset_lock+0x180/0x180 [ 1480.555183] ? lock_acquire+0x197/0x470 [ 1480.555682] ? find_held_lock+0x2c/0x110 [ 1480.556172] ? __might_fault+0xd3/0x180 [ 1480.556579] ? lock_downgrade+0x6d0/0x6d0 [ 1480.557090] ? asm_exc_page_fault+0x1e/0x30 [ 1480.557630] __sys_sendmmsg+0x195/0x470 [ 1480.558114] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1480.558557] ? lock_downgrade+0x6d0/0x6d0 [ 1480.558996] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1480.559484] ? wait_for_completion_io+0x270/0x270 [ 1480.559988] ? rcu_read_lock_any_held+0x75/0xa0 [ 1480.560474] ? vfs_write+0x354/0xa70 [ 1480.560867] ? fput_many+0x2f/0x1a0 [ 1480.561238] ? ksys_write+0x1a9/0x260 [ 1480.561629] ? __ia32_sys_read+0xb0/0xb0 [ 1480.562051] __x64_sys_sendmmsg+0x99/0x100 [ 1480.562485] do_syscall_64+0x33/0x40 [ 1480.562867] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1480.563385] RIP: 0033:0x7f29466f0b19 [ 1480.563767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1480.565633] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1480.566406] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1480.567120] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1480.567834] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1480.568681] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000001 [ 1480.569400] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1480.574381] audit: type=1326 audit(1707739704.822:114): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9996 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21cb660b19 code=0x7ffc0000 12:08:24 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x8000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:08:24 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x3, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1480.611519] audit: type=1326 audit(1707739704.861:115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9996 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb660b19 code=0x7ffc0000 [ 1480.617092] audit: type=1326 audit(1707739704.861:116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9996 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21cb613a04 code=0x7ffc0000 [ 1480.620460] audit: type=1326 audit(1707739704.861:117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9996 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb660b19 code=0x7ffc0000 12:08:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2={0xff, 0x2, '\x00', 0x2}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1480.624620] audit: type=1326 audit(1707739704.861:118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9996 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f21cb660b19 code=0x7ffc0000 [ 1480.626865] audit: type=1326 audit(1707739704.861:119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9996 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb660b19 code=0x7ffc0000 [ 1480.629875] audit: type=1326 audit(1707739704.863:120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9996 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f21cb660b19 code=0x7ffc0000 [ 1480.636417] audit: type=1326 audit(1707739704.885:121): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9996 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cb660b19 code=0x7ffc0000 12:08:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 10) 12:08:24 executing program 6: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, r1}}, './file0\x00'}) getpeername$unix(r2, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) pwrite64(r3, 0xfffffffffffffffc, 0x0, 0xfffffffffffffff7) setresuid(0xffffffffffffffff, r0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDGETENTCNT(r4, 0x40085203, 0x0) 12:08:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) dup2(r0, 0xffffffffffffffff) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) sendmsg$SEG6_CMD_SETHMAC(r2, 0x0, 0x0) execveat(r2, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000004c0)=[&(0x7f00000003c0)='\n]#!:+/(.^\x00', &(0x7f0000000400)='%&)\x00', &(0x7f0000000440)='-!*-\'\x00', &(0x7f0000000480)=',+-\x00'], &(0x7f00000005c0)=[&(0x7f0000000500)='/dev/snd/timer\x00', &(0x7f0000000540)='-:\x00', &(0x7f0000000580)='/dev/snd/timer\x00'], 0x0) r3 = epoll_create(0x8000) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd=r3, 0x9, &(0x7f0000000140)=""/26, 0x1a, 0x4, 0x1}, 0x1) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f0000000800)=ANY=[@ANYBLOB="9c45cb289520a000000000000003ff4477258c59b47e45f5af7c09000000000000000a941821400c62f17f0d7da90830e4106ca54d64133ef17d282b6c60cfc0d7e9899d843becbf9f45447d1d03292cc66d4f40da3d4f18f1649229d9f2e3cb1be7a1e79c63edf5295e9b9f5cf71c3556d8d1d0b269705d1d60e77474c68805ca9675f46ecb4ac49f4f25ff22d3d70e44dda2c3b1e4174ae124b65c9404918e15065591b541ae477b3d69b3e2c5f7dd7905fae3e0232f3769b9573fe73664a410fa65db6522ee69b4b9a6858e8a7b2336f776a1ce62ffc6591637ab26cecc3c8072a83cdef5466f852240325e52c81c7b91c592afe45f9a0b452ae9bd838f1d809523160000000000000000065767f16cb8a22ada0ca01e830b2969204351aad02cb06c272e5c6ab63e1dd32d4133f9f62efe9a8590c3354117f374a2c1318a75c9c8a5a8868c507447eae82e452bc9012b9e3768d132d5e58a87d8432c3779a4642003408af278f16e55b55dda62377c52b7c9980591e76c72958a"]) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x8c5, 0x400001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000600)={0x90000002}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'rose0\x00'}) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) [ 1480.894702] FAULT_INJECTION: forcing a failure. [ 1480.894702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1480.897234] CPU: 0 PID: 10028 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1480.898434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1480.899868] Call Trace: [ 1480.900348] dump_stack+0x107/0x167 [ 1480.900993] should_fail.cold+0x5/0xa [ 1480.901666] _copy_from_user+0x2e/0x1b0 [ 1480.902372] __copy_msghdr_from_user+0x91/0x4b0 [ 1480.903181] ? __ia32_sys_shutdown+0x80/0x80 [ 1480.903948] ? udp_v6_push_pending_frames+0x360/0x360 [ 1480.904860] ? inet6_sendmsg+0xbd/0x140 [ 1480.905555] ? inet6_compat_ioctl+0x320/0x320 [ 1480.906328] ? __sock_sendmsg+0x55/0x190 [ 1480.907040] sendmsg_copy_msghdr+0xa1/0x160 [ 1480.907781] ? do_recvmmsg+0x6d0/0x6d0 [ 1480.908467] ? __lock_acquire+0x1657/0x5b00 [ 1480.909230] ___sys_sendmsg+0xc6/0x170 [ 1480.909899] ? sendmsg_copy_msghdr+0x160/0x160 [ 1480.910685] ? vmacache_find+0x55/0x2a0 [ 1480.911373] ? __lockdep_reset_lock+0x180/0x180 [ 1480.912196] ? lock_acquire+0x197/0x470 [ 1480.912878] ? find_held_lock+0x2c/0x110 [ 1480.913593] ? __might_fault+0xd3/0x180 [ 1480.914285] ? lock_downgrade+0x6d0/0x6d0 [ 1480.915004] ? asm_exc_page_fault+0x1e/0x30 [ 1480.915764] __sys_sendmmsg+0x195/0x470 [ 1480.916467] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1480.917209] ? lock_downgrade+0x6d0/0x6d0 [ 1480.917945] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1480.918779] ? wait_for_completion_io+0x270/0x270 [ 1480.919616] ? rcu_read_lock_any_held+0x75/0xa0 [ 1480.920421] ? vfs_write+0x354/0xa70 [ 1480.921074] ? fput_many+0x2f/0x1a0 [ 1480.921706] ? ksys_write+0x1a9/0x260 [ 1480.922460] ? __ia32_sys_read+0xb0/0xb0 [ 1480.923389] __x64_sys_sendmmsg+0x99/0x100 [ 1480.924364] do_syscall_64+0x33/0x40 [ 1480.925195] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1480.926218] RIP: 0033:0x7f29466f0b19 [ 1480.926884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1480.930168] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1480.931464] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1480.932701] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1480.933910] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1480.935118] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1480.936332] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1480.977476] EXT4-fs (sda): re-mounted. Opts: (null) [ 1481.012358] EXT4-fs (sda): re-mounted. Opts: (null) 12:08:38 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x8060000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:08:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000340)="0300000008", 0x5, 0x800}], 0x22a4a4, &(0x7f00000000c0)=ANY=[@ANYRESHEX]) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=""/207, 0xcf) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x4a) 12:08:38 executing program 1: ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001740)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r2, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r2, 0xa) r3 = creat(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={0x0}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="001800007bc2000000000000b9ab2b3b8d7d4ebbce54cdb6a461c1df8be3a0642cf5dc46855e3ace55d874c740080d888b96e4757e36cc210045cb6fc11ef0a47669756aef14d6673fa1ff20091748b7a93ee050ba01fce417472c6e66436b65130539259cabb26a8cf4a3d10c128e096410313c9d9adcdce087d7a47bc9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ec9a97f0949f3b6b7780ad8b855bdf07d3d2b9070a70221820a47488219ba25005cde7e5e06d", @ANYRESDEC=r6, @ANYRESHEX=r7]) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={r6, 0x0, r8, 0x7}) 12:08:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x60, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:08:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file1\x00', 0x8, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x181000, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x4}, 0x6) syz_io_uring_setup(0x5c49, &(0x7f0000000240)={0x0, 0x1697, 0x23, 0x0, 0x27b}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005fb40)={0x4, [], 0x0, "83da7ce32c2bd4"}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 12:08:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2={0xff, 0x2, '\x00', 0x3}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:08:38 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=interleave=static,mpol=default=spatic,\x00']) 12:08:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 11) [ 1494.669653] FAULT_INJECTION: forcing a failure. [ 1494.669653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.671089] CPU: 0 PID: 10056 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1494.671820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1494.672704] Call Trace: [ 1494.672992] dump_stack+0x107/0x167 [ 1494.673379] should_fail.cold+0x5/0xa [ 1494.673787] _copy_from_user+0x2e/0x1b0 [ 1494.674215] __copy_msghdr_from_user+0x91/0x4b0 [ 1494.674709] ? __ia32_sys_shutdown+0x80/0x80 [ 1494.675173] ? udp_v6_push_pending_frames+0x360/0x360 [ 1494.675719] ? inet6_sendmsg+0xbd/0x140 [ 1494.676141] ? inet6_compat_ioctl+0x320/0x320 [ 1494.676625] ? __sock_sendmsg+0x55/0x190 [ 1494.677056] sendmsg_copy_msghdr+0xa1/0x160 [ 1494.677509] ? do_recvmmsg+0x6d0/0x6d0 [ 1494.677923] ? __lock_acquire+0x1657/0x5b00 [ 1494.678390] ___sys_sendmsg+0xc6/0x170 [ 1494.678798] ? sendmsg_copy_msghdr+0x160/0x160 [ 1494.679276] ? vmacache_find+0x55/0x2a0 [ 1494.679694] ? __lockdep_reset_lock+0x180/0x180 [ 1494.680191] ? lock_acquire+0x197/0x470 [ 1494.680613] ? find_held_lock+0x2c/0x110 [ 1494.681042] ? __might_fault+0xd3/0x180 [ 1494.681463] ? lock_downgrade+0x6d0/0x6d0 [ 1494.681901] ? asm_exc_page_fault+0x1e/0x30 [ 1494.682372] __sys_sendmmsg+0x195/0x470 [ 1494.682796] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1494.683252] ? lock_downgrade+0x6d0/0x6d0 [ 1494.683701] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1494.684218] ? wait_for_completion_io+0x270/0x270 [ 1494.684722] ? rcu_read_lock_any_held+0x75/0xa0 [ 1494.685209] ? vfs_write+0x354/0xa70 [ 1494.685606] ? fput_many+0x2f/0x1a0 [ 1494.685986] ? ksys_write+0x1a9/0x260 [ 1494.686384] ? __ia32_sys_read+0xb0/0xb0 [ 1494.686813] __x64_sys_sendmmsg+0x99/0x100 [ 1494.687261] do_syscall_64+0x33/0x40 [ 1494.687647] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1494.688181] RIP: 0033:0x7f29466f0b19 [ 1494.688585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1494.690485] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1494.691273] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1494.692015] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1494.692756] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1494.693505] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1494.694245] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:08:38 executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000001b00), 0x1) 12:08:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0xff, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:08:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2={0xff, 0x2, '\x00', 0x6}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:08:39 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xe000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:08:39 executing program 5: sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="00fe26f08c717172e91d11fcf1d03e37d0a9cdc5246497e6e9be2a52b04fa488404cabd15439f170e429dd5057d7d5db566fc9e481b1128bce328ef44be2ac02ea82a613a077c2508b07638c2da855795a8523c7986a0100fc9340627bae481812a27b8f03511a4dfbfc9680cf5c993b89f8efb3de820ef8e9bd3069550000bb04000000000000a65b9192b2dde0498242f3042690688050b6e188a301b717bf204eb12a7fcd85332358a4e595f838fbe8e29ca7b0315e884074ba8f08031384702d050054"], &(0x7f0000000340)=""/106, 0x6a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x422}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x221}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d4, &(0x7f0000000080)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0xa, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x101) sendmsg$inet6(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r3, &(0x7f0000000000), 0x5ac, 0x0, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, 0xffffffffffffffff) 12:08:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:08:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x18, 0xc21, 0x70bd28, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}]}, 0x30}}, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r3, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r3, 0xa) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x248, r4, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x91, 0x58}}}}, [@NL80211_ATTR_TX_RATES={0xe0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9d, 0x2, 0x8, 0x2, 0x6, 0xfc01, 0x200]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x57, 0x48, 0xb]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x15, 0x18, 0xc, 0x48, 0x0, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x1, 0x20, 0x0, 0x9, 0x800, 0xfa0b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x3f, 0x4, 0x8000, 0x7, 0x692, 0xfffb, 0x1]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x1, 0x1, 0x2, 0x60, 0x3, 0x6, 0x42, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xdb, 0x826f, 0x7, 0x6, 0x8, 0x1, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x2, 0x3, 0x808, 0x6, 0x400, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6ec, 0x1, 0x5, 0x6, 0x6, 0x0, 0x8f0, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x6c, 0x1, 0x12, 0xc, 0x36, 0x1, 0x18, 0x48, 0x18]}]}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x18, 0x16, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x1, 0x36, 0x36, 0x18, 0x6, 0x24, 0x18, 0x60, 0x1a, 0x18, 0x1, 0x60, 0x35, 0x6d, 0x6c, 0x76, 0x2, 0x48, 0x16, 0x2, 0x18, 0x3, 0x36, 0x16, 0x1, 0x16]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x6}, {0x7}, {0x3, 0x8}, {0x7, 0x5}, {0x5}, {0x5, 0x7}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x6}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x4, 0x1f}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x2}, {0x5, 0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x6}, {0x2, 0x6}, {0x6, 0x3}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x1, 0x1}, {0x6}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x6}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0xa}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x7, 0x6}, {0x2, 0x4}, {0x4, 0x6}, {0x6, 0xa}, {0x7, 0x3}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x6}, {0x4, 0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x3, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x3, 0x7}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x6}, {0x6, 0x1}, {0x4, 0x8}, {0x6, 0x9}, {0x4, 0xa}, {0x4, 0x6}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x7, 0xa}, {0x7, 0x8}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0xe, 0x20, 0x2, 0x4, 0x8, 0xaaf, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31, 0x6, 0x3, 0x3ff, 0x0, 0x62c, 0x8000, 0xd5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xcd52, 0x1, 0x3f, 0x8, 0x6, 0x7f, 0xccd]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x12, 0x3, 0x5, 0x48, 0x9, 0x6, 0x48, 0x2, 0x60, 0x6c, 0x5d, 0x1, 0x4d, 0x1, 0x6, 0x24, 0x12, 0x1, 0x6, 0x1, 0xc, 0x24, 0x9, 0x6, 0x11, 0x12, 0x24, 0xb, 0x30, 0x12, 0x0]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x2f7aadf3461a0b10, 0x5, 0x14, 0x36, 0xc, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf6, 0x1, 0x101, 0x7, 0x7, 0x9, 0x8]}}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000) 12:08:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 12) [ 1494.909896] FAULT_INJECTION: forcing a failure. [ 1494.909896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.912022] CPU: 1 PID: 10081 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1494.913026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1494.914230] Call Trace: [ 1494.914627] dump_stack+0x107/0x167 [ 1494.915172] should_fail.cold+0x5/0xa [ 1494.915749] _copy_from_user+0x2e/0x1b0 [ 1494.916354] __copy_msghdr_from_user+0x91/0x4b0 [ 1494.917035] ? __ia32_sys_shutdown+0x80/0x80 [ 1494.917684] ? udp_v6_push_pending_frames+0x360/0x360 [ 1494.918443] ? inet6_sendmsg+0xbd/0x140 [ 1494.919030] ? inet6_compat_ioctl+0x320/0x320 [ 1494.919684] ? __sock_sendmsg+0x55/0x190 [ 1494.920297] sendmsg_copy_msghdr+0xa1/0x160 [ 1494.920931] ? do_recvmmsg+0x6d0/0x6d0 [ 1494.921509] ? __lock_acquire+0x1657/0x5b00 [ 1494.922154] ___sys_sendmsg+0xc6/0x170 [ 1494.922724] ? sendmsg_copy_msghdr+0x160/0x160 [ 1494.923393] ? vmacache_find+0x55/0x2a0 [ 1494.923992] ? __lockdep_reset_lock+0x180/0x180 [ 1494.924694] ? lock_acquire+0x197/0x470 [ 1494.925279] ? find_held_lock+0x2c/0x110 [ 1494.925886] ? __might_fault+0xd3/0x180 [ 1494.926476] ? lock_downgrade+0x6d0/0x6d0 [ 1494.927094] ? asm_exc_page_fault+0x1e/0x30 [ 1494.927754] __sys_sendmmsg+0x195/0x470 [ 1494.928357] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1494.928988] ? lock_downgrade+0x6d0/0x6d0 [ 1494.929613] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1494.930322] ? wait_for_completion_io+0x270/0x270 [ 1494.931029] ? rcu_read_lock_any_held+0x75/0xa0 [ 1494.931705] ? vfs_write+0x354/0xa70 [ 1494.932265] ? fput_many+0x2f/0x1a0 [ 1494.932801] ? ksys_write+0x1a9/0x260 [ 1494.933359] ? __ia32_sys_read+0xb0/0xb0 [ 1494.933962] __x64_sys_sendmmsg+0x99/0x100 [ 1494.934580] do_syscall_64+0x33/0x40 [ 1494.935127] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1494.935873] RIP: 0033:0x7f29466f0b19 [ 1494.936425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1494.939059] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1494.940159] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1494.941192] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1494.942222] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1494.943255] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1494.944290] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:08:53 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ac0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000001a80)=0xfffffffffffffda2) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) getegid() r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x2, 0x0, 0x0, @str='*\\:\x00'}]}, 0x38}}, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001a40)={r1, @multicast1, @multicast1}, 0xc) r5 = openat(r2, &(0x7f0000000280)='./file0\x00', 0x488000, 0x4e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg$inet6(r6, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x2, 0x8080) preadv2(r5, &(0x7f0000000800)=[{&(0x7f0000000480)=""/164, 0xa4}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000100)=""/86, 0x56}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000780)=""/6, 0x6}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/21, 0x15}, {&(0x7f0000001940)=""/236, 0xec}], 0x9, 0x1000, 0x0, 0x0) sendmsg$inet6(r6, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) unshare(0x48020200) 12:08:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:08:53 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r0, 0x2, 0x9, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x65}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0bbb800f5e17"}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x20044094) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000900)) r2 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r2, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r2, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x1, 0x1, 0x20, 0x0, 0x0, 0x2, 0x40020, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x545, 0xed9}, 0x40111, 0x40, 0x7, 0x8, 0xaa, 0x6, 0x100, 0x0, 0x9, 0x0, 0x100000001}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) chdir(&(0x7f00000003c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {}, @broadcast}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001e00)={0x2294, r0, 0x18, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x184, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8f, 0x2, "9255c82dda66a0a539a3156d85855c75ab34f36a4fc8e0f216bf891a4959c615b9d5a87aad73363544b1393ee2d3d0fc0bde245107334e74789b56b3b9d871691958bf52be9122c8755133d7321e0760e036c24f90a61947eaffc577e2eee64523765c3020683ad409a5ca3671e67f7a0dff7f137384dbd88bb56ae4a9608031d86db6ef1600c654a10d79"}, @NL80211_BAND_5GHZ={0x97, 0x1, "5fb33aa86e92f7e933aa28e726f8fbd456351c9d4f828379f092b6fb96783ce7140de03152892d699cda1d8f68e36ad789f8b1f2596c5f63a7dc4de54e54a92f43ffc2127100e9c35799fc4a6717c92f84538e3cf16d449d58567bc2a9ac8a4c7cf9442c6558665b8796be1711161d37b5d3d32933b1fa2463297b6699836eaeb9ddfceb53a689bd71567b5e37970c795de5bc"}, @NL80211_BAND_2GHZ={0x57, 0x0, "2dd52df26b9ddd6830399a0fb884aa17c93d5fad2ea2fa3cdec966dc126387ee426d83f3bae5795720e6c5b6f417194444fa85f05b5e7bf3c32e3ee6027f0c4f3cfb2443aac4f64176a14668665ea2b8cb2754"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x20b8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0xaa, 0x1, "7ed04f9ab8a831dd4c5473af63458f1b3c7107ed17b281e69444781841394af53478af8e1959113fd8aa14e515a7d076d2f7b27b7284db9f38b097bfd694da2d73b5412f65a591c1aefbdc154139f07ee73255b89903ff3e9b102e13a7e83bda92f915ec1206125080e3b1c40ca1852cb3097c2c8e9588066c0093451df6c3779e3bcf0e7e9776771eb8f23c268d5e8a9591efe40178d7d8eef97ebdc977e2c9ccbd45bf0bc9"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x5, 0x0, @random='h'}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x2294}}, 0x4040010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 12:08:53 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x11000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:08:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:08:53 executing program 4: syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r0, &(0x7f0000002100)=""/4075, 0xfeb, 0x0) io_uring_enter(0xffffffffffffffff, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0xc) epoll_create(0x8) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r5, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) bind$packet(r2, &(0x7f0000000240)={0x11, 0x6, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x43}, r4}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13, 0x1}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7) 12:08:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 13) 12:08:53 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008000000000000000500000006", 0x29, 0x4100}, {0x0}, {&(0x7f0000012c00)="ed", 0x1, 0x4e00}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x6000}], 0x0, &(0x7f0000013800)) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r1, 0xa) mkdirat(r1, &(0x7f0000000080)='./file2\x00', 0x10) [ 1509.279748] FAULT_INJECTION: forcing a failure. [ 1509.279748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.282199] CPU: 1 PID: 10094 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1509.283201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1509.284397] Call Trace: [ 1509.284789] dump_stack+0x107/0x167 [ 1509.285328] should_fail.cold+0x5/0xa [ 1509.285890] _copy_from_user+0x2e/0x1b0 [ 1509.286476] __copy_msghdr_from_user+0x91/0x4b0 [ 1509.287154] ? __ia32_sys_shutdown+0x80/0x80 [ 1509.287794] ? udp_v6_push_pending_frames+0x360/0x360 [ 1509.288554] ? inet6_sendmsg+0xbd/0x140 [ 1509.289136] ? inet6_compat_ioctl+0x320/0x320 [ 1509.289783] ? __sock_sendmsg+0x55/0x190 [ 1509.290366] sendmsg_copy_msghdr+0xa1/0x160 [ 1509.290998] ? do_recvmmsg+0x6d0/0x6d0 [ 1509.291569] ? __lock_acquire+0x1657/0x5b00 [ 1509.292213] ___sys_sendmsg+0xc6/0x170 [ 1509.292791] ? sendmsg_copy_msghdr+0x160/0x160 [ 1509.293453] ? vmacache_find+0x55/0x2a0 [ 1509.294035] ? __lockdep_reset_lock+0x180/0x180 [ 1509.294719] ? lock_acquire+0x197/0x470 [ 1509.295301] ? find_held_lock+0x2c/0x110 [ 1509.295896] ? __might_fault+0xd3/0x180 [ 1509.296484] ? lock_downgrade+0x6d0/0x6d0 [ 1509.297085] ? asm_exc_page_fault+0x1e/0x30 [ 1509.297731] __sys_sendmmsg+0x195/0x470 [ 1509.298319] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1509.298946] ? lock_downgrade+0x6d0/0x6d0 [ 1509.299568] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1509.300273] ? wait_for_completion_io+0x270/0x270 [ 1509.300980] ? rcu_read_lock_any_held+0x75/0xa0 [ 1509.301655] ? vfs_write+0x354/0xa70 [ 1509.302200] ? fput_many+0x2f/0x1a0 [ 1509.302735] ? ksys_write+0x1a9/0x260 [ 1509.303288] ? __ia32_sys_read+0xb0/0xb0 [ 1509.303888] __x64_sys_sendmmsg+0x99/0x100 [ 1509.304516] do_syscall_64+0x33/0x40 [ 1509.305058] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1509.305800] RIP: 0033:0x7f29466f0b19 [ 1509.306343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1509.308971] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1509.310060] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1509.311081] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1509.312109] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1509.313134] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1509.314157] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:08:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:08:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1509.394857] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 12:08:53 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffff3}]}) sync() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4, 0x81, 0x5, 0x276}, {0x92, 0x33, 0x7f, 0x8}]}) 12:08:53 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x43050000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1509.453740] EXT4-fs error (device loop5): ext4_lookup:1757: inode #2: comm syz-executor.5: deleted inode referenced: 15 12:08:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 14) 12:08:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x5, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1509.672716] FAULT_INJECTION: forcing a failure. [ 1509.672716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.675336] CPU: 0 PID: 10129 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1509.676677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1509.678284] Call Trace: [ 1509.678801] dump_stack+0x107/0x167 [ 1509.679520] should_fail.cold+0x5/0xa [ 1509.680270] _copy_from_user+0x2e/0x1b0 [ 1509.681056] __copy_msghdr_from_user+0x91/0x4b0 [ 1509.681960] ? __ia32_sys_shutdown+0x80/0x80 [ 1509.682813] ? udp_v6_push_pending_frames+0x360/0x360 [ 1509.683806] ? inet6_sendmsg+0xbd/0x140 [ 1509.684456] ? inet6_compat_ioctl+0x320/0x320 [ 1509.685173] ? __sock_sendmsg+0x55/0x190 [ 1509.685836] sendmsg_copy_msghdr+0xa1/0x160 [ 1509.686523] ? do_recvmmsg+0x6d0/0x6d0 [ 1509.687159] ? __lock_acquire+0x1657/0x5b00 [ 1509.687862] ___sys_sendmsg+0xc6/0x170 [ 1509.688506] ? sendmsg_copy_msghdr+0x160/0x160 [ 1509.689237] ? vmacache_find+0x55/0x2a0 [ 1509.689882] ? __lockdep_reset_lock+0x180/0x180 [ 1509.690642] ? lock_acquire+0x197/0x470 [ 1509.691275] ? find_held_lock+0x2c/0x110 [ 1509.691940] ? __might_fault+0xd3/0x180 [ 1509.692588] ? lock_downgrade+0x6d0/0x6d0 [ 1509.693259] ? asm_exc_page_fault+0x1e/0x30 [ 1509.693977] __sys_sendmmsg+0x195/0x470 [ 1509.694625] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1509.695366] ? lock_downgrade+0x6d0/0x6d0 [ 1509.696046] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1509.696831] ? wait_for_completion_io+0x270/0x270 [ 1509.697602] ? rcu_read_lock_any_held+0x75/0xa0 [ 1509.698333] ? vfs_write+0x354/0xa70 [ 1509.698934] ? fput_many+0x2f/0x1a0 [ 1509.699520] ? ksys_write+0x1a9/0x260 [ 1509.700139] ? __ia32_sys_read+0xb0/0xb0 [ 1509.700801] __x64_sys_sendmmsg+0x99/0x100 [ 1509.701482] do_syscall_64+0x33/0x40 [ 1509.702076] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1509.702896] RIP: 0033:0x7f29466f0b19 [ 1509.703493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1509.706395] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1509.707608] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1509.708753] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1509.709890] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1509.711026] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1509.712164] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:09:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x60, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:08 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000a3866eadc4d82e2f"]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fork() fcntl$setown(r1, 0x8, r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) fsync(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0x4000007ffffffc) fork() sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x19, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x15, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x14, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 12:09:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) flock(r0, 0x1) openat(r1, &(0x7f00000001c0)='./file1/file0\x00', 0x4000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}]}, 0x24}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r3, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r3, 0xa) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x8001}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x818) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) unshare(0x48020200) 12:09:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 15) 12:09:08 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x60000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:09:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:08 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="60010000100001000000000000000000ff020000000000000000000000000001fc000000000000000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040000000976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"], 0x160}}, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r1, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x7, {0x12, 0x400, 0x2, 0x8, 0x5}}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r3, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r3, 0xa) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000080)) 12:09:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="140010001800010000000000000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x48005) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r1, 0xa) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) socket$netlink(0x10, 0x3, 0x15) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x80, 0xff, 0x3, 0x81, 0x0, 0x7, 0x12800, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xf12}, 0x204, 0x2, 0x3ff, 0x0, 0xb7, 0x0, 0x400, 0x0, 0x1f, 0x0, 0xd06b}, r2, 0x7, 0xffffffffffffffff, 0x2) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000100)="56981cf5f37963e26613022d5aba1cfe46fbcfcb134cfbc3339bd56f31fbbc1524e7df777a914c909161ed35b48b4f7b1275c8ca1b318069c51e006b5590235445db182aa6ceaf4070977396f57df4ddb64524f05ed3656d9672248bf896e904f55b35c62841b5dfeb72f70402011996343da451f4e0a5986414ad2f3b1310e4b8b975b94f6250f2062bb035754779256cdd6de2") r3 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r3, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r3, 0xa) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x21, 0xff, 0x45, 0x3a, 0x0, 0x3f, 0x800, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x5, @perf_bp={&(0x7f0000000040), 0x9}, 0x400c, 0x6, 0x10001, 0x2, 0xffff, 0x7, 0x80, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r3, 0x2) [ 1524.397822] FAULT_INJECTION: forcing a failure. [ 1524.397822] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1524.399508] CPU: 1 PID: 10148 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1524.400207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1524.401114] Call Trace: [ 1524.401433] dump_stack+0x107/0x167 [ 1524.401807] should_fail.cold+0x5/0xa [ 1524.402196] __alloc_pages_nodemask+0x182/0x600 [ 1524.402665] ? lock_chain_count+0x20/0x20 [ 1524.403083] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1524.403697] ? perf_trace_lock+0xac/0x490 [ 1524.404120] alloc_pages_vma+0xbb/0x410 [ 1524.404522] wp_page_copy+0xee7/0x1f00 [ 1524.404931] ? print_bad_pte+0x5a0/0x5a0 [ 1524.405340] ? lock_downgrade+0x6d0/0x6d0 [ 1524.405755] ? vm_normal_page+0x162/0x2e0 [ 1524.406175] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1524.406706] do_wp_page+0x27b/0x1390 [ 1524.407086] handle_mm_fault+0x1cc7/0x3500 [ 1524.407514] ? __lock_acquire+0x1657/0x5b00 [ 1524.407949] ? __pmd_alloc+0x5e0/0x5e0 [ 1524.408349] ? vmacache_find+0x55/0x2a0 [ 1524.408764] do_user_addr_fault+0x56e/0xc60 [ 1524.409209] exc_page_fault+0xa2/0x1a0 [ 1524.409600] asm_exc_page_fault+0x1e/0x30 [ 1524.410018] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1524.410518] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 31 0f 1e 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 12 0f 1e 02 66 90 48 bb f9 ef ff ff ff 7f [ 1524.412337] RSP: 0018:ffff88804a6afcf0 EFLAGS: 00050293 [ 1524.412876] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020005038 [ 1524.413580] RDX: 0000000000040000 RSI: ffffffff830fd072 RDI: ffff88804e803db8 [ 1524.414289] RBP: 0000000000040811 R08: 0000000000000000 R09: 0000000000000000 [ 1524.414992] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000c [ 1524.415704] R13: 0000000020005000 R14: 0000000000000400 R15: 00000000000003ff [ 1524.416420] ? __sys_sendmmsg+0x1c2/0x470 [ 1524.416853] __sys_sendmmsg+0x1cf/0x470 [ 1524.417262] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1524.417691] ? lock_downgrade+0x6d0/0x6d0 [ 1524.418119] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1524.418602] ? wait_for_completion_io+0x270/0x270 [ 1524.419085] ? rcu_read_lock_any_held+0x75/0xa0 [ 1524.419547] ? vfs_write+0x354/0xa70 [ 1524.419923] ? fput_many+0x2f/0x1a0 [ 1524.420288] ? ksys_write+0x1a9/0x260 [ 1524.420669] ? __ia32_sys_read+0xb0/0xb0 [ 1524.421083] __x64_sys_sendmmsg+0x99/0x100 [ 1524.421507] do_syscall_64+0x33/0x40 [ 1524.421877] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1524.422384] RIP: 0033:0x7f29466f0b19 [ 1524.422752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1524.424547] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1524.425400] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 12:09:08 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x65580000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:09:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 16) [ 1524.425408] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 12:09:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x2, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1524.425414] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1524.425421] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1524.425428] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:09:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x300, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1524.521231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=10161 comm=syz-executor.4 [ 1524.532569] FAULT_INJECTION: forcing a failure. [ 1524.532569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1524.532606] CPU: 1 PID: 10165 Comm: syz-executor.0 Not tainted 5.10.209 #1 12:09:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 17) 12:09:08 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x80350000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1524.532612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 12:09:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1524.532616] Call Trace: [ 1524.532635] dump_stack+0x107/0x167 [ 1524.532651] should_fail.cold+0x5/0xa [ 1524.532668] _copy_from_user+0x2e/0x1b0 [ 1524.532685] __copy_msghdr_from_user+0x91/0x4b0 [ 1524.532697] ? __ia32_sys_shutdown+0x80/0x80 [ 1524.532713] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1524.532730] ? perf_trace_lock+0xac/0x490 12:09:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x3, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1524.532747] sendmsg_copy_msghdr+0xa1/0x160 [ 1524.532758] ? do_recvmmsg+0x6d0/0x6d0 [ 1524.532768] ? handle_mm_fault+0x9e9/0x3500 [ 1524.532781] ? __lock_acquire+0x1657/0x5b00 [ 1524.532792] ? find_held_lock+0x2c/0x110 12:09:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1524.532811] ___sys_sendmsg+0xc6/0x170 [ 1524.532824] ? sendmsg_copy_msghdr+0x160/0x160 [ 1524.532833] ? vmacache_find+0x55/0x2a0 [ 1524.532853] ? do_user_addr_fault+0x5b0/0xc60 [ 1524.532871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1524.532882] ? exc_page_fault+0xca/0x1a0 [ 1524.532892] ? trace_hardirqs_on+0x5b/0x180 [ 1524.532903] ? exc_page_fault+0xca/0x1a0 [ 1524.532916] ? asm_exc_page_fault+0x1e/0x30 [ 1524.532941] __sys_sendmmsg+0x195/0x470 [ 1524.532957] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1524.532969] ? lock_downgrade+0x6d0/0x6d0 [ 1524.532993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1524.533008] ? wait_for_completion_io+0x270/0x270 [ 1524.533021] ? rcu_read_lock_any_held+0x75/0xa0 [ 1524.533032] ? vfs_write+0x354/0xa70 [ 1524.533047] ? fput_many+0x2f/0x1a0 [ 1524.533059] ? ksys_write+0x1a9/0x260 [ 1524.533071] ? __ia32_sys_read+0xb0/0xb0 [ 1524.533088] __x64_sys_sendmmsg+0x99/0x100 [ 1524.533102] do_syscall_64+0x33/0x40 [ 1524.533113] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1524.533121] RIP: 0033:0x7f29466f0b19 [ 1524.533131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1524.533138] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1524.533151] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1524.533157] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1524.533164] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1524.533170] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1524.533177] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1524.542476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=10161 comm=syz-executor.4 [ 1524.542832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=10161 comm=syz-executor.4 [ 1524.545694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=10161 comm=syz-executor.4 [ 1524.642376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=10161 comm=syz-executor.4 [ 1524.650639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10161 comm=syz-executor.4 [ 1524.660666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=10161 comm=syz-executor.4 [ 1524.661154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=10161 comm=syz-executor.4 [ 1524.666412] FAULT_INJECTION: forcing a failure. [ 1524.666412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1524.666432] CPU: 0 PID: 10182 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1524.666442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1524.666449] Call Trace: [ 1524.666471] dump_stack+0x107/0x167 [ 1524.666496] should_fail.cold+0x5/0xa [ 1524.666523] _copy_from_user+0x2e/0x1b0 [ 1524.666548] __copy_msghdr_from_user+0x91/0x4b0 [ 1524.666568] ? __ia32_sys_shutdown+0x80/0x80 [ 1524.666587] ? udp_v6_push_pending_frames+0x360/0x360 [ 1524.666611] ? inet6_sendmsg+0xbd/0x140 [ 1524.666630] ? inet6_compat_ioctl+0x320/0x320 [ 1524.666646] ? __sock_sendmsg+0x55/0x190 [ 1524.666673] sendmsg_copy_msghdr+0xa1/0x160 [ 1524.666691] ? do_recvmmsg+0x6d0/0x6d0 [ 1524.666715] ? __lock_acquire+0x1657/0x5b00 [ 1524.666749] ___sys_sendmsg+0xc6/0x170 [ 1524.666770] ? sendmsg_copy_msghdr+0x160/0x160 [ 1524.666785] ? vmacache_find+0x55/0x2a0 [ 1524.666808] ? __lockdep_reset_lock+0x180/0x180 [ 1524.666835] ? lock_acquire+0x197/0x470 [ 1524.666852] ? find_held_lock+0x2c/0x110 [ 1524.666886] ? __might_fault+0xd3/0x180 [ 1524.666905] ? lock_downgrade+0x6d0/0x6d0 [ 1524.666921] ? asm_exc_page_fault+0x1e/0x30 [ 1524.666961] __sys_sendmmsg+0x195/0x470 [ 1524.666987] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1524.667006] ? lock_downgrade+0x6d0/0x6d0 [ 1524.667045] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1524.667069] ? wait_for_completion_io+0x270/0x270 [ 1524.667091] ? rcu_read_lock_any_held+0x75/0xa0 [ 1524.667107] ? vfs_write+0x354/0xa70 [ 1524.667130] ? fput_many+0x2f/0x1a0 [ 1524.667150] ? ksys_write+0x1a9/0x260 [ 1524.667169] ? __ia32_sys_read+0xb0/0xb0 [ 1524.667197] __x64_sys_sendmmsg+0x99/0x100 [ 1524.667219] do_syscall_64+0x33/0x40 [ 1524.667236] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1524.667248] RIP: 0033:0x7f29466f0b19 [ 1524.667265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1524.667275] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1524.667296] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1524.667306] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1524.667317] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1524.667327] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1524.667337] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1524.681854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=10161 comm=syz-executor.4 [ 1524.681870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10161 comm=syz-executor.4 12:09:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 18) 12:09:25 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x81000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:09:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = dup2(r4, r3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x107142, 0x0) openat$cgroup_pressure(r5, 0x0, 0x2, 0x0) io_uring_setup(0xffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46c00) fcntl$setlease(r5, 0x400, 0x0) sendfile(r6, r3, 0x0, 0x7ffffff9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x5, 0x4, 0x100, 0x40}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x8004) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 12:09:25 executing program 6: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6f, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14211, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) openat(r0, &(0x7f0000000180)='./file0\x00', 0x64841, 0x0) 12:09:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x6000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x60, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:25 executing program 4: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) syz_io_uring_setup(0x3a75, &(0x7f0000000500)={0x0, 0x1cb2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_init1(0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe246}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040090}, 0x800) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") r1 = syz_open_procfs(0x0, &(0x7f0000002bc0)='clear_refs\x00') sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x10, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000004c0), 0x9, 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)=r4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000700)={{r3}, r4, 0xe, @inherit={0x68, &(0x7f0000000680)={0x0, 0x4, 0x8, 0x401, {0x2d, 0xcfd, 0x5, 0x22, 0xfffffffffffffeff}, [0x9, 0x8402, 0x7ae, 0x7]}}, @subvolid=0x80000001}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1540.999823] FAULT_INJECTION: forcing a failure. [ 1540.999823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1541.001079] CPU: 0 PID: 10211 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1541.001750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1541.002560] Call Trace: [ 1541.002823] dump_stack+0x107/0x167 [ 1541.003180] should_fail.cold+0x5/0xa [ 1541.003555] _copy_from_user+0x2e/0x1b0 [ 1541.003945] __copy_msghdr_from_user+0x91/0x4b0 [ 1541.004393] ? __ia32_sys_shutdown+0x80/0x80 [ 1541.004828] ? udp_v6_push_pending_frames+0x360/0x360 [ 1541.005325] ? inet6_sendmsg+0xbd/0x140 [ 1541.005712] ? inet6_compat_ioctl+0x320/0x320 [ 1541.006144] ? __sock_sendmsg+0x55/0x190 [ 1541.006540] sendmsg_copy_msghdr+0xa1/0x160 [ 1541.006957] ? do_recvmmsg+0x6d0/0x6d0 [ 1541.007334] ? __lock_acquire+0x1657/0x5b00 [ 1541.007759] ___sys_sendmsg+0xc6/0x170 [ 1541.008134] ? sendmsg_copy_msghdr+0x160/0x160 [ 1541.008575] ? vmacache_find+0x55/0x2a0 [ 1541.008964] ? __lockdep_reset_lock+0x180/0x180 [ 1541.009417] ? lock_acquire+0x197/0x470 [ 1541.009798] ? find_held_lock+0x2c/0x110 [ 1541.010194] ? __might_fault+0xd3/0x180 [ 1541.010574] ? lock_downgrade+0x6d0/0x6d0 [ 1541.010971] ? asm_exc_page_fault+0x1e/0x30 [ 1541.011396] __sys_sendmmsg+0x195/0x470 [ 1541.011780] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1541.012191] ? lock_downgrade+0x6d0/0x6d0 [ 1541.012605] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1541.013079] ? wait_for_completion_io+0x270/0x270 [ 1541.013541] ? rcu_read_lock_any_held+0x75/0xa0 [ 1541.013986] ? vfs_write+0x354/0xa70 [ 1541.014345] ? fput_many+0x2f/0x1a0 [ 1541.014698] ? ksys_write+0x1a9/0x260 [ 1541.015062] ? __ia32_sys_read+0xb0/0xb0 [ 1541.015456] __x64_sys_sendmmsg+0x99/0x100 [ 1541.015864] do_syscall_64+0x33/0x40 [ 1541.016219] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1541.016706] RIP: 0033:0x7f29466f0b19 [ 1541.017067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1541.018790] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1541.019520] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1541.020199] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1541.020883] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1541.021561] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1541.022239] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:09:25 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x86ddffff, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:09:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0xff, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:25 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) open(&(0x7f0000000100)='./file0\x00', 0x22c01, 0x84) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.size\x00') [ 1541.099592] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:09:25 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2, 0xa}) r3 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r1) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000640), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="54b20ffdfb6aa09f8fd9", 0xa, 0x40081, &(0x7f00000005c0)={0x2, 0x4e24, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x14}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:09:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 19) 12:09:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1541.191308] FAULT_INJECTION: forcing a failure. [ 1541.191308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1541.192474] CPU: 0 PID: 10238 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1541.193095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1541.193827] Call Trace: [ 1541.194070] dump_stack+0x107/0x167 [ 1541.194396] should_fail.cold+0x5/0xa [ 1541.194739] _copy_from_user+0x2e/0x1b0 [ 1541.195102] __copy_msghdr_from_user+0x91/0x4b0 [ 1541.195515] ? __ia32_sys_shutdown+0x80/0x80 [ 1541.195911] ? udp_v6_push_pending_frames+0x360/0x360 [ 1541.196371] ? inet6_sendmsg+0xbd/0x140 [ 1541.196724] ? inet6_compat_ioctl+0x320/0x320 [ 1541.197126] ? __sock_sendmsg+0x55/0x190 [ 1541.197500] sendmsg_copy_msghdr+0xa1/0x160 [ 1541.197880] ? do_recvmmsg+0x6d0/0x6d0 [ 1541.198227] ? __lock_acquire+0x1657/0x5b00 [ 1541.198615] ___sys_sendmsg+0xc6/0x170 [ 1541.198960] ? sendmsg_copy_msghdr+0x160/0x160 [ 1541.199362] ? vmacache_find+0x55/0x2a0 [ 1541.199716] ? __lockdep_reset_lock+0x180/0x180 [ 1541.200134] ? lock_acquire+0x197/0x470 [ 1541.200486] ? find_held_lock+0x2c/0x110 [ 1541.200857] ? __might_fault+0xd3/0x180 [ 1541.201209] ? lock_downgrade+0x6d0/0x6d0 [ 1541.201574] ? asm_exc_page_fault+0x1e/0x30 [ 1541.201976] __sys_sendmmsg+0x195/0x470 [ 1541.202337] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1541.202729] ? lock_downgrade+0x6d0/0x6d0 [ 1541.203113] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1541.203548] ? wait_for_completion_io+0x270/0x270 [ 1541.203981] ? rcu_read_lock_any_held+0x75/0xa0 [ 1541.204402] ? vfs_write+0x354/0xa70 [ 1541.204737] ? fput_many+0x2f/0x1a0 [ 1541.205073] ? ksys_write+0x1a9/0x260 [ 1541.205421] ? __ia32_sys_read+0xb0/0xb0 [ 1541.205789] __x64_sys_sendmmsg+0x99/0x100 [ 1541.206176] do_syscall_64+0x33/0x40 [ 1541.206512] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1541.206969] RIP: 0033:0x7f29466f0b19 [ 1541.207311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1541.208969] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1541.209655] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1541.210291] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1541.210935] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1541.211571] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1541.212212] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1541.224339] EXT4-fs (loop4): Unrecognized mount option "(" or missing value 12:09:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) r0 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000280)='./file0/file0\x00', 0x85, 0x4, &(0x7f00000004c0)=[{&(0x7f00000002c0)="f823900ee1eee8dad91c9331ca0f65916339b78936c24dd66fcc242786f0563248605073bfd3395beb0f893f6023ba953f47421f4107892ef04040ba", 0x3c, 0x10000}, {&(0x7f0000000300)="f64d129a8275270edd5b1ca01b1a9d206f6691bad84941776bcd787e2a63f942dc16e0ff27b84723ea8990c42197bcd0791f949847d2935199ea479e68fd3b7a094fe4cdbc42bd6f58584d9be8cff817d93a4179e388969db05ca49ece733f9f79ec1861a2a8e60ea9ffe80996c38f02f7d12d0da55ac11fae6269c3924a2d3193fbc55c97164e9d45046d036f5b64d55087b26fdff56c7f", 0x98, 0x6}, {&(0x7f00000003c0)="649a5ca7b8df243a32c788c66db717168766b9538987", 0x16, 0x6ac}, {&(0x7f0000000400)="30df4a27fe3e42b4a89f619dff472a2ecc8b7997656d4bd171e58efeb39cd4b09150c6ba06238e8e30e3b35c791bbe32eb68b84d0f09c35ec51f9272ec59a24cbcd680006dd9e5ef3f7da2d781e46162973afbba8b3e98e6992196d4c41bb865e77b53ba10e3f7cfe0d7b2de336947c0662ec73ba20b25cfa4687eaf52855ad5eb36354b3bb9dfc746bd8cac90f00351e627e7dde4a1c5680655f9933d6d5e159d2dc7a04001de4258346251ea561cc668d12aa853493267", 0xb8, 0x9}], 0x80, &(0x7f0000000540)={[{@huge_advise}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@hash}, {@subj_type={'subj_type', 0x3d, '['}}, {@dont_hash}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) pread64(r1, &(0x7f00000005c0)=""/91, 0x5b, 0x0) acct(0x0) io_setup(0x4, &(0x7f0000000640)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.io_queued\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r5, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r5, 0xa) r6 = epoll_create(0x81) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000cc0), 0x585480, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000002140)={{0x1, 0x1, 0x18, r3, {r6}}, './file0/file0\x00'}) r8 = syz_mount_image$vfat(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', 0x8000, 0x3, &(0x7f0000001f40)=[{&(0x7f0000000dc0)="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", 0x1000, 0x5f}, {&(0x7f0000001dc0)="3c2b58109f3b9f328efa242d84c4c2be78f99776feaa2a18addd24f045dc63e87df93e3cdfbb156a1cae8d0f0a5456e1fd8f3ae9dc953557d919d2bb4b1d25ec537dfb3d28f81a26c12bef48f04724875e45e6234efb7fb2e99401a9d37485e4c16cc993d274d7034c26b32f9d45b7205e", 0x71, 0x9}, {&(0x7f0000001e40)="867eacd073c48a3108ee77f117f2fbcf9201a3b39c7cdb3b4d8277378bae4c593d7dc82509dd6b00cc1703cfd7f8e69a3e9277f2d437d5714aac85b194cb520e7ad9ee48d99e9c5743de105fa2be5a2814ac505955cd5b57ecab1c6889184e431d7068670c9c2d6ebceb23f601c3efdeaedcd07e7ff7bbeb2235db0cd764605cfae6295391826d643a79d0df280fbbd5b716f3e838d42d3f2d39b0718803f1623f566af00211ab16a13df9b6a5762c2f6ef1fbd44b8e9901cf0e5f2d0399c8e95c30cfff18df73c0ae5eae4ab2eaecd517804104f8f7", 0xd6, 0x8}], 0x45, &(0x7f0000001fc0)={[{@utf8no}, {@shortname_lower}, {@shortname_winnt}, {@nonumtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}], [{@obj_type={'obj_type', 0x3d, '-]}-+]]['}}, {@subj_role={'subj_role', 0x3d, '\'\'*^:-]'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@appraise_type}]}) io_submit(r2, 0x8, &(0x7f0000002100)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x9, r3, &(0x7f0000000680)="0ae3aee47ec3b7d6ab46aac8630cf6eb4ca00dd50703fe43f7636d23f33c376c1f593a38e5cdf8f64e65aadd211e12e9c14a6e3c3aba01d10699b4c98d250ed223b712240cb01b66620150b0dc6749ccd0665016f3a0c6ad2c412932b3f6b8d31bd26108147aa3b84d6ab944d3b0e130e194a5ebc414b97d6849b8346aa1412beb6d878e6024f8c78fa4e40b671ece73", 0x90, 0x9e93, 0x0, 0x0, r4}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0xd264, r1, &(0x7f00000007c0)="fe76bfe7a219217d494ac29618d83ef71dc3b1a6bf644d8a1f7cb70509b54a4797c7375d6710555c12662c4a79ebc915c2c96448ed1b3aedb98f2dabb097ce6a87da235964cf4d8ea07a3cb09dca8cca85f6a32e5124a86ded82b62c93b43cd58cfaf06480bdcb56af57337b58b7c98439fc74f05001d56d4163e8177b4a2facbfc4ab44f0d5be80c00967d24be8a620d7805ec0ba92f8cd257156be63f64b34868cfd", 0xa3, 0x5, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0xff, r0, &(0x7f00000008c0)="a7aa13ebd9d07eda1e9c8a121e7b8b90c74a683acbfb93b8f3d7af2e387dae5a909e33561dad5d40d68ea69f050e1fa5c47b12208869419ddc16a5c56d69365522068c81b7d5763d63bbddbf35d3fb0143a876b216df34be7ef32dbca211c5685c066a65bb09e4919d3fac6d66ec4f71b3806a5e709e2730dbcc62e1177f33dbfba31dd1e8886ed1561d49607f0530137ea9520f72a5877ddcd59d4a04f87b027a25e77578662eb745fe4d6062c39aabf819c97705ff9910a8073eb241a9d2539ccdb3185ca69ddccefee0211e469d9787a80130bf8416153c211559482e6738628c6ce84a9cdc7c09ef1975", 0xec, 0x7f, 0x0, 0x0, r5}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000000a00)="9d439c1ca36ae48d77ec89f238c17c0274d219615e6ca86c2f7b3db1d00d319368e719435f9ba48ea9d8fdd90c8452d0ecb1a9e84a8525b26b074b1ecd69f960d5c890f047e1c465cf595c0f3296777d1798524f965b07e7340450b4fa162c95f8002dcdde6eedfd61d689cfd0301e5f426437485286973d4c62", 0x7a, 0xb7}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000ac0)="e7542f90e50d8ace52a83940d6412da44d4a29e69384acfdc54d72d2fd683b0e999eac90cb80c835d4ed36dbc4c2ea4e5f3446514a3a0ea82eceb1d624df6e0915258bfce8d955874810a95911d061f7877db6754a", 0x55, 0x7}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000000b80)="fd152698113ee9b4e9864796454745906c6ff735aec266c344f1771f00a4880e57623a3d73836828c2e13685e8ee808c5fbe31687b8d5097cfdf42eb0e5edecffb9cc785ea335a3f9789327b5843a7f0995816a9110af09189240e83b4bd9b09ddcff8570a6f664d511d1e449cd8bf8209a2", 0x72, 0x9, 0x0, 0x3}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000c40)="540527b0816283b41decee60ef7d78393e04d52ab55e236db686038b46b20b6da068c1e51063b9df25319d7b1000f1abc704cfb05dbb78bbd63ea68f8c128fcd3eb845c7c7", 0x45, 0x19, 0x0, 0x0, r7}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x7, 0xd4e, r8, &(0x7f0000002080)="b1043a51fadca2cdc96e4aef8d6504be0b3bfa90f7cff689c80b", 0x1a, 0x8, 0x0, 0x3}]) setxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000140)=@v1={0x1000000, [{0x2, 0x7}]}, 0xc, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x20040, 0x0) 12:09:25 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x88470000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1541.289052] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:09:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000200)=@srh={0x5c, 0x10, 0x4, 0x8, 0x5, 0x0, 0x3f, [@local, @dev={0xfe, 0x80, '\x00', 0x2e}, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0xb}, @private0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1]}, 0x88) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x72dda00f) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) r5 = fsmount(r3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x7002, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) getpid() r6 = openat(r5, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) r7 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x3, 0xee, 0x27, 0x1, 0x0, 0xffffffffffffffff, 0x42522, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_config_ext={0x7, 0x3}, 0x208, 0x5, 0x200, 0x7, 0x0, 0x3f, 0x3ff, 0x0, 0x9d5, 0x0, 0x20}, 0xffffffffffffffff, 0x4, r7, 0x9) [ 1556.780591] FAULT_INJECTION: forcing a failure. [ 1556.780591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1556.782426] CPU: 1 PID: 10260 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1556.783453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1556.784686] Call Trace: [ 1556.785098] dump_stack+0x107/0x167 [ 1556.785655] should_fail.cold+0x5/0xa [ 1556.786238] _copy_from_user+0x2e/0x1b0 [ 1556.786847] __copy_msghdr_from_user+0x91/0x4b0 [ 1556.787546] ? __ia32_sys_shutdown+0x80/0x80 [ 1556.788206] ? udp_v6_push_pending_frames+0x360/0x360 [ 1556.788991] ? inet6_sendmsg+0xbd/0x140 [ 1556.789589] ? inet6_compat_ioctl+0x320/0x320 [ 1556.790260] ? __sock_sendmsg+0x55/0x190 [ 1556.790880] sendmsg_copy_msghdr+0xa1/0x160 [ 1556.791526] ? do_recvmmsg+0x6d0/0x6d0 [ 1556.792098] ? __lock_acquire+0x1657/0x5b00 [ 1556.792762] ___sys_sendmsg+0xc6/0x170 [ 1556.793359] ? sendmsg_copy_msghdr+0x160/0x160 [ 1556.794042] ? vmacache_find+0x55/0x2a0 [ 1556.794644] ? __lockdep_reset_lock+0x180/0x180 [ 1556.795351] ? lock_acquire+0x197/0x470 [ 1556.795948] ? find_held_lock+0x2c/0x110 [ 1556.796568] ? __might_fault+0xd3/0x180 [ 1556.797176] ? lock_downgrade+0x6d0/0x6d0 [ 1556.797799] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1556.798628] __sys_sendmmsg+0x195/0x470 [ 1556.799227] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1556.799849] ? lock_downgrade+0x6d0/0x6d0 [ 1556.800487] ? __mutex_unlock_slowpath+0xe1/0x600 12:09:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TCXONC(r0, 0x540a, 0x2) 12:09:41 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000600)) r4 = dup3(r2, r3, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') bind$unix(r6, 0x0, 0x0) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000000c0)=0x1) signalfd(r0, &(0x7f0000000240)={[0x3]}, 0x8) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x2000, r1, &(0x7f0000000040)='\x00', 0x1}]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './cgroup.cpu/cpuset.cpus\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x1, 0x0, 0x3, 0x0, 0x3, 0x40008, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbcf, 0x4, @perf_config_ext={0x4, 0x85}, 0x2a, 0xea1, 0x0, 0x8, 0x5, 0x6, 0xc4a, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xb, r7, 0x0) io_setup(0x3, &(0x7f00000001c0)) 12:09:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x3000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 20) 12:09:41 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x0, 0x8e) 12:09:41 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x88480000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1556.801217] ? wait_for_completion_io+0x270/0x270 [ 1556.802215] ? rcu_read_lock_any_held+0x75/0xa0 [ 1556.802905] ? vfs_write+0x354/0xa70 [ 1556.803464] ? fput_many+0x2f/0x1a0 [ 1556.804006] ? ksys_write+0x1a9/0x260 [ 1556.804574] ? __ia32_sys_read+0xb0/0xb0 [ 1556.805196] __x64_sys_sendmmsg+0x99/0x100 [ 1556.805833] do_syscall_64+0x33/0x40 [ 1556.806387] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1556.807142] RIP: 0033:0x7f29466f0b19 [ 1556.807692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1556.810383] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1556.811500] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1556.812546] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1556.813598] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1556.814644] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1556.815692] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:09:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:41 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x88640000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:09:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r1, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {}, @broadcast}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001300)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "e38b184ac0dfc218"}}]}, 0x30}}, 0x0) 12:09:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x20000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:41 executing program 1: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f00000001c0)) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000180)={0x1, 0xfc00000000, 0x0, 0x10000, 0x0, 0x10000}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) ftruncate(0xffffffffffffffff, 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) openat(r2, &(0x7f0000000200)='./file1\x00', 0x2000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fstat(r3, &(0x7f0000000a00)) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x8, 0x0, 0x10}) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000a80)={{r3}, "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"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 12:09:41 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, 0x0) r2 = syz_io_uring_setup(0x3a77, &(0x7f0000000080)={0x0, 0xe38c, 0x1, 0x4000003, 0x0, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000c40)={{}, "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"}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000140)=ANY=[], 0x10) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000380)={0x2, 0x0, 0x6, 0x9fc}) sendfile(r6, r7, 0x0, 0x20d315) io_uring_enter(r7, 0x5477, 0x8c23, 0x2, &(0x7f0000000180)={[0x6]}, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001e00)=ANY=[@ANYBLOB="7f454c46037f3200010000000000000002003e0006000000ce0200000000000040000000000000008b0300000000000005000000ff07380002000600000001040500000007000000576a0000000000000001000000000000030000000000000006000000000000000200000000000000000000000000010041decbee428967544ca89804f93c4e3959b1a4ecb9d7f4ccf173c140a1ff2a86153d350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095903f3f05737181246ec91b1afea34e5435703d2b5b8c9d2f3af679af51340bb927d03dd97b4c447b7f1105"], 0x79b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x7ff, 0x5, 0x9, 0xfffffffffffffff7}) getpeername(r5, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000140)=0x80) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 12:09:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 21) [ 1557.039404] FAULT_INJECTION: forcing a failure. [ 1557.039404] name fail_usercopy, interval 1, probability 0, space 0, times 0 12:09:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1557.041270] CPU: 1 PID: 10295 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1557.042429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1557.043694] Call Trace: [ 1557.044109] dump_stack+0x107/0x167 [ 1557.044677] should_fail.cold+0x5/0xa [ 1557.045301] _copy_from_user+0x2e/0x1b0 [ 1557.045920] __copy_msghdr_from_user+0x91/0x4b0 [ 1557.046635] ? __ia32_sys_shutdown+0x80/0x80 [ 1557.047314] ? udp_v6_push_pending_frames+0x360/0x360 [ 1557.048113] ? inet6_sendmsg+0xbd/0x140 [ 1557.048725] ? inet6_compat_ioctl+0x320/0x320 [ 1557.049420] ? __sock_sendmsg+0x55/0x190 [ 1557.050054] sendmsg_copy_msghdr+0xa1/0x160 [ 1557.050713] ? do_recvmmsg+0x6d0/0x6d0 [ 1557.051314] ? __lock_acquire+0x1657/0x5b00 [ 1557.051989] ___sys_sendmsg+0xc6/0x170 [ 1557.052588] ? sendmsg_copy_msghdr+0x160/0x160 [ 1557.053289] ? vmacache_find+0x55/0x2a0 [ 1557.053902] ? __lockdep_reset_lock+0x180/0x180 [ 1557.054619] ? lock_acquire+0x197/0x470 [ 1557.055225] ? find_held_lock+0x2c/0x110 [ 1557.055852] ? __might_fault+0xd3/0x180 [ 1557.056459] ? lock_downgrade+0x6d0/0x6d0 [ 1557.057102] ? asm_exc_page_fault+0x1e/0x30 [ 1557.057782] __sys_sendmmsg+0x195/0x470 [ 1557.058397] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1557.059054] ? lock_downgrade+0x6d0/0x6d0 [ 1557.059709] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1557.060451] ? wait_for_completion_io+0x270/0x270 [ 1557.061203] ? rcu_read_lock_any_held+0x75/0xa0 [ 1557.061913] ? vfs_write+0x354/0xa70 [ 1557.062488] ? fput_many+0x2f/0x1a0 [ 1557.063052] ? ksys_write+0x1a9/0x260 [ 1557.063636] ? __ia32_sys_read+0xb0/0xb0 [ 1557.064268] __x64_sys_sendmmsg+0x99/0x100 [ 1557.064921] do_syscall_64+0x33/0x40 [ 1557.065492] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1557.066262] RIP: 0033:0x7f29466f0b19 [ 1557.066824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1557.069484] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1557.070625] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1557.071690] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1557.072752] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1557.073835] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1557.074901] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:09:57 executing program 6: setpriority(0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="5fbd022e61f46de6202b4ced1fac4c2eacdac659f2027f2a4906578eea30edf8645bf2c2bf719e177ad2e75d5eb16d8e0038411785b0a0b2aa143381d91f2d024f89d3797b134e119720aa17d89b8808f108a427cb93c8f767174afba2dc5eeb64a88b05550374e8e476175dacea157737928765a0b1ec29776931086fcf04b99094435f820c89d6eb876d17b998749cf563b802a00ee5e0973c585812c4f7ad96515f99a986e3711411f7c59c14fa24a5a7726fda02b5d64c87d77fb3fbab14fd44090d3e1ebdbcf73a1d2a861506e2c8cbe6ea70cb0886613116c2f38747a667a091d4dd8a8519f9bba961", 0xec, 0x0) keyctl$set_timeout(0xf, r0, 0x7ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x1a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x7fff, 0x7, &(0x7f00000014c0)=[{&(0x7f00000002c0)="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", 0x1000, 0x1}, {&(0x7f0000002980)="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", 0x1000, 0x6}, {&(0x7f00000012c0)="36f75ba0cb5ece5787fcafd18f62d88df92d3f75cb4785aab8b718129d3e7e3dd97a01c6410f1d7accba9a1aa9446696c035af508dcafdb888", 0x39, 0x100000000}, {&(0x7f0000001300)="a4ec5d3736af24f1936db7b588c34972183c5946e09564816211668d1fb74e5836eb8216b86571bdf29dc90a204984622f25cde4697d59c3ec6d3bb19490e6fada02b1251b3f88ec8163f242ac488b7093c71d6c8c85632f1d69106278781097a9e883f847ad13a0ec10db516af3806b3f0f4d0fcc6a299318003d278a3d0628ce6caec9905a75df294a91b12321bbc0b635e0995e6af2dac803f48b28f1b8f845eb5670ad056d8a3c550c79e293cb3510bc", 0xb2, 0x6}, {&(0x7f00000013c0)="3e7cf1bad1cb554fd23ba2aaf3965d438b55926afc760f3e3ed3d54b", 0x1c}, {&(0x7f0000001400)="2f8a4bd6db273cd8042cb522d474f8e8173fdfe2c059d3b97f3b592560a2616d328b36dd3adab7d86977d94ae3df13b578744dc354", 0x35, 0x7}, {&(0x7f0000001440)="6ee1cf5b01c32b60312a4df6779f7cd68f08d38c7801525a895870acde2d71a0c5bc5373be96cb89113ed533b0fd89e8ee0fa0e57e8c5810db344515fb7b28b96203f50e84a2824c6404cbbef962095700e44f9ab731361f", 0x58, 0x3}], 0xa3000, &(0x7f00000025c0)={[{@dmode={'dmode', 0x3d, 0x5}}, {@nojoliet}, {@check_relaxed}, {@session={'session', 0x3d, 0x32}}], [{@subj_user={'subj_user', 0x3d, '.})'}}, {@subj_type={'subj_type', 0x3d, '@)'}}, {@fowner_gt={'fowner>', 0xee01}}]}) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4088, 0x100a}], 0x3a4, 0x0, 0xfffffffe) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) 12:09:57 executing program 5: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x508}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000600)) dup3(r2, r3, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') bind$unix(r5, 0x0, 0x0) signalfd(r0, &(0x7f0000000240)={[0x3]}, 0x8) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x2000, r1, &(0x7f0000000040)='\x00', 0x1}]) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x1, 0x0, 0x3, 0x0, 0x3, 0x40008, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbcf, 0x4, @perf_config_ext={0x4, 0x85}, 0x2a, 0xea1, 0x0, 0x8, 0x5, 0x6, 0xc4a, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xb, r1, 0x0) io_setup(0x3, &(0x7f00000001c0)) 12:09:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="a3", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) syz_io_uring_setup(0x3a78, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000380)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x9b7, &(0x7f0000000100)={0x0, 0xd6d9, 0x28, 0x3, 0x1a0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/18, 0x12}, {&(0x7f00000003c0)=""/162, 0xa2}], 0x2}, 0x0, 0x10060, 0x1, {0x1}}, 0x8) 12:09:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 22) 12:09:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x60, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8800, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) preadv2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/242, 0xf2}, {&(0x7f00000001c0)=""/163, 0xa3}, {&(0x7f0000000280)=""/214, 0xd6}], 0x3, 0x6, 0x4, 0x9) 12:09:57 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x88a8ffff, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:09:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x40000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1572.932075] FAULT_INJECTION: forcing a failure. [ 1572.932075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1572.933527] CPU: 1 PID: 10312 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1572.934329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1572.935515] Call Trace: [ 1572.935920] dump_stack+0x107/0x167 [ 1572.936464] should_fail.cold+0x5/0xa [ 1572.937034] _copy_from_user+0x2e/0x1b0 [ 1572.937537] __copy_msghdr_from_user+0x91/0x4b0 [ 1572.938201] ? __ia32_sys_shutdown+0x80/0x80 [ 1572.938841] ? udp_v6_push_pending_frames+0x360/0x360 [ 1572.939594] ? inet6_sendmsg+0xbd/0x140 [ 1572.940190] ? inet6_compat_ioctl+0x320/0x320 [ 1572.940844] ? __sock_sendmsg+0x55/0x190 [ 1572.941465] sendmsg_copy_msghdr+0xa1/0x160 [ 1572.942114] ? do_recvmmsg+0x6d0/0x6d0 [ 1572.942688] ? __lock_acquire+0x1657/0x5b00 [ 1572.943334] ___sys_sendmsg+0xc6/0x170 [ 1572.943903] ? sendmsg_copy_msghdr+0x160/0x160 [ 1572.944477] ? vmacache_find+0x55/0x2a0 [ 1572.945068] ? __lockdep_reset_lock+0x180/0x180 [ 1572.945772] ? lock_acquire+0x197/0x470 [ 1572.946339] ? find_held_lock+0x2c/0x110 [ 1572.946950] ? __might_fault+0xd3/0x180 [ 1572.947540] ? lock_downgrade+0x6d0/0x6d0 [ 1572.948140] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1572.948950] __sys_sendmmsg+0x195/0x470 [ 1572.949540] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1572.950035] ? lock_downgrade+0x6d0/0x6d0 [ 1572.950645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1572.951350] ? wait_for_completion_io+0x270/0x270 [ 1572.952042] ? rcu_read_lock_any_held+0x75/0xa0 [ 1572.952717] ? vfs_write+0x354/0xa70 [ 1572.953292] ? fput_many+0x2f/0x1a0 [ 1572.953811] ? ksys_write+0x1a9/0x260 [ 1572.954370] ? __ia32_sys_read+0xb0/0xb0 [ 1572.954960] __x64_sys_sendmmsg+0x99/0x100 [ 1572.955583] do_syscall_64+0x33/0x40 [ 1572.956136] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1572.956894] RIP: 0033:0x7f29466f0b19 [ 1572.957437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1572.959540] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1572.960629] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1572.961655] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1572.962680] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1572.963684] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1572.964699] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:09:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 23) 12:09:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x300, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x60000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1573.038481] FAULT_INJECTION: forcing a failure. [ 1573.038481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.039854] CPU: 1 PID: 10333 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1573.040609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1573.041521] Call Trace: [ 1573.041819] dump_stack+0x107/0x167 [ 1573.042222] should_fail.cold+0x5/0xa [ 1573.042644] _copy_from_user+0x2e/0x1b0 [ 1573.043092] __copy_msghdr_from_user+0x91/0x4b0 [ 1573.043604] ? __ia32_sys_shutdown+0x80/0x80 [ 1573.044094] ? udp_v6_push_pending_frames+0x360/0x360 [ 1573.044658] ? inet6_sendmsg+0xbd/0x140 [ 1573.045100] ? inet6_compat_ioctl+0x320/0x320 [ 1573.045591] ? __sock_sendmsg+0x55/0x190 [ 1573.046042] sendmsg_copy_msghdr+0xa1/0x160 [ 1573.046509] ? do_recvmmsg+0x6d0/0x6d0 [ 1573.046937] ? __lock_acquire+0x1657/0x5b00 [ 1573.047417] ___sys_sendmsg+0xc6/0x170 [ 1573.047840] ? sendmsg_copy_msghdr+0x160/0x160 [ 1573.048328] ? vmacache_find+0x55/0x2a0 [ 1573.048761] ? __lockdep_reset_lock+0x180/0x180 [ 1573.049274] ? lock_acquire+0x197/0x470 [ 1573.049706] ? find_held_lock+0x2c/0x110 [ 1573.050151] ? __might_fault+0xd3/0x180 [ 1573.050572] ? lock_downgrade+0x6d0/0x6d0 [ 1573.051024] ? asm_exc_page_fault+0x1e/0x30 [ 1573.051509] __sys_sendmmsg+0x195/0x470 [ 1573.051942] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1573.052407] ? lock_downgrade+0x6d0/0x6d0 [ 1573.052871] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1573.053406] ? wait_for_completion_io+0x270/0x270 [ 1573.053925] ? rcu_read_lock_any_held+0x75/0xa0 [ 1573.054421] ? vfs_write+0x354/0xa70 [ 1573.054827] ? fput_many+0x2f/0x1a0 [ 1573.055225] ? ksys_write+0x1a9/0x260 [ 1573.055636] ? __ia32_sys_read+0xb0/0xb0 [ 1573.056082] __x64_sys_sendmmsg+0x99/0x100 [ 1573.056539] do_syscall_64+0x33/0x40 [ 1573.056944] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1573.057496] RIP: 0033:0x7f29466f0b19 [ 1573.057896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1573.059835] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1573.060638] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1573.061393] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1573.062153] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1573.062906] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1573.063656] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:09:57 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x88caffff, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:09:57 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @remote, @local, {[@dstopts={0x0, 0x3, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}]}]}}}}}, 0x0) 12:09:57 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x406, r2) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1c, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}]}, 0x28}}, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 12:09:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:09:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 24) [ 1573.175602] netlink: 'syz-executor.6': attribute type 28 has an invalid length. [ 1573.189468] netlink: 'syz-executor.6': attribute type 28 has an invalid length. 12:09:57 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "3913aa278834a89d85aa60a9cb70dea7daccb9f25ec2d584343c86f8acf933cf92fb29570ca71fed6f1011424361b9199fb8d3455eb5143a8062f3b53a4ea3d4", 0x2f}, 0x48, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r0, 0xb1, 0x26}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'sha1-neon\x00'}}, &(0x7f0000000240)="d650458e963fe42ecb69c911a1c77e679203e50ea0d0147351b5ac7028dd9dd3fde3da2c26dee9e61bd8b6f9c6d2e5ddf24134c3041a046199e2100e6ef4a8c64c0aa4465e3ca56a9158f77f676ad7366e04f60c050b940ff299991f5368413b38ea75fe75a2eeff5c6d3b1f025be8d6742d37f5bc851430e1fc53b7ef273ef876386a3087a4ec420103d0bf6f6777b747962f26afbd63ae3612f05b2b4b51b53d8478b6ad9c3a2e713361d1c6b7d62e21", &(0x7f0000000300)=""/38) r1 = request_key(&(0x7f0000000480)='rxrpc\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)=' hash=', r0) add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='logon\x00', r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getegid() getgroups(0x5, &(0x7f0000000040)=[r3, r3, 0xee00, r3, r3]) setgid(r3) keyctl$chown(0x4, r0, 0xffffffffffffffff, r3) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000100)='.', 0x1}], 0x1, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x2008}, 0x0) 12:09:57 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x89060000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:09:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x18, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r1, 0xa) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x4}, ["", "", "", ""]}, 0x14}}, 0x40088b5) [ 1573.216583] FAULT_INJECTION: forcing a failure. [ 1573.216583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.217912] CPU: 1 PID: 10350 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1573.218619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1573.219461] Call Trace: [ 1573.219743] dump_stack+0x107/0x167 [ 1573.220128] should_fail.cold+0x5/0xa [ 1573.220531] _copy_from_user+0x2e/0x1b0 [ 1573.220951] __copy_msghdr_from_user+0x91/0x4b0 [ 1573.221444] ? __ia32_sys_shutdown+0x80/0x80 [ 1573.221901] ? udp_v6_push_pending_frames+0x360/0x360 [ 1573.222433] ? inet6_sendmsg+0xbd/0x140 [ 1573.222846] ? inet6_compat_ioctl+0x320/0x320 [ 1573.223308] ? __sock_sendmsg+0x55/0x190 [ 1573.223735] sendmsg_copy_msghdr+0xa1/0x160 [ 1573.224180] ? do_recvmmsg+0x6d0/0x6d0 [ 1573.224588] ? __lock_acquire+0x1657/0x5b00 [ 1573.225046] ___sys_sendmsg+0xc6/0x170 [ 1573.225462] ? sendmsg_copy_msghdr+0x160/0x160 [ 1573.225930] ? vmacache_find+0x55/0x2a0 [ 1573.226344] ? __lockdep_reset_lock+0x180/0x180 [ 1573.226828] ? lock_acquire+0x197/0x470 [ 1573.227241] ? find_held_lock+0x2c/0x110 [ 1573.227669] ? __might_fault+0xd3/0x180 [ 1573.228081] ? lock_downgrade+0x6d0/0x6d0 [ 1573.228507] ? asm_exc_page_fault+0x1e/0x30 [ 1573.228971] __sys_sendmmsg+0x195/0x470 [ 1573.229402] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1573.229844] ? lock_downgrade+0x6d0/0x6d0 [ 1573.230284] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1573.230776] ? wait_for_completion_io+0x270/0x270 [ 1573.231271] ? rcu_read_lock_any_held+0x75/0xa0 [ 1573.231743] ? vfs_write+0x354/0xa70 [ 1573.232130] ? fput_many+0x2f/0x1a0 [ 1573.232506] ? ksys_write+0x1a9/0x260 [ 1573.232895] ? __ia32_sys_read+0xb0/0xb0 [ 1573.233324] __x64_sys_sendmmsg+0x99/0x100 [ 1573.233757] do_syscall_64+0x33/0x40 [ 1573.234138] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1573.234654] RIP: 0033:0x7f29466f0b19 [ 1573.235039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1573.236869] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1573.237647] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1573.238364] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1573.239089] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1573.239806] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1573.240525] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:09:57 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x8, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @mlv2_report}}}}}, 0x0) r0 = fork() fork() r1 = fork() ptrace(0x10, r0) ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000380)) 12:10:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x8, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @mlv2_report}}}}}, 0x0) r0 = fork() fork() r1 = fork() ptrace(0x10, r0) ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000380)) 12:10:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xf5ffffff, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:12 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000228bd7000fbdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000600040001000000080001007063690011000200303030303a30303a31302e3000000000080003000100000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000600040001000000"], 0x100}, 0x1, 0x0, 0x0, 0x4008800}, 0x48000) 12:10:12 executing program 6: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000440)='./file1/file0\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000180)="647732419e007299a0527d51dc496437e692665510d40d35b770fd8d702d121d997dc90d08763cc1ed88ba0f538cb17d600a", 0x32}], 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x7, 0x400, 0x0, 0x2, 0x0, 0x42}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', r7, 0x29, 0x8, 0x8, 0x7, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7800, 0x40, 0x6, 0x1}}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00210c000000b2a5e3211f5100"], 0x1c}}, 0x0) 12:10:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 25) 12:10:12 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xdc050000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1588.235506] FAULT_INJECTION: forcing a failure. [ 1588.235506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1588.236534] CPU: 1 PID: 10385 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1588.237095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1588.237712] Call Trace: [ 1588.237920] dump_stack+0x107/0x167 [ 1588.238194] should_fail.cold+0x5/0xa [ 1588.238482] _copy_from_user+0x2e/0x1b0 [ 1588.238780] __copy_msghdr_from_user+0x91/0x4b0 [ 1588.239121] ? __ia32_sys_shutdown+0x80/0x80 [ 1588.239445] ? udp_v6_push_pending_frames+0x360/0x360 [ 1588.239826] ? inet6_sendmsg+0xbd/0x140 [ 1588.240119] ? inet6_compat_ioctl+0x320/0x320 [ 1588.240450] ? __sock_sendmsg+0x55/0x190 [ 1588.240754] sendmsg_copy_msghdr+0xa1/0x160 [ 1588.241073] ? do_recvmmsg+0x6d0/0x6d0 [ 1588.241371] ? __lock_acquire+0x1657/0x5b00 [ 1588.241695] ___sys_sendmsg+0xc6/0x170 [ 1588.241983] ? sendmsg_copy_msghdr+0x160/0x160 [ 1588.242317] ? vmacache_find+0x55/0x2a0 [ 1588.242612] ? __lockdep_reset_lock+0x180/0x180 [ 1588.242959] ? lock_acquire+0x197/0x470 [ 1588.243250] ? find_held_lock+0x2c/0x110 [ 1588.243552] ? __might_fault+0xd3/0x180 [ 1588.243845] ? lock_downgrade+0x6d0/0x6d0 [ 1588.244148] ? asm_exc_page_fault+0x1e/0x30 [ 1588.244475] __sys_sendmmsg+0x195/0x470 [ 1588.244776] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1588.245092] ? lock_downgrade+0x6d0/0x6d0 [ 1588.245413] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1588.245770] ? wait_for_completion_io+0x270/0x270 [ 1588.246125] ? rcu_read_lock_any_held+0x75/0xa0 [ 1588.246465] ? vfs_write+0x354/0xa70 [ 1588.246742] ? fput_many+0x2f/0x1a0 [ 1588.247011] ? ksys_write+0x1a9/0x260 [ 1588.247293] ? __ia32_sys_read+0xb0/0xb0 [ 1588.247596] __x64_sys_sendmmsg+0x99/0x100 [ 1588.247910] do_syscall_64+0x33/0x40 [ 1588.248182] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1588.248556] RIP: 0033:0x7f29466f0b19 [ 1588.248829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1588.250286] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1588.250841] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1588.251358] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1588.251874] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1588.252390] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1588.252906] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:10:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x6000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1588.269613] SELinux: duplicate or incompatible mount options [ 1588.324098] SELinux: duplicate or incompatible mount options 12:10:27 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 26) 12:10:27 executing program 1: ftruncate(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$P9_RVERSION(r0, &(0x7f0000000380)={0x13, 0x65, 0xffff, 0x7fffffff, 0x6, '9P2000'}, 0x13) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@secondary) 12:10:27 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed410000000800001c00000000000000e0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]}) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="e52ef1a3fa36e399239b154a2561cbb2", 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/anycast6\x00') getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000540)=""/241, &(0x7f0000000640)=0xf1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x7, 0x0, 0x40, 0xf4, 0x0, 0x7fffffff, 0x40c00, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5, 0x259ad056}, 0x10, 0x3, 0x8001, 0x5, 0x5, 0x1, 0x2, 0x0, 0x40, 0x0, 0x1}, 0x0, 0x6, r2, 0x2) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f00000006c0)=""/66, 0x42}], 0x2, 0x80000000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='highspeed\x00', 0xa) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) syz_open_procfs(r3, &(0x7f0000000240)='autogroup\x00') pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x1000003, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffd000/0x2000)=nil) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) 12:10:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xfffffff5, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x8, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @mlv2_report}}}}}, 0x0) r0 = fork() fork() r1 = fork() ptrace(0x10, r0) ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000380)) 12:10:27 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xe0050000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:10:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f0000000000000000000400000014000500fe80000000000000000000000000000008000200070000001400e34f9ce2bf1ef4dedf9abc0600fe80000000"], 0x44}}, 0x0) [ 1603.755674] FAULT_INJECTION: forcing a failure. [ 1603.755674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1603.757756] CPU: 1 PID: 10425 Comm: syz-executor.0 Not tainted 5.10.209 #1 12:10:28 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xffffffff, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1603.758880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1603.760355] Call Trace: [ 1603.760787] dump_stack+0x107/0x167 [ 1603.761395] should_fail.cold+0x5/0xa [ 1603.762047] _copy_from_user+0x2e/0x1b0 [ 1603.762700] __copy_msghdr_from_user+0x91/0x4b0 [ 1603.763460] ? __ia32_sys_shutdown+0x80/0x80 [ 1603.764170] ? udp_v6_push_pending_frames+0x360/0x360 [ 1603.765011] ? inet6_sendmsg+0xbd/0x140 [ 1603.765668] ? inet6_compat_ioctl+0x320/0x320 [ 1603.766398] ? __sock_sendmsg+0x55/0x190 [ 1603.767067] sendmsg_copy_msghdr+0xa1/0x160 [ 1603.767765] ? do_recvmmsg+0x6d0/0x6d0 [ 1603.768387] ? __lock_acquire+0x1657/0x5b00 [ 1603.769116] ___sys_sendmsg+0xc6/0x170 12:10:28 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xeffdffff, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1603.769754] ? sendmsg_copy_msghdr+0x160/0x160 [ 1603.770591] ? __lockdep_reset_lock+0x180/0x180 [ 1603.771367] ? lock_acquire+0x197/0x470 [ 1603.772012] ? find_held_lock+0x2c/0x110 [ 1603.772677] ? __might_fault+0xd3/0x180 [ 1603.773321] ? lock_downgrade+0x6d0/0x6d0 [ 1603.774001] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1603.774902] __sys_sendmmsg+0x195/0x470 [ 1603.775554] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1603.776250] ? lock_downgrade+0x6d0/0x6d0 [ 1603.776940] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1603.777737] ? wait_for_completion_io+0x270/0x270 [ 1603.778527] ? rcu_read_lock_any_held+0x75/0xa0 [ 1603.779274] ? vfs_write+0x354/0xa70 [ 1603.779884] ? fput_many+0x2f/0x1a0 [ 1603.780474] ? ksys_write+0x1a9/0x260 [ 1603.781091] ? __ia32_sys_read+0xb0/0xb0 [ 1603.781760] __x64_sys_sendmmsg+0x99/0x100 [ 1603.782442] do_syscall_64+0x33/0x40 [ 1603.783042] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1603.783864] RIP: 0033:0x7f29466f0b19 [ 1603.784460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1603.787398] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1603.788635] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1603.789795] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1603.790945] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1603.792106] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1603.793262] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:10:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 27) 12:10:28 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1603.873799] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue [ 1603.877277] FAULT_INJECTION: forcing a failure. [ 1603.877277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1603.878608] CPU: 0 PID: 10442 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1603.879390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1603.880316] Call Trace: [ 1603.880617] dump_stack+0x107/0x167 [ 1603.881041] should_fail.cold+0x5/0xa [ 1603.881470] _copy_from_user+0x2e/0x1b0 [ 1603.881947] __copy_msghdr_from_user+0x91/0x4b0 [ 1603.882467] ? __ia32_sys_shutdown+0x80/0x80 [ 1603.882966] ? udp_v6_push_pending_frames+0x360/0x360 [ 1603.883535] ? inet6_sendmsg+0xbd/0x140 [ 1603.883988] ? inet6_compat_ioctl+0x320/0x320 [ 1603.884489] ? __sock_sendmsg+0x55/0x190 [ 1603.884953] sendmsg_copy_msghdr+0xa1/0x160 [ 1603.885428] ? do_recvmmsg+0x6d0/0x6d0 [ 1603.885881] ? __lock_acquire+0x1657/0x5b00 [ 1603.886374] ___sys_sendmsg+0xc6/0x170 [ 1603.886818] ? sendmsg_copy_msghdr+0x160/0x160 [ 1603.887317] ? vmacache_find+0x55/0x2a0 [ 1603.887778] ? __lockdep_reset_lock+0x180/0x180 [ 1603.888311] ? lock_acquire+0x197/0x470 [ 1603.888779] ? find_held_lock+0x2c/0x110 [ 1603.889285] ? __might_fault+0xd3/0x180 [ 1603.889740] ? lock_downgrade+0x6d0/0x6d0 [ 1603.890199] ? asm_exc_page_fault+0x1e/0x30 [ 1603.890718] __sys_sendmmsg+0x195/0x470 [ 1603.891167] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1603.891647] ? lock_downgrade+0x6d0/0x6d0 [ 1603.892127] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1603.892668] ? wait_for_completion_io+0x270/0x270 [ 1603.893222] ? rcu_read_lock_any_held+0x75/0xa0 [ 1603.893751] ? vfs_write+0x354/0xa70 [ 1603.894168] ? fput_many+0x2f/0x1a0 [ 1603.894571] ? ksys_write+0x1a9/0x260 [ 1603.894994] ? __ia32_sys_read+0xb0/0xb0 [ 1603.895453] __x64_sys_sendmmsg+0x99/0x100 [ 1603.895931] do_syscall_64+0x33/0x40 [ 1603.896339] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1603.896907] RIP: 0033:0x7f29466f0b19 [ 1603.897321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1603.899335] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1603.900173] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1603.900955] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1603.901746] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1603.902527] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1603.903317] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:10:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="a3", 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r3, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r3, 0xa) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) dup2(r2, r1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x2a801, 0x53) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x80]}, 0x8, 0x80000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) copy_file_range(r5, 0x0, r4, 0x0, 0x0, 0x0) 12:10:28 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff3}]}) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r1, 0xa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000300)={r2, 0x3, r3, 0x2, 0x80000}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x20, 0x30, 0xf1, 0x80}]}) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x1810c1, 0x0) pwritev(r4, 0x0, 0x0, 0x0, 0x0) openat(r4, &(0x7f0000000200)='./file0\x00', 0x8040, 0x0) openat(r4, &(0x7f0000000240)='./file0\x00', 0x200, 0x16) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xf0de, 0x1, 0x2, 0x257a}, {0x3, 0x1, 0x7, 0x9}, {0x9, 0x0, 0x7}, {0x81, 0x4, 0x0, 0xff}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_matches\x00') 12:10:28 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:28 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xffffa888, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:10:28 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x3000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:28 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer, 0x9) io_uring_enter(r0, 0x4379, 0x0, 0x0, 0x0, 0x0) 12:10:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 28) [ 1604.072557] kauditd_printk_skb: 34 callbacks suppressed [ 1604.072575] audit: type=1326 audit(1707739828.322:156): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10453 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68678aab19 code=0x0 [ 1604.143365] FAULT_INJECTION: forcing a failure. [ 1604.143365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1604.145469] CPU: 1 PID: 10470 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1604.146609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1604.147959] Call Trace: [ 1604.148397] dump_stack+0x107/0x167 [ 1604.149005] should_fail.cold+0x5/0xa [ 1604.149646] _copy_from_user+0x2e/0x1b0 [ 1604.150308] __copy_msghdr_from_user+0x91/0x4b0 [ 1604.151073] ? __ia32_sys_shutdown+0x80/0x80 [ 1604.151796] ? udp_v6_push_pending_frames+0x360/0x360 [ 1604.152643] ? inet6_sendmsg+0xbd/0x140 [ 1604.153299] ? inet6_compat_ioctl+0x320/0x320 [ 1604.154040] ? __sock_sendmsg+0x55/0x190 [ 1604.154719] sendmsg_copy_msghdr+0xa1/0x160 [ 1604.155426] ? do_recvmmsg+0x6d0/0x6d0 [ 1604.156071] ? __lock_acquire+0x1657/0x5b00 [ 1604.156791] ___sys_sendmsg+0xc6/0x170 [ 1604.157432] ? sendmsg_copy_msghdr+0x160/0x160 [ 1604.158180] ? vmacache_find+0x55/0x2a0 [ 1604.158832] ? __lockdep_reset_lock+0x180/0x180 [ 1604.159601] ? lock_acquire+0x197/0x470 [ 1604.160251] ? find_held_lock+0x2c/0x110 [ 1604.160923] ? __might_fault+0xd3/0x180 [ 1604.161585] ? lock_downgrade+0x6d0/0x6d0 [ 1604.162263] ? asm_exc_page_fault+0x1e/0x30 [ 1604.162990] __sys_sendmmsg+0x195/0x470 [ 1604.163650] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1604.164353] ? lock_downgrade+0x6d0/0x6d0 [ 1604.165052] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1604.165853] ? wait_for_completion_io+0x270/0x270 [ 1604.166639] ? rcu_read_lock_any_held+0x75/0xa0 [ 1604.167396] ? vfs_write+0x354/0xa70 [ 1604.168011] ? fput_many+0x2f/0x1a0 [ 1604.168607] ? ksys_write+0x1a9/0x260 [ 1604.169232] ? __ia32_sys_read+0xb0/0xb0 [ 1604.169913] __x64_sys_sendmmsg+0x99/0x100 [ 1604.170610] do_syscall_64+0x33/0x40 [ 1604.171219] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1604.172052] RIP: 0033:0x7f29466f0b19 [ 1604.172657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1604.175630] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1604.176869] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1604.178028] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1604.179187] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1604.180341] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1604.181498] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:10:28 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xffffca88, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:10:28 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x20000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 29) 12:10:42 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/205, 0xcd}, {&(0x7f0000000100)=""/115, 0x73}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f00000004c0)=""/227, 0xe3}], 0x4) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) read(r3, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:10:42 executing program 4: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000180)=""/255, 0xff}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, 0x1c}}], 0x1, 0xc840) sendmmsg$inet(r0, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)="60c8", 0x2}], 0x1}}], 0x1, 0x0) 12:10:42 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x731}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs(0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r5, 0xaa574ede8aa3037d}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) 12:10:42 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xffffdd86, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:10:42 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2e8b5fd837f9d56a37e33a49981a61cefe31e4d2977e00b886568908339bb2ef5c98ef0984d79da58a1c00f3b826503c4c369cd3fb1415fe245a49a1fdf4858ad2f004140015623838893ad4377aaa39c65489a5893f12b3eab651b1"]) mkdirat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x69) 12:10:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x2, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x40000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1618.324255] FAULT_INJECTION: forcing a failure. [ 1618.324255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1618.325587] CPU: 0 PID: 10496 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1618.326375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1618.327239] Call Trace: [ 1618.327542] dump_stack+0x107/0x167 [ 1618.327947] should_fail.cold+0x5/0xa [ 1618.328369] _copy_from_user+0x2e/0x1b0 [ 1618.328808] __copy_msghdr_from_user+0x91/0x4b0 [ 1618.329315] ? __ia32_sys_shutdown+0x80/0x80 [ 1618.329820] ? udp_v6_push_pending_frames+0x360/0x360 [ 1618.330387] ? inet6_sendmsg+0xbd/0x140 [ 1618.330822] ? inet6_compat_ioctl+0x320/0x320 [ 1618.331310] ? __sock_sendmsg+0x55/0x190 [ 1618.331759] sendmsg_copy_msghdr+0xa1/0x160 [ 1618.332228] ? do_recvmmsg+0x6d0/0x6d0 [ 1618.332660] ? __lock_acquire+0x1657/0x5b00 [ 1618.333141] ___sys_sendmsg+0xc6/0x170 [ 1618.333568] ? sendmsg_copy_msghdr+0x160/0x160 [ 1618.334083] ? vmacache_find+0x55/0x2a0 [ 1618.334518] ? __lockdep_reset_lock+0x180/0x180 [ 1618.335031] ? lock_acquire+0x197/0x470 [ 1618.335467] ? find_held_lock+0x2c/0x110 [ 1618.335917] ? __might_fault+0xd3/0x180 [ 1618.336352] ? lock_downgrade+0x6d0/0x6d0 [ 1618.336802] ? asm_exc_page_fault+0x1e/0x30 [ 1618.337287] __sys_sendmmsg+0x195/0x470 [ 1618.337741] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1618.338220] ? lock_downgrade+0x6d0/0x6d0 [ 1618.338686] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1618.339215] ? wait_for_completion_io+0x270/0x270 [ 1618.339744] ? rcu_read_lock_any_held+0x75/0xa0 [ 1618.340250] ? vfs_write+0x354/0xa70 [ 1618.340660] ? fput_many+0x2f/0x1a0 [ 1618.341058] ? ksys_write+0x1a9/0x260 [ 1618.341473] ? __ia32_sys_read+0xb0/0xb0 [ 1618.341943] __x64_sys_sendmmsg+0x99/0x100 [ 1618.342407] do_syscall_64+0x33/0x40 [ 1618.342812] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1618.343369] RIP: 0033:0x7f29466f0b19 [ 1618.343773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1618.345779] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1618.346113] EXT4-fs (loop5): Unrecognized mount option ".‹_Ø7ùÕj7ã:I˜aÎþ1äÒ—~" or missing value [ 1618.346604] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1618.346620] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1618.349644] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1618.350462] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1618.351268] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:10:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x60000000, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x3, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1618.397987] EXT4-fs (loop5): Unrecognized mount option ".‹_Ø7ùÕj7ã:I˜aÎþ1äÒ—~" or missing value 12:10:42 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xfffffdef, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:10:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0xf, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:42 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @generic={0x5, "237f156be341fc76b3a9eedcf157"}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, @xdp={0x2c, 0xe, 0x0, 0x18}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x54}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", ""]}, 0x14}}, 0x0) dup2(r1, r2) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[], 0x160}}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2b2b, 0x28000043, 0x0, 0x4, 0x5, "60100d0010006319000000f9ff00"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'tunl0\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0x0, 0x1cf}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 12:10:42 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x8000000800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) r1 = signalfd(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0xc) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) write$binfmt_misc(r2, &(0x7f00000012c0)={'syz1', "626a0ee6a22dd71c7c1d19dcb0ce749d92264aeeb5c39e2905684dd043c0c71c6fb488b8d4a0a96ee795985d86ea84f68137229f42768075f7e71b90833cd70f9e6cd896438daeed79bc35624b"}, 0x51) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2002, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r2, r3, 0x0, 0x20d315) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040), 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000001380), 0x2}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001340)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x8) creat(&(0x7f00000000c0)='./file0\x00', 0x108) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000002c0)={0x0, 0x0, "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", "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"}) 12:10:42 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x7ffffffff000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1618.604366] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1618.605814] EXT4-fs (loop5): group descriptors corrupted! [ 1618.672909] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1618.674486] EXT4-fs (loop5): group descriptors corrupted! 12:10:58 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x7, 0xf7, 0x2, 0x6, 0x0, 0xc46, 0x48808, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x8}, 0x400, 0x8001, 0x3, 0x5, 0x2, 0x200, 0x20, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r3 = fsmount(r2, 0x0, 0x88) openat(r3, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="01380400c95540ff7f051500000400009bf4c220c1ef5d050006000000ee47000001010000"], 0x4c) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x4000010, 0xffffffffffffffff, 0x8000000) unshare(0x48020200) lseek(r0, 0x4000000000, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 12:10:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xf5ffffff, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r1, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200000005e, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100002}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_emit_ethernet(0x34, &(0x7f0000001f00)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x22, 0x0) 12:10:58 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x11) r0 = syz_open_pts(0xffffffffffffffff, 0x282) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) 12:10:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r3, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r3, 0xa) renameat2(r3, &(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000140)='./file1/file0\x00', 0x4) inotify_init() clone3(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) 12:10:58 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x40030000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:10:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 30) [ 1633.863003] FAULT_INJECTION: forcing a failure. [ 1633.863003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1633.864681] CPU: 0 PID: 10555 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1633.865456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1633.866391] Call Trace: [ 1633.866697] dump_stack+0x107/0x167 [ 1633.867112] should_fail.cold+0x5/0xa [ 1633.867545] _copy_from_user+0x2e/0x1b0 [ 1633.867993] __copy_msghdr_from_user+0x91/0x4b0 [ 1633.868518] ? __ia32_sys_shutdown+0x80/0x80 [ 1633.869022] ? udp_v6_push_pending_frames+0x360/0x360 [ 1633.869613] ? inet6_sendmsg+0xbd/0x140 [ 1633.870077] ? inet6_compat_ioctl+0x320/0x320 [ 1633.870578] ? __sock_sendmsg+0x55/0x190 [ 1633.871039] sendmsg_copy_msghdr+0xa1/0x160 [ 1633.871523] ? do_recvmmsg+0x6d0/0x6d0 [ 1633.871963] ? __lock_acquire+0x1657/0x5b00 [ 1633.872455] ___sys_sendmsg+0xc6/0x170 [ 1633.872893] ? sendmsg_copy_msghdr+0x160/0x160 [ 1633.873406] ? __lockdep_reset_lock+0x180/0x180 [ 1633.873944] ? lock_acquire+0x197/0x470 [ 1633.874389] ? find_held_lock+0x2c/0x110 [ 1633.874846] ? __might_fault+0xd3/0x180 [ 1633.875287] ? lock_downgrade+0x6d0/0x6d0 [ 1633.875749] ? io_schedule_timeout+0x140/0x140 [ 1633.876269] __sys_sendmmsg+0x195/0x470 [ 1633.876714] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1633.877188] ? lock_downgrade+0x6d0/0x6d0 [ 1633.877664] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1633.878210] ? wait_for_completion_io+0x270/0x270 [ 1633.878747] ? rcu_read_lock_any_held+0x75/0xa0 [ 1633.879277] ? vfs_write+0x354/0xa70 [ 1633.879692] ? fput_many+0x2f/0x1a0 [ 1633.880099] ? ksys_write+0x1a9/0x260 [ 1633.880522] ? __ia32_sys_read+0xb0/0xb0 [ 1633.880980] __x64_sys_sendmmsg+0x99/0x100 [ 1633.881451] do_syscall_64+0x33/0x40 [ 1633.881864] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1633.882434] RIP: 0033:0x7f29466f0b19 [ 1633.882850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1633.884895] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1633.885750] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1633.886547] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1633.887336] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1633.888123] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1633.888907] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1633.925917] EXT4-fs warning (device sda): ext4_group_extend:1797: can't shrink FS - resize aborted 12:10:58 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xf0ffffff7f0000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:10:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x2, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:58 executing program 4: r0 = syz_io_uring_setup(0x52dc, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x13000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:10:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x18}}, 0x0) 12:10:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xfffffff5, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:10:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 31) 12:10:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xffffffff, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1634.064593] FAULT_INJECTION: forcing a failure. [ 1634.064593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1634.067168] CPU: 1 PID: 10574 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1634.068530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1634.070206] Call Trace: [ 1634.070751] dump_stack+0x107/0x167 [ 1634.071515] should_fail.cold+0x5/0xa [ 1634.072298] _copy_from_user+0x2e/0x1b0 [ 1634.073108] __copy_msghdr_from_user+0x91/0x4b0 [ 1634.074052] ? __ia32_sys_shutdown+0x80/0x80 [ 1634.074944] ? udp_v6_push_pending_frames+0x360/0x360 [ 1634.075998] ? inet6_sendmsg+0xbd/0x140 [ 1634.076813] ? inet6_compat_ioctl+0x320/0x320 [ 1634.077727] ? __sock_sendmsg+0x55/0x190 [ 1634.078586] sendmsg_copy_msghdr+0xa1/0x160 [ 1634.079475] ? do_recvmmsg+0x6d0/0x6d0 [ 1634.080277] ? __lock_acquire+0x1657/0x5b00 [ 1634.081184] ___sys_sendmsg+0xc6/0x170 [ 1634.081835] ? sendmsg_copy_msghdr+0x160/0x160 [ 1634.082769] ? vmacache_find+0x55/0x2a0 [ 1634.083436] ? __lockdep_reset_lock+0x180/0x180 [ 1634.084225] ? lock_acquire+0x197/0x470 [ 1634.085040] ? find_held_lock+0x2c/0x110 [ 1634.085723] ? __might_fault+0xd3/0x180 [ 1634.086405] ? lock_downgrade+0x6d0/0x6d0 [ 1634.087088] ? asm_exc_page_fault+0x1e/0x30 [ 1634.087826] __sys_sendmmsg+0x195/0x470 [ 1634.088492] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1634.089203] ? lock_downgrade+0x6d0/0x6d0 [ 1634.089925] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1634.090724] ? wait_for_completion_io+0x270/0x270 [ 1634.091523] ? rcu_read_lock_any_held+0x75/0xa0 [ 1634.092286] ? vfs_write+0x354/0xa70 [ 1634.092906] ? fput_many+0x2f/0x1a0 [ 1634.093514] ? ksys_write+0x1a9/0x260 [ 1634.094153] ? __ia32_sys_read+0xb0/0xb0 [ 1634.094832] __x64_sys_sendmmsg+0x99/0x100 [ 1634.095545] do_syscall_64+0x33/0x40 [ 1634.096169] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1634.097007] RIP: 0033:0x7f29466f0b19 [ 1634.097622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1634.100566] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1634.101809] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1634.102977] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1634.104131] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1634.105281] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1634.106455] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:10:58 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x818d6000) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/oops_count', 0x0, 0x8) fcntl$dupfd(r1, 0x0, r0) fsmount(r3, 0x0, 0x8b) syz_open_dev$evdev(&(0x7f0000000040), 0x61d, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) [ 1634.379537] EXT4-fs warning (device sda): ext4_group_extend:1797: can't shrink FS - resize aborted 12:11:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 32) 12:11:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x3, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:13 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x100000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:11:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000015c0)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000f40)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x3, 0x7, &(0x7f0000001500)=[{&(0x7f0000000440)="8c91e8dee128871a6655bdd5ed9fad40209507b07e10cbfbfc911fb2aeeecd793e75a7ba5a22205e58d1cd576348fc1bbe9ae873afb66fbe853d1fe91cb8efe5154c21123a09933dd6da3b60a7fc04", 0x4f, 0x4}, {&(0x7f0000001180)="119929ef90bc222a6197f2aba10e9052c83598a7445d372c61f84406fbd5ce5c6ca20b72029b5b912aa5c88d83cf347df0fd5a27ef3921c74e04a802de9f56167371372831ad2fdcd852a4e179f73b9e81328c589e26f3c08c52c23b2debb23b9a9d0da4e644f9d46feaaabc15bf14bbbccfc3899065fddbacc63c0978e2020bf46ee747fa90087088ef18cce38b7c9363223d7c1960f528eb0297cec80e4bb9deb17e33b8e9d31d4d0a282bc486407509c11137eb7c321c1c0060349f6bb0e2d0ec89003306b90d7a5abeb951f4d67be698a1393ed278d66ad178c065f00c955b3e238bfd85bc4eaeb39b73b9e3f888e4c1b7a3caa6e776", 0xf8, 0x3}, {&(0x7f0000001280)="83cff3b8a6a3617c8f61fe49a36c003d232b3a7d0d690eed846801a5c645ad4ac7a80707475d61812b6d387a5cf65c912a6f3d1acaef5193537d70a52eb8038c34c1a02a14ee477b925d8d952fb24864f3202aaf48c0a8112fe484520796a14cdd2cc4985c01e3037c554b052150f2e46a666c90b4d6e3ea3b41c719fcc127765d0fa0c30b8cb76b882d04c73fa8d1a634b95b6d56f41b9521877edc0fffb8c0e6aaf6970612699864d359bba10965084cee065b1797c2779fac56b53e867f37f25196a9ea4b34aa0e5cf537489ea80ec00d9f843fbe2ddec7f4b270d122b5543c59dd4f95b1cc977d1169931f3f68", 0xef, 0x6}, {&(0x7f0000001e00)="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", 0x1000, 0x2bf5}, {&(0x7f0000001380)="1de9fc1c923caf041b846fe64486c6e3a1cb23bace651045ef5e9d9d0b5d1b4f79f2dbbea28c9bd329a12b22ae27bb0a0dda65bc4841cbe28e3007b2a01c6e3b634c6b3ec94842313aca2e14c99f8daae2ad142749a404a034e339629ee949a3bb8dd1443966f5119f4b47a951e10c4ccffc29b82712932f1c7da1dae5fdf3c326d9b708b7444ea8674f54da248159cc335cc7", 0x93, 0x3}, {&(0x7f0000001440)="7eaecc8f1f1e7928530f0db348c27bf8c307a68834440a3e9ecf8f99f09f73b6c4a0cad7e2999fd115b7ec2e746a5b27da1c7c420d099d965df6eb75a2bdba671b5c304d7077342746b7ff59cb2a836acc78d9a39573ec0ce80421fbd29fbda185429e3373bdf3a6c54ddfab3d46efb0895946bc05b2b82cbe66f5f61edba881c4031221121803e39bf04d5adac333b1044e46d3dc0ef0ec00fde5f847feefde92fb82a91e17cdd55067d0b24004f2841aaffb62e4c0a78f4098a611", 0xbc, 0xfffffffffffffffa}, {&(0x7f00000004c0)="0b8d1366d16190872c5e46ff062556af9362994dfa7e", 0x16, 0x2}], 0x20a0804, &(0x7f00000016c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25, 0x74, 0x30, 0x36, 0x6, 0x31]}}, {@huge_never}, {@huge_within_size}, {@huge_never}, {@gid={'gid', 0x3d, 0xee00}}, {@mode={'mode', 0x3d, 0x400}}, {@uid={'uid', 0x3d, r1}}, {@nr_inodes={'nr_inodes', 0x3d, [0x7]}}, {@size={'size', 0x3d, [0x6d, 0x65, 0x33, 0x25, 0x6d]}}], [{@obj_role={'obj_role', 0x3d, '/dev/random\x00'}}]}) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) openat(0xffffffffffffffff, &(0x7f0000000f80)='./file1\x00', 0x0, 0x101) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0110bd000100000018000000", @ANYRES32=r4]) fsmount(r0, 0x0, 0x71) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000500)={0x1, 0x9, @start={0x0, 0x1, "2e70ae2fff3d57ed1497b3a77e3c3449a74b66a1a3600953b2aa02b3ed69eb1362b7900b98551f1f85d6d4e0c30fda97c5a59268c408e872a1bb7165da8722e869c3804ae174d48e4ad7323428829fd8ae05d183607a151669d11dd488a33b1297c4407f9d568ee31f233ee545089e9baed9a9a395bd0ccfdaca006e9a7c0d1084d9bddfc846f6f92516434815c24223bf6fda521965b1525108208a859f06e4bd721b57b2792283138066c3884580b3ed4e7fd615c2cca5df0cc99824aa5c7d4e2745a87a0954ecd108ac680dcfe6cf97a676132cbfabd8c63a07507f57057f88427484155b1bbf23fe508c3e7cacd078bd6ab9a4414385714b66dadec4ae17e4b5ddb58ef8b4b6c23b0729afd9403334c730430a0d1219969a70363ff74b3697b0308f090c15303fae13ec7c636d170757790c5017d3791b2499e5052b060018b17c7b8909403c65beebf7c968d8b6ffc7bed2be687ce493243ef6ddd980dde2ea159a56663410f1ee3ad7a94bbd2d5403c6a8e393a01df54d44c2fad91a5afcd609358029bf6e177b065c81b72e3493b5a4f82dc3c99406eb0cd651b55e3409b23e9dffd2d61f63cc98fd8f2dfcbefc915eaceae5420aedbc54df41c07f782b5bbd62a6dd01e8caaa1b446329eba9d4cd380cb5bbb5ee3eb0ac03e5d8510c2ff8fafd8b18cbcf1308a8a54af2876174c3018edec5ba8ef804d15d2c00680bd0c6d0b07f823d7e79b4befcc5bf513726906ef9ec1271cba23a6a4fe654806e56ef8644c0dea0c25bb8e0859a576af23e28c7bc55d759ac0b121bb0bbbc7b04d1ab3928b021bd0975962560dfbfeef51118e8808e232b4f2c66ac7b0be24b0727adf6bd101655907c47cbbc3312222729498bb8fa5fb9e7bbf4a22840955e20e4e40f5efd02b226f4c92d08d2d470e0ff8e3fce3d689c602989e1e1e4a4a097f71300856d0151136c381f3458f18d0c39da369f1814e840f181a120a1ca4094833d11fb0278c9622e2ca199e7df5b2d51d5fe5220b2addcb2cb18b5c1713a6f8391ad0153acb4db0481f9c1c527fb117c0a4a13633d6b1cd834932e4550d745d3901bb4070048ce0f5ec759a3adb45659509ce5724c281c8a434ce3a6213d9f5f6c38e80240fe42d34ea3771fcd231714cd03b3036bb767fd630960dda0d7f335b2addd1770967daa5c9e592d678cf4c23b65dd69f4a62f55db7104248ed7d2aaeecd767942daee8b33905c544c167fce58f001cb222fec2bec7d0bb47e48bad859d994c50f90f895cee11e8baeac65775ef06075d17cce4b8dae3333d8d589917c0ac8d87da5011f1580aa49bd5b9f5fb6e6bfeee9e6e538aa2efd0dd8ce6ff74f748c054d25da2f2c584a6c5ef7949849e5f48fa295bfaf73ee9b73023a58045b0a7f7cdf20c558b9289a6defa5cd24288adac41c40bbc611574b77235b05c4", "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"}, [0x100000000, 0x3ff, 0x6, 0x0, 0x401, 0x8001, 0x3ff, 0x3f, 0x7, 0x27a, 0x10001, 0x4, 0x8001, 0x7c1b, 0xfff, 0x3, 0x80, 0x1, 0x8, 0x101, 0x7fffffff, 0x8, 0x400, 0x7, 0x2, 0x9, 0x1, 0x0, 0x4, 0x2, 0x7fff, 0x8, 0x6, 0x117e, 0x7ff, 0xfffffffffffffffd, 0x7, 0x10001, 0xd56, 0x7, 0xa58f, 0x8, 0x400, 0x700000000, 0x7, 0xfffffffffffff801, 0x1, 0x87, 0x4000000d6e3, 0x8, 0x6, 0x4, 0x6, 0xfffffffffffffff8, 0x6, 0x2, 0xffffffff, 0xffffffffffffff01, 0x9d36, 0x0, 0x1ff, 0xfdeb, 0x0, 0x7]}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x6) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ftruncate(r5, 0x71) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]) 12:11:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@local, @mcast2, @mcast1, 0x2, 0x5, 0x0, 0x100, 0x8, 0x2080040, r2}) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = dup2(r0, r3) accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, 0x0, 0x100c00) openat(r4, &(0x7f0000000000)='./file0\x00', 0xc0, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=0x8, 0x4) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r5, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 12:11:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2942882, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776e38646e6f0e1d8074edf89dd1f81a24f4e6d1e3eacb355ceadb319a253905d20cc5384f55ddf986eb109df17a1e8750f91c7e926200000000892a9b599d23aa470dc083ee2b571752dcd759f8c3036e01702ac8041caa1dfcccdc7c7467c6299675cc770e57eb0d47e3835d86156f528ec52c0ae29f7e3d70f33453ac57395b3e88ea1b9607caaeb801f72fb2657779070000000000000068d16b94083c3209ca178ce6b8c84b1f9740ca38306eb7e472caf220a9702576a4e3d98fe1df371eb7a6a36b4220c2a9fc7c68472cfa7d039b497d0bce33db886222d4656075", @ANYRESHEX, @ANYBLOB=',cache=fscache,uname=*),,cache=fscache,pcr=00000000000000000060,\x00']) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xe8040, 0x8) 12:11:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="25bd1f9c1012dd92d9edd0f27aa709576cc78fea8a7f88c9e03cd1174cf31af3faa56300e7e349966aed17e7171832c1c662df40f76d1fbc47b4c6bcfa9ae019bb89ddad19d0c83853578939c5f66f51441a8548ef692dcee27306a6dfaf956458835e8153229e12d2a27b970105bd7921de75c49f08fbd2837fdd40d884dbfe4eb3125fd5b13e60afe0a9a77195ac1848a80e452645034b1f2dd770c51976e71453ecf36a0561e615926ebd75e5fca695045097697b3aa6316d1a01865f7be2a0d583cabde507f1"]) r0 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r0, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r0, 0xa) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x29) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x300030, &(0x7f0000000380)=ANY=[@ANYBLOB="6e616d653d632785296ef6611aae"]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) getresuid(&(0x7f0000000340), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x800000, &(0x7f0000000540)={[{@name={'name', 0x3d, '-'}}, {@none}, {@clone_children}], [{@euid_gt={'euid>', r1}}, {@euid_lt={'euid<', r2}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@measure}, {@hash}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_gt={'euid>', r3}}]}) rmdir(&(0x7f0000000000)='./file0\x00') [ 1649.103981] cgroup: Unknown subsys name '%½œÝ’ÙíÐòz§ WlÇꊈÉà<ÑLóóú¥c' [ 1649.109727] FAULT_INJECTION: forcing a failure. [ 1649.109727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.111838] CPU: 0 PID: 10605 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1649.112943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1649.114292] Call Trace: [ 1649.114724] dump_stack+0x107/0x167 [ 1649.115313] should_fail.cold+0x5/0xa [ 1649.115935] _copy_from_user+0x2e/0x1b0 [ 1649.116587] __copy_msghdr_from_user+0x91/0x4b0 [ 1649.117345] ? __ia32_sys_shutdown+0x80/0x80 [ 1649.118061] ? udp_v6_push_pending_frames+0x360/0x360 [ 1649.118912] ? inet6_sendmsg+0xbd/0x140 [ 1649.119555] ? inet6_compat_ioctl+0x320/0x320 [ 1649.120277] ? __sock_sendmsg+0x55/0x190 [ 1649.120942] sendmsg_copy_msghdr+0xa1/0x160 [ 1649.121642] ? do_recvmmsg+0x6d0/0x6d0 [ 1649.122282] ? __lock_acquire+0x1657/0x5b00 [ 1649.123069] ___sys_sendmsg+0xc6/0x170 [ 1649.123774] ? sendmsg_copy_msghdr+0x160/0x160 [ 1649.124589] ? vmacache_find+0x55/0x2a0 [ 1649.125312] ? __lockdep_reset_lock+0x180/0x180 [ 1649.126159] ? lock_acquire+0x197/0x470 [ 1649.126825] ? find_held_lock+0x2c/0x110 [ 1649.127491] ? __might_fault+0xd3/0x180 [ 1649.128142] ? lock_downgrade+0x6d0/0x6d0 [ 1649.128818] ? asm_exc_page_fault+0x1e/0x30 [ 1649.129544] __sys_sendmmsg+0x195/0x470 [ 1649.130198] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1649.130901] ? lock_downgrade+0x6d0/0x6d0 [ 1649.131597] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1649.132383] ? wait_for_completion_io+0x270/0x270 [ 1649.133169] ? rcu_read_lock_any_held+0x75/0xa0 [ 1649.133924] ? vfs_write+0x354/0xa70 [ 1649.134539] ? fput_many+0x2f/0x1a0 [ 1649.135139] ? ksys_write+0x1a9/0x260 [ 1649.135761] ? __ia32_sys_read+0xb0/0xb0 [ 1649.136428] __x64_sys_sendmmsg+0x99/0x100 [ 1649.137122] do_syscall_64+0x33/0x40 [ 1649.137726] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1649.138562] RIP: 0033:0x7f29466f0b19 [ 1649.139170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.142131] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1649.143363] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1649.144517] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1649.145670] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.146830] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1649.147986] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:11:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x60, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x2, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1649.172299] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1649.223463] cgroup: Invalid name [ 1649.258026] cgroup: Unknown subsys name 'euid>00000000000000016877' 12:11:13 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x400000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:11:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5e, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000200)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) dup2(r0, 0xffffffffffffffff) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) sendmsg$SEG6_CMD_SETHMAC(r2, 0x0, 0x0) execveat(r2, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000004c0)=[&(0x7f00000003c0)='\n]#!:+/(.^\x00', &(0x7f0000000400)='%&)\x00', &(0x7f0000000440)='-!*-\'\x00', &(0x7f0000000480)=',+-\x00'], &(0x7f00000005c0)=[&(0x7f0000000500)='/dev/snd/timer\x00', &(0x7f0000000540)='-:\x00', &(0x7f0000000580)='/dev/snd/timer\x00'], 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd, 0x9, &(0x7f0000000140)=""/26, 0x1a, 0x4, 0x1}, 0x1) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) syz_open_dev$evdev(&(0x7f0000000240), 0x8c5, 0x400001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'rose0\x00'}) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000600), 0x20, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) [ 1649.295670] cgroup: Invalid name 12:11:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x300, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:13 executing program 6: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0xb) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0xff) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) connect$inet(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getrandom(0x0, 0x0, 0x0) shutdown(r1, 0x1) r3 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x198c, 0x8, 0x2, 0xae}, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005800)=0x4, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) r5 = fsopen(&(0x7f0000004500)='hfsplus\x00', 0x1) r6 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) kcmp(0xffffffffffffffff, r4, 0x2, r5, r6) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x2c1) unshare(0x48020200) [ 1649.389885] EXT4-fs (sda): re-mounted. Opts: (null) [ 1649.418284] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1649.421128] EXT4-fs (sda): re-mounted. Opts: (null) 12:11:29 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x800000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:11:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x3, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:29 executing program 6: r0 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000000)={0x0, 0x8, 0x2}) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000000340)={{}, "e29c829441f26f171238721b0b56f39a7c784dc3d8edc4f66fccb43d541af430f4c752f90cf20f8dd44fb00bb4e087d8da8b8e493516585b9c496249f099e61a343efc3928801154c4e7dfb237cff93a53f790bfa89fde12bbda55322a2aa12e2c6252d596060d57448c9a187b3e64df81e35fbb0aaa58ee8200cd9528fbd6d6f64e69904a3856c92cbd53efbfe2e548674f06b32d67949dafc6cfe970e2f75915af4c8d64dc32560145f170f0ca8d3c1d1a08f9ddf68db1bcbc73b6b3862341f01e6ff9703e6ce6da9e2ecfb517f67bda180cd19125381dff58f73179a52063ad7674df0a8317a7ec49dbf630e17765e397b2ed056d44e0ad02ff8f44a0bb6ff0ec0ab1905fbc0b217c19eae81d99b3c9a2b35267e78c026f480f95392230133cd5262e37c80376569355f3517254486063ba9b83c5e70b4f8b7026ab136cfffec309ef7c5a8d5904b11a5951412269f12c19b9e941372741454e03a63fab9e19fd0d21cea299e66e8503dcf02c926708704d0ba80b13961e1e6b11d0e0aac4e368200108b5be3324609db7635997c821de42e4a575ae7e6b483cf514bad70767fb2cdca607bbc1e1d80eadfeb10a7ed51a7b16d439a20ea75fa8496c76ae532a0fa31b9dc415948a1d00e4cc67a0d8788e6a339971a4fb786e1207006a6ca227a60918afea30978c1cc50f1c267cc9f41b0376e64456660094a067fe5ec3126a031429f7bf9262d6b65d0437f6cd386aa75e8c6616f11bf1323dd48b047b48e5b4c43f7272f24e2fdf7655afab6e24dce1af5036cb8b7edff6da3fccaa5bd665a6f934d887e689103e6ec4a13d6d6064d015d6f2f25487703a555b0e7b0f050673c15bac58594a60b461595a9ada281666c1e50f939908b322c257f7e55d862e5b6959fdb899e8e6cf2a1ff158b8845071b2561761105a7c87a98e504a74cb061d186b65b6c973654afb73c40ef52afff8bad47b841a769c370b39d8a0df37e128f0121de291e79b41782388d0552f3689cbadc5f6b3979457b329e0a23e9626e21eb56bef3ad1b9cc5dd1eae6b3d4f12d5937804387df5d5b0636f21380927840a96852199a58abf20491328b9ae12d72fdf21f84704e1e4a6d108a5b38be56d9a1cfcbd2fdcbb91f02f2ec827f5560f2855665ab90f2a62611f0facf0f1b9a51c1b9d44d7377c8baec0a2144103e6d1893ffa11c67938b0fceb3655dac5e4c6f81a635aefd76038a243d78a72ed9a7b9c62943385ac9926f4a9b7c8aad17fe3d95f9ae1209ef9b091614c94b2dbee9e9f6ec1ee5c3e97356f5d5325d58b74859612eb1a4bb150c96e0fbcf73b365f820d601ac9cde0bb8b44da2b370ac0e280c1a8977146b89fc9f14fc666a07e7a72e33991e3178b0050652490432953998578bd4628429d7f8320f1782776a5f7569c7c32a1a6ea51af5c1728bc1ee1bcf1d09ff3f3b0569b86c0904e7fc9255adf4577da1f52741b7543b7107e1dfc4f1d08e9bb63518fa6c1f2e3a782a33b04cc10d3b406fce763acc27025d5824a6fb6a0b344195421c0f6c362e16779803379dc7a8fd2bb4730c6922ea68e5567a4282428bbe337e3e4ae91305a933951606abfce8bd26caeea8415eb041f3ef148d6cf9389b35868aa809c5f947eaae8af8ad8dcbc43991e8e57648e2bf25229364e31dcf74056fd327e11b9713a0bebd875e305320052c2c4f61f2ef76df78b9d8ba7c825a06e63ebf1a0ea73c8d98c375eaf2291c101c1eacbff70ce1c4f0364211883151b7195e7f302544a1bdb6e6aa4bada33573dfa55fa1c05f61f643717c8dd42c7af48dd4ef1568858080ecee138af285845ab1a2a1c4a6e1a4c634747e9e07755f33dcc3823077c4425d10154ebc7e54916acdad5220480edcb6c159926a76782b7b418742989d11e9102d16d455a18b78c974a07815a22941960a1143e1051ac19783606611fa547603c684ec3f7461102f829d88b7f99e60e1f1ecefa77ac7bbbaf2840eaa334a32c148500613c35ee32b282db1baf9bfc8560649dcba66621937b15aa2d2816926cf6490acf8e2bfebdb98fae3f69581f4bfff0a2c080565021e7b30b6749e6a96a5b820729ee3bfbbb5cf78ae0ab58a32eaa596010ae4a13c2600b827c2d3c1570f82da2039fda71715a08db5750658a1fa74ff400c7a5f47f188eb3c3f9c90d2145b3c92538f81c858ff46883db81cf52d8f15fb2e146a99efe3ae42b5c00d4cacaedba2b23725a6d8e3e2c9d4797cf6d796a96dd990e0d8ba41c5df6137cb85471637c2592ea19399205b7c030a29d3d72bfc33de55e1c67e322d0d81198a26d4ecb7069b5ea70fe9d83bb4a282023555c8b8557bda2b962929efbdb7f171c993923dadfde3bb3789302c5035ad90a3566844ba124804f42648379ae7e80f37615a3ee6a462638dcdabbdc4c4bdea4e7d49a712ee83a1f36a1ae2e3f7fb3eb58ad505b628f1c28ccc0c24711424e05d86b9458d6cd77ff4423f78827303fc74e1759d448fd6a9dace0ee62f6fa593e67aa2e7bd3e0872ac86e8c86fd10d19f85fb7fb5d705f9b65741dd84d2e2f136f4bcd34f60ed5e987ae96be6097e5f5a98ef10400ed58317ab60d906d39c2a1d13de3f1ec2be489ddc0376313ee181b39adbe41f51b7cc654b860a0679fc098c2c9b893c49786a895206d1071e5898aaabfc63f862663d93b7820d3f1b363be515a486b560d10bedaecac5b6b2c66c460466b1675d3cf6c9564d67c0f06c5ce288aed25a824750e36781072c4ee4797a1d06c3d995c9dc0ce69c6c04d3d1129a641739d1fecbe23fb102e11cfbe1934ed150136e7874f94d07608a39add955c20a676c5ad31efac7c7f511acfa45f57a1a6d6c05950cbbaaa1d6ff0327b33cc537a2a5157aaf1efe18c29b0b8b0d9cb624b0a4fe09ffdf44d4481cbbe045301d8f86ae30462d662b9e0a4d34deb99c5b8286b40d3dacd909e562744c8162118df4f25f20ee48e95577b6e355241fa1ab15417032aead2fb9e7e4dedd81947ba15aeadfe4d6f7ac4b7dda49ce0042f93ac1e054be654184e019466f64e29017fb839d4c16d9a90fdc91f266289b2c0af6bff35ea1d8d33b797bece7530e4a85d9cf6f0d9f006b4a727d729b6dd46d14b153ec1af7fd6c609a757d38c76cf171a6fcdcca01bee3d643e0096d34166c737fe92f97a387d93ce0cd44be2b451c14f8ab5ce56b1c2b3e6bdfa65c55a8c4e5eefb2e423c290ed2635adaca1507d3503ae0aeb91d2a155bfe1f2550ad81a8a6a2eadb811f5ba0e7ebd8c4aed75769a2849acf21d3d6440f15f682765c2ba42088caefd210bf524622fc50515e872ccf74c726ef8acaa59c2d2decea9b8cc1296f955ec6981e58e696365619da5f7d4e094543cd542335c7e818746bcbee6333f1accaa0a6fad0adf38d5b6f1cb0f179fde7953fc59bc3ea0fd9753c78d341eab0daa3dd4afc6cb0bb3d6af939b4c5492ed4ef1221501171077ce21e2644800e20a5a38e5f46dcc0860877890559edf9414ced18646057f5b2915684572005ac2da350c53c77fc879dd5fd48887a425189146fd4f87493c6ebab92fb60f1a152196f6cc432a802e484a947675cb205b77e9ddd78d48389f239e461f70909714d7d31b4784ed70612328a8b2a247e94431aca24bd8feb4dd0a8fec9e19ac8faa883e4be2daa58df81067670bc242581763ae0274ab52faa2a1e180e0d5ba48c96e9d2333c749776504df42ce0124eb99661024a7441473d56ff68c161a4e7ec3372c9ea31c743f28aac3025205c111e80c3785afae6d450fc3c0dda803dd64d5d0c84aba26d6274ddcf724dc1cddae4cfefa339c4cb93e5b2286220b02d4956605e705521b0de8fcb58fc5bbfafbab031590b75985556f3184e60424599485328bb31a19b8db5f5381f0900cb76e737f12fbaef67aee587c919803c15e3a48549018c7311bddbb00d42d892e5f9bb877b11786cfbc49de285520744a54bc9d6b70b5ab8c56640e41467b72d39640a8b283a4a0bc63732ad4a024bf7cf4090f2142c3a61c84569282eadedacf526a6dde343e0ca2939c5874b50bcc2d654e91b707159325363c4021d74e8d223152ef4b777888b405689f3646f7354da71caf56c813c9369dff23f193fc417a8c90e8a70de31fbce080b5308712ea6715c0031a74ba35a6bba492a83f89c6f29176a95b2242364266d030e920bac6ce94e9f0454653e79c1e3247a8be88e8c0b0faa976fa5923da944f6a667e3cd6827ae12feb1ee23ac2c9325f4e6a5a9cf5f069ac2511050617727419005019445799eb8d1e8dbc3983a540ba64306847975daa8edb41de09ea461cf5cc78a24f6b93a89c9a820c4f6cc42916e788dd9904a0f39b32803e8732d35be36a6b5ce4b845969a6a8cb9b1f483e23ca3b1fff84803992e28b389c1f5a4cd92003ca40e91de6d808e742a0a4fcc13cba1be4a8141f985a908a1e4ed206d6fdb64c01e6efeb2c867c71f92bf0da176cac25feea9d7949160e0026a5fa13451dc2d817f9b5a261b3b71e558c5f9616e78c697ef1eacaa6ed766c9762ee0f9b5463389bf6a9bacd93f17f94575fe8cdd3634c96289c7f3808256556bfa2cb19107b79e4b9e020e2fbde0a299fc404ed477142a818fdc438cc93b23a391e92f0e42230f47029fd2543f7ced5bbf2ced9ac1f6f775f5613548378b18c059863de39cddeb5274496cf21094c2463025f72f19ab5b3e5e49673facb12b3a66d5c1335b9bce8c02f299262627e59b573f0d33af645afb689b26b816ad653baf2be2dc5fcd3cb5c157824cedbf407abadcd35fcd662ec6d26e2d96e432a6fbfac799ab3b20c13294d6fd96f11abe4c7044847cb022df33f1043e5b7beb6bbf4e2281cc4a6be71f6a9ee0a4b2a3a4a886e3f7c6d3c70c5b4eeec593f970aff2fa5895b9e22ed1641c83fb3b25df7c5c9c651d3ad71e8217e29bee9c25b79081f97b662b147c2bfeb031e3a2d64a6a1fa1972bd4839ab4dfc52a93f7d7cbc3c255ddc10304ff2714e8a59c47a63df6594a4c8ec2b682acd53a94167cb061bf249e26fd1e84e1b1be438a4a258d7edf005d78b8858b5b65d313254415690bede620c575619598e831c0d92a962aca9366fc2f082082c5f56a82f25b454b372cecb2cab42633ff7e9f530286b4d7a36a9fbf556c9c409036844d1e0111272f9d4a6501f9c82b46097d316617c931673ff667bef1af93c4fe5a3734ca99c97258467e44a068e61b7ec3eb369bd9c508a41cb3d205bd70fc6be0676e370fcc662c659e2ab18ac7106b1aed2d5b45226e9bb941c66c605aa07953a61609a544c6c36a7c0ad4f89e973cf01695645563444a508f9bf131ee746bd5d644c34483d8b4c9c1d6e80801041a4f3aec46ce68bc2388bbb74b3aca9cef45c1931374ae6fb4253a4402d5f540421771e76e5594a9a634222a0333524d443a85360acc7ce3e9d92c0f09c03d2aa704d6215402f60ca5ea266f99ed76bf19770d0465f4d24e6e25502c3e4b44910df80a54469ac13993ec18a065751c2b757300894bbe3ff064c325fd39097a2be3aaceb91112a6e976ce705c301274878468c799a5c37b5ca1a5cc28f14c4a6150004dd05af0c0af0db0858c774fcd4117e75e11efb1862b43534896ae658bacb12c37eaba24ce0ce0e642728a7ff1f5d63e881ac34078c9699581da72a7811cd30d29a3acfbbf031334ae0186851a7dca2df554f0df40cf03997310673c9cd594d673b6e975e828813badb99dbccf0d60683dff7f"}) add_key$fscrypt_v1(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:11:29 executing program 5: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x49) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xb96, 0x4}, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="1cbe0c642488228fed127cbd444af7e1d6ff40fdb2985a196e6f53e4e9e413a2807635f4a68695cc5ebaf93927bb84fc0f7f7974b82b806df7b707ac2afbc325fe1386584db4472cc02db9e26c379fdc46a1e23fb4334aeb50c2e3082151eda675", 0xfffffffffffffe5d}, {&(0x7f0000000300)="d4ad77e672560ad600b99e0a77e8818bccc9bba654698ad6f9f461912975929f217173fbbcccb63c60fd529328bd514f88e47b32e3b298214a443c8360eb9469df70f7f3cc17fff207ddcc44f9e9182e10423dfb320fa78df7c0a6296872e70d58e18d7a83c8e801a3d3382d025ead4e66f76ca091b3d8543f04d3b5c52b76e6eecbac8f8d79ff603ef4bd3387117d26b2635b57a731d75ae17646d161186f5d93a93dacfbecc5a4e1dd8fab", 0xac}, {&(0x7f00000003c0)="870e713bae2a055db36421c95db6f2791c4a9e6fbf096ff314f82c3180a50a780a329895c15afd2a7f91bf7a369a0b22a96b742cd7feda76149ed08f940ba35a504440663186634b0b763ce3af9a9d285fd4ceeef437cd2bb6f4303d18d5c0b306b5ca113eeb2b12def642e365c91c9ab6e94d100d452fbd2b780defc068b9285f19dda88f", 0x85}, {&(0x7f0000000000)="43bef8ead34cdf3691244e1316b3c33d45441584421514f5180cbfedee76d3f6c16ecc07c484", 0x26}], 0x4, &(0x7f0000000480)=[{0x60, 0x84, 0x6, "4242ec4c0d1136864b83a2344db9b346ade13464d01d22251599033b1cbab175338375563834fe05354dd3a664daab1c27b1488a390929ce6ada3971c2d760d142386069b2c183495f3229f0a585e355"}, {0x108, 0xff, 0x8, "5ad43b72a59a27972686aebfc652747e52c6c2576b2f4f77e66752a6ecc5e5b1fc7828e5ee6e82c41f5ca6b87381193f7f7691201bf631ac5217077ed966cf544402218f566d1eb9afda9adbf82ee75c648bb2159b07d2bd8e0ab55a8d4a9670f8e46539997b3ff2e5429053e269ba07c54cdbe8263b33edd4ef117513610968bc396c937a5ed530752e1eebc56e3964d897cb5e9732bcf915e9c1c9c683a65f4580aaf77b0dd77ead0546b8b026b52a4b28de1ba5e9e16cb87eeb2e82a98208505970aeb706dad69e86b458019d57f84b9b5c67feedf8936f0ac017a5f5f90164d3986bb87860219b60b84a4b67ca9ceae1ff"}, {0xb8, 0x119, 0x6, "11c3e3fa123f49591b82ceeeb4205a165230a6a732297a767950edc29c6d9d8a72e102f85127004c2863d788638d1a09481d8de3d3d2095c353fe3dd8fb93a61b12e142b451a73feaaa2cf15d89f15f01515fa59a2b685b01fcad4ac28f680a4acbabc16820394d7c2918b575ea039579fab42cd8878c70715a2c3220bf16d2364f6f913b1d9fd07ecfcc70e41b9e23b607ab8b6cf3e902f3f55b57a9390cc0845e2"}], 0x220}}], 0x1, 0x24040801) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 12:11:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 33) 12:11:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x2000, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000900)) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 12:11:29 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="6b404b733e2b149be21f3c39b02cbb5574d7acabda5dd20d3306a6f502a9a3abd2d45516d47121e74cf7f2faad5837219fc7a1cc1bbce49d118271ff0c55750b9d0a808f378a7195ec4d9ce3f5709c5ff27780c3a1a8314b552a09c1f5075047151bfd3053887e76113e62bcb8d9e5ade228805f3f57a1b4203bbb", 0x7b}], 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x490, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() process_vm_readv(r2, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x182) [ 1665.419630] FAULT_INJECTION: forcing a failure. [ 1665.419630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.421492] CPU: 1 PID: 10653 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1665.422520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1665.423734] Call Trace: [ 1665.424136] dump_stack+0x107/0x167 [ 1665.424683] should_fail.cold+0x5/0xa [ 1665.425252] _copy_from_user+0x2e/0x1b0 [ 1665.425846] __copy_msghdr_from_user+0x91/0x4b0 [ 1665.426545] ? __ia32_sys_shutdown+0x80/0x80 [ 1665.427197] ? udp_v6_push_pending_frames+0x360/0x360 [ 1665.427955] ? inet6_sendmsg+0xbd/0x140 [ 1665.428556] ? inet6_compat_ioctl+0x320/0x320 [ 1665.429223] ? __sock_sendmsg+0x55/0x190 [ 1665.429838] sendmsg_copy_msghdr+0xa1/0x160 [ 1665.430485] ? do_recvmmsg+0x6d0/0x6d0 [ 1665.431066] ? __lock_acquire+0x1657/0x5b00 [ 1665.431714] ___sys_sendmsg+0xc6/0x170 [ 1665.432288] ? sendmsg_copy_msghdr+0x160/0x160 [ 1665.432975] ? __lockdep_reset_lock+0x180/0x180 [ 1665.433665] ? lock_acquire+0x197/0x470 [ 1665.434262] ? find_held_lock+0x2c/0x110 [ 1665.434881] ? __might_fault+0xd3/0x180 [ 1665.435533] ? lock_downgrade+0x6d0/0x6d0 [ 1665.436232] ? io_schedule_timeout+0x140/0x140 [ 1665.436905] __sys_sendmmsg+0x195/0x470 [ 1665.437534] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1665.438261] ? lock_downgrade+0x6d0/0x6d0 [ 1665.439048] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1665.439804] ? wait_for_completion_io+0x270/0x270 [ 1665.440584] ? rcu_read_lock_any_held+0x75/0xa0 [ 1665.441386] ? vfs_write+0x354/0xa70 [ 1665.441946] ? fput_many+0x2f/0x1a0 [ 1665.442610] ? ksys_write+0x1a9/0x260 [ 1665.443172] ? __ia32_sys_read+0xb0/0xb0 [ 1665.443767] __x64_sys_sendmmsg+0x99/0x100 [ 1665.444422] do_syscall_64+0x33/0x40 [ 1665.445051] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1665.445950] RIP: 0033:0x7f29466f0b19 [ 1665.446514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.449558] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1665.450779] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1665.451809] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1665.452963] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.453974] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1665.455149] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1665.475378] audit: type=1400 audit(1707739889.724:157): avc: denied { tracepoint } for pid=10663 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:11:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x4000, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:29 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x806000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:11:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 34) 12:11:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0xf, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:29 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xd8, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd6096153f00a22c00200100000000ff0200000000000000000000000000068b00907800071000fffffffffffffffe60c1903e90f727f166b0a13c045729ab6358f0fcb3012539051f1e691b8db1f9fe4a0e81df9734af24450f482c86ef355f62477249dd361f21044890ff5736d99f0d83789e2ef178d4181a2e4d6176d4c501197699324a273d4a12ab18cd4473cb697ec0c4bb44fb2ebce2641386c1eb73891fd2a72f18dfc99d9124fa29fdd4816f5309e0ae7a9fb0df44f49cf4b89523e981fac8655aeb86825c68"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000081}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r0, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r0, 0xa) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x8848}, @val={0x2, 0x3, 0x3ff, 0x800, 0x4, 0x2}, @x25={0x3, 0x1, 0xfd, "58236c251e9621a5a05f9ca484f9661cdbeacae23c5c76c3573c351d33b7c1ca485acfd618f19e30083b1bde6025dd4747d332dc08d26b0aa6b759f61f20e7425eca80a9a020a29efe678f98231d5c9169def87a6d71fb2d1d16ef026d782b"}}, 0x70) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) write$tun(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xa0}, 0x40) gettid() 12:11:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r2, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xc0, 0x3, 0x7, 0xff, 0x0, 0x5, 0x80f, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2712, 0x2, @perf_bp={&(0x7f0000000040)}, 0x809, 0x800, 0x1, 0x8, 0x9, 0x0, 0xfffd, 0x0, 0x1, 0x0, 0x6}, r1, 0x1, 0xffffffffffffffff, 0xa) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x80000001) keyctl$invalidate(0x15, r3) keyctl$set_timeout(0xf, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0xc0, 0x88, 0x0, 0x7, 0x2200, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x3000, 0x2, 0x800, 0x2, 0x4, 0x69421149, 0x8, 0x0, 0x82, 0x0, 0x40}) setgid(0x0) keyctl$chown(0x4, r3, 0xee01, 0x0) keyctl$revoke(0x3, 0x0) pwrite64(r0, 0x0, 0x0, 0xd1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, 0x0) 12:11:29 executing program 5: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x5451, 0x0) chown(0x0, 0xee00, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='cmdline\x00') r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3f, 0x1f, 0x5, 0x6, 0x0, 0x2b563f46, 0xc0080, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x1e60834a}, 0x10000, 0xfff, 0xffffffff, 0x2, 0x101, 0x4, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x9, r1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000040)={0x0, 0x154, [0xffff, 0x4, 0x5, 0x0, 0x4, 0x6]}) preadv(r1, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/120, 0x78}], 0x1, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000001900), 0x401, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount$bind(&(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000700), 0xb60092, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x7, 0x1, 0x9, 0x0, 0x1c, 0x200, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x10001}, 0x4000, 0x9f3f, 0x9, 0x3, 0x126f, 0x0, 0x1, 0x0, 0x74e, 0x0, 0xa6}, 0x0, 0x7, r1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000880)={0x1, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)}) fcntl$getown(0xffffffffffffffff, 0x9) [ 1665.687808] FAULT_INJECTION: forcing a failure. [ 1665.687808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.689704] CPU: 0 PID: 10687 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1665.690729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1665.691947] Call Trace: [ 1665.692345] dump_stack+0x107/0x167 [ 1665.692897] should_fail.cold+0x5/0xa [ 1665.693476] _copy_from_user+0x2e/0x1b0 [ 1665.694069] __copy_msghdr_from_user+0x91/0x4b0 [ 1665.694774] ? __ia32_sys_shutdown+0x80/0x80 [ 1665.695412] ? udp_v6_push_pending_frames+0x360/0x360 [ 1665.696177] ? inet6_sendmsg+0xbd/0x140 [ 1665.696772] ? inet6_compat_ioctl+0x320/0x320 [ 1665.697445] ? __sock_sendmsg+0x55/0x190 [ 1665.698052] sendmsg_copy_msghdr+0xa1/0x160 [ 1665.698695] ? do_recvmmsg+0x6d0/0x6d0 [ 1665.699261] ? __lock_acquire+0x1657/0x5b00 [ 1665.699894] ___sys_sendmsg+0xc6/0x170 [ 1665.700457] ? sendmsg_copy_msghdr+0x160/0x160 [ 1665.701116] ? __lockdep_reset_lock+0x180/0x180 [ 1665.701801] ? lock_acquire+0x197/0x470 [ 1665.702395] ? find_held_lock+0x2c/0x110 [ 1665.702996] ? __might_fault+0xd3/0x180 [ 1665.703565] ? lock_downgrade+0x6d0/0x6d0 [ 1665.704172] ? io_schedule_timeout+0x140/0x140 [ 1665.704846] __sys_sendmmsg+0x195/0x470 [ 1665.705429] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1665.706082] ? lock_downgrade+0x6d0/0x6d0 [ 1665.706700] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1665.707384] ? wait_for_completion_io+0x270/0x270 [ 1665.708086] ? rcu_read_lock_any_held+0x75/0xa0 [ 1665.708763] ? vfs_write+0x354/0xa70 [ 1665.709312] ? fput_many+0x2f/0x1a0 [ 1665.709831] ? ksys_write+0x1a9/0x260 [ 1665.710378] ? __ia32_sys_read+0xb0/0xb0 [ 1665.710971] __x64_sys_sendmmsg+0x99/0x100 [ 1665.711594] do_syscall_64+0x33/0x40 [ 1665.712122] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1665.712846] RIP: 0033:0x7f29466f0b19 [ 1665.713371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.716023] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1665.717089] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1665.718117] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1665.719146] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.720147] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1665.721141] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:11:29 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xe00000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:11:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x6000, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 35) 12:11:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:45 executing program 5: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000940)=""/149, 0x95}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) mknodat$loop(r1, &(0x7f0000000240)='./mnt\x00', 0x0, 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) r3 = socket$inet6(0xa, 0x6, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r3}}, './mnt\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000b00)=""/231, 0xe7}], 0x2, 0xcae, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r5, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {0x0}], 0x2, 0x5545, 0x0) renameat(r1, &(0x7f0000000000)='./mnt\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00') 12:11:45 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000003700)={0x0, 0x989680}) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) io_submit(0x0, 0x3, &(0x7f00000004c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xe5, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0xaca5, r2, &(0x7f0000000380)="0bfa9f2fb3d81cd2b2fb3b61729abe2a5aa4d4244633c02996be4779b83cca84bf6da650f9c19e731b31202d2471d75d8704dc8df090a94f83b2482c91252125427a58e9d69823f4ff829f01f1810034ae52a5e94794bb19c714f80f6079fb986bb6de86a0da9aec6ea5fe6a77e973706a087bb8214e19aa08b07425ca5e4cc08110746b95ed3a871b60f6f723d90c240395203d34d55e0c52c500372f719afd1f659cf8442f5d00eee70e933a1352059b2739c68f49a27ee9a9133a4e371d2a42fc52cd4ddf07f8b2cabe199f9d96be6a390a7094640b0a597440864e50acb962a91e6001e3bd2127f6776c389f18e1af5911365a", 0xf5, 0x8}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0xfff7, 0xffffffffffffffff, &(0x7f0000000300)="4d479916ca45e0175c079ac2cccf48447ca2a1754e861b78e927d6f5fa9b9e36cfb96f59da", 0x25, 0xffffffffffffffff, 0x0, 0x1}]) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0) r3 = syz_io_uring_complete(0x0) dup(r3) r4 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f9, [0x0, 0xc8a2, 0x0, 0x8000, 0x101, 0x4]}) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r7 = accept$unix(r5, 0x0, &(0x7f0000000500)) recvmmsg(r7, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f00000006c0)=""/47, 0x2f}, {&(0x7f0000000700)=""/31, 0x1f}], 0x4, &(0x7f0000000780)=""/57, 0x39}, 0xe93}, {{&(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000940)=""/141, 0x8d}], 0x2}, 0x3}, {{&(0x7f0000000a40)=@ethernet, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/73, 0x49}], 0x1, &(0x7f0000000b80)=""/191, 0xbf}, 0x5}, {{&(0x7f0000000c40)=@llc, 0x80, &(0x7f0000002140)=[{&(0x7f0000000cc0)=""/189, 0xbd}, {&(0x7f0000000d80)=""/253, 0xfd}, {&(0x7f0000000e80)=""/50, 0x32}, {&(0x7f0000000ec0)=""/192, 0xc0}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/157, 0x9d}, {&(0x7f0000002040)=""/200, 0xc8}], 0x7, &(0x7f00000021c0)=""/40, 0x28}, 0x7}, {{&(0x7f0000002200)=@sco, 0x80, &(0x7f0000002680)=[{&(0x7f0000002280)=""/121, 0x79}, {&(0x7f0000002300)=""/126, 0x7e}, {&(0x7f0000002380)=""/111, 0x6f}, {&(0x7f0000002400)=""/195, 0xc3}, {&(0x7f0000002500)=""/155, 0x9b}, {&(0x7f00000025c0)=""/6, 0x6}, {&(0x7f0000002600)=""/128, 0x80}], 0x7, &(0x7f0000002700)=""/87, 0x57}, 0x29b}, {{&(0x7f0000002780)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002800)=""/162, 0xa2}, {&(0x7f00000028c0)=""/179, 0xb3}, {&(0x7f0000002980)=""/112, 0x70}, {&(0x7f0000002a00)=""/41, 0x29}, {&(0x7f0000002a40)=""/241, 0xf1}, {&(0x7f0000002b40)=""/168, 0xa8}, {&(0x7f0000002c00)=""/120, 0x78}, {&(0x7f0000002c80)=""/133, 0x85}], 0x8, &(0x7f0000002dc0)=""/138, 0x8a}, 0x2}], 0x6, 0x20, &(0x7f0000003000)={0x0, 0x3938700}) dup2(0xffffffffffffffff, r6) mkdirat(r4, &(0x7f0000000000)='./file1\x00', 0x0) 12:11:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x13, r4, 0x0) r6 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0) syz_io_uring_setup(0x2f2d, &(0x7f0000000600)={0x0, 0x8aae, 0x8, 0x1, 0x216, 0x0, r6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)=0x0) syz_io_uring_submit(r7, r9, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/49, 0x31}], 0x1, &(0x7f00000004c0)=""/177, 0xb1}, 0x0, 0x0, 0x0, {0x1}}, 0x5) syz_io_uring_submit(r1, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2={0x1f, 0x1ff, @none, 0x2c}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0}, {0x0}], 0x3}, 0x0, 0x4008000}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000880), 0x1, 0x0, 0x1, {0x0, r10}}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r11, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_dev$loop(&(0x7f0000000040), 0x200000000, 0x100) preadv(r12, &(0x7f0000000280)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000500)=""/74, 0x4a}], 0x4, 0x7, 0x5) 12:11:45 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x1100000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:11:45 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x8, 0x8, 0x2) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000c, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, r0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, r0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000040)=0x3, 0x2, 0x1) 12:11:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0xffff, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1681.298257] FAULT_INJECTION: forcing a failure. [ 1681.298257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1681.300759] CPU: 1 PID: 10714 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1681.302005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1681.303421] Call Trace: [ 1681.303882] dump_stack+0x107/0x167 [ 1681.304521] should_fail.cold+0x5/0xa [ 1681.305184] ? __sanitizer_cov_trace_pc+0x52/0x60 [ 1681.306021] _copy_from_user+0x2e/0x1b0 [ 1681.306726] __copy_msghdr_from_user+0x91/0x4b0 [ 1681.307532] ? __ia32_sys_shutdown+0x80/0x80 [ 1681.308316] ? udp_v6_push_pending_frames+0x360/0x360 [ 1681.309216] ? inet6_sendmsg+0xbd/0x140 [ 1681.309910] ? inet6_compat_ioctl+0x320/0x320 [ 1681.310711] ? __sock_sendmsg+0x55/0x190 [ 1681.311451] sendmsg_copy_msghdr+0xa1/0x160 [ 1681.312197] ? do_recvmmsg+0x6d0/0x6d0 [ 1681.312887] ? __lock_acquire+0x1657/0x5b00 [ 1681.313653] ___sys_sendmsg+0xc6/0x170 [ 1681.314339] ? sendmsg_copy_msghdr+0x160/0x160 [ 1681.315134] ? __lockdep_reset_lock+0x180/0x180 [ 1681.315871] ? lock_acquire+0x197/0x470 [ 1681.316492] ? find_held_lock+0x2c/0x110 [ 1681.317126] ? __might_fault+0xd3/0x180 [ 1681.317753] ? lock_downgrade+0x6d0/0x6d0 [ 1681.318395] ? io_schedule_timeout+0x140/0x140 [ 1681.319140] __sys_sendmmsg+0x195/0x470 [ 1681.319762] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1681.320424] ? lock_downgrade+0x6d0/0x6d0 [ 1681.321099] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1681.321861] ? wait_for_completion_io+0x270/0x270 [ 1681.322611] ? rcu_read_lock_any_held+0x75/0xa0 [ 1681.323333] ? vfs_write+0x354/0xa70 [ 1681.323914] ? fput_many+0x2f/0x1a0 [ 1681.324485] ? ksys_write+0x1a9/0x260 [ 1681.325067] ? __ia32_sys_read+0xb0/0xb0 [ 1681.325718] __x64_sys_sendmmsg+0x99/0x100 [ 1681.326370] do_syscall_64+0x33/0x40 [ 1681.326960] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1681.327759] RIP: 0033:0x7f29466f0b19 [ 1681.328328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1681.331187] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1681.332378] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1681.333488] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1681.334612] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1681.335729] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1681.336844] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1681.351791] audit: type=1400 audit(1707739905.601:158): avc: denied { create } for pid=10718 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 12:11:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x2, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1681.418154] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:11:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 36) 12:11:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 12:11:45 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x4305000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:11:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1681.580242] FAULT_INJECTION: forcing a failure. [ 1681.580242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1681.581895] CPU: 0 PID: 10752 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1681.582815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1681.583910] Call Trace: [ 1681.584275] dump_stack+0x107/0x167 [ 1681.584766] should_fail.cold+0x5/0xa [ 1681.585283] _copy_from_user+0x2e/0x1b0 [ 1681.585819] __copy_msghdr_from_user+0x91/0x4b0 [ 1681.586440] ? __ia32_sys_shutdown+0x80/0x80 [ 1681.587038] ? udp_v6_push_pending_frames+0x360/0x360 [ 1681.587725] ? inet6_sendmsg+0xbd/0x140 [ 1681.588259] ? inet6_compat_ioctl+0x320/0x320 [ 1681.588846] ? __sock_sendmsg+0x55/0x190 [ 1681.589384] sendmsg_copy_msghdr+0xa1/0x160 [ 1681.589945] ? do_recvmmsg+0x6d0/0x6d0 [ 1681.590460] ? __lock_acquire+0x1657/0x5b00 [ 1681.591042] ___sys_sendmsg+0xc6/0x170 [ 1681.591555] ? sendmsg_copy_msghdr+0x160/0x160 [ 1681.592153] ? __lockdep_reset_lock+0x180/0x180 [ 1681.592769] ? lock_acquire+0x197/0x470 [ 1681.593298] ? find_held_lock+0x2c/0x110 [ 1681.593840] ? __might_fault+0xd3/0x180 [ 1681.594363] ? lock_downgrade+0x6d0/0x6d0 [ 1681.594933] __sys_sendmmsg+0x195/0x470 [ 1681.595458] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1681.596023] ? lock_downgrade+0x6d0/0x6d0 [ 1681.596587] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1681.597216] ? vfs_write+0x871/0xa70 [ 1681.597704] ? wait_for_completion_io+0x270/0x270 [ 1681.598338] ? rcu_read_lock_any_held+0x75/0xa0 [ 1681.598952] ? vfs_write+0x354/0xa70 [ 1681.599445] ? fput_many+0x2f/0x1a0 [ 1681.599923] ? ksys_write+0x1a9/0x260 [ 1681.600419] ? __ia32_sys_read+0xb0/0xb0 [ 1681.600962] __x64_sys_sendmmsg+0x99/0x100 [ 1681.601519] do_syscall_64+0x33/0x40 [ 1681.602006] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1681.602698] RIP: 0033:0x7f29466f0b19 [ 1681.603194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1681.605561] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1681.605578] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1681.605587] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1681.605595] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1681.605603] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 12:11:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x3, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1681.605623] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:11:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x80, 0x1a1480) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x0, 0xffffffa5}) 12:11:45 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f000001c9c0)=ANY=[@ANYBLOB="e208000000000000fbffffffffffffff00000000000000000000000000000000357600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001477692fc17307d864da2376f223000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026816d21313913c59aa4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006fa96bb90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f613165ed5ff92f129112a29f48f63472449aa16f23721dea31bda6befbb0a779792ae6425c44b1287d8cc7a03a52fba687fefd791058d6ec7a33ac658a29c8fd5031701557f5e6b987c696e04b504696802aacfd913023dd7d82b19f5e8eac6ec9f1e97452a0362b66caf44b696a580172a99e2891f72410a0056a876764ece37e8b3f091de3942cf279421ccb5f8957a937512393c29cbfc4642c8fdd1be2c79277611d55e6b543d2f880a7196107365db0addf0f4e650988a5059031b"]) r1 = socket$inet(0x2, 0xb, 0x7) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r2}, 0x18, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x18d82, 0x0) clone3(&(0x7f00000004c0)={0x230003c00, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x31}, &(0x7f0000000200)=""/5, 0x5, &(0x7f0000000300)=""/237, 0x0, 0x0, {r3}}, 0x58) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0x6, 0x0, 0xfffffffffffff311, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x18e8, 0x3, 0x14d1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, r4, 0xffffdfffffffffff, r0, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1e02, 0x0) r6 = accept$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)="f2079a", 0x3, r6}, 0x68) ioctl$CDROMRESET(r5, 0x5329) 12:11:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001b40)='./file1\x00', &(0x7f00000018c0)={0x12000, 0x116, 0x8}, 0x18) readv(r2, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/203, 0xcb}, {&(0x7f0000001a00)=""/18, 0x12}, {&(0x7f0000001a40)=""/220, 0xdc}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/30, 0x1e}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/143, 0x8f}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x8) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="e8", 0x1}], 0x1) fchownat(r2, &(0x7f0000000080)='./file0\x00', 0xee00, 0xee01, 0x800) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x6, 0x2, &(0x7f0000001780)=[{0x0}, {&(0x7f0000001700)="330403ed91ab90ee957eec229442405676ab6b8c1ba895aaef11194300671fce04c9bfda882ea38b8ce3aabe4b94369747df8cacfb52f7a2dce259a53bef5799c96b356998ecb5f1d3944af0f99a09", 0x4f, 0x5}], 0x1000, &(0x7f0000001800)=ANY=[@ANYBLOB]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000003, 0x12, r3, 0x0) r4 = getpid() pidfd_open(r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r5, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) perf_event_open(0x0, r4, 0xffffffffffffffff, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x3f}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0x2, 0x6, 0x8, 0x0, 0x0, 0x1340, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xec144e22, 0x1, @perf_config_ext={0x200, 0xc}, 0x10000, 0x8a7, 0x4, 0x4, 0x0, 0x100, 0x1f, 0x0, 0x8}, r4, 0xb, r6, 0x1) 12:11:45 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000d00)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "961517", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}}}}, 0x0) syz_emit_ethernet(0xea, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="74987209675a", @void, {@mpls_mc={0x8848, {[{0x1000}, {0x7}, {0x4b, 0x0, 0x1}, {0x3}, {0xfe673, 0x0, 0x1}, {0xffff9, 0x0, 0x1}], @generic="a31424a9d7ab1335f9b3dea610a89f942d69c881cdb7835f53a4a36a731b30f880cac9b0749e73e667676d505a43c2d74806b4e8cfedd56484324451a0f09cf906f87a96008421aff6425b37b58fd84047067e68b26a73034a8c21c94adb78cdb4071235f0e2f6fa2d6b67a30e94726dda290431f3a99592bc2644b298c52c70b38a2f636a0d4c990b714c3441834b8a83832df74d718d6f64b2ef3b0715510d2a960799dc1f7dae04cac8445efdb860f1717da4deec34f480033fdbc177431986d5b98a"}}}}, &(0x7f0000000100)={0x0, 0x2, [0x7c3, 0xdd2, 0x774, 0x260]}) r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0xffff, 0x400000) write$tun(r0, &(0x7f0000000340)={@void, @val={0x1, 0x4, 0xa2d, 0x9, 0x100, 0x3ff}, @llc={@llc={0x4e, 0x2, "c4b4", "6996713049591bae0ffa18e6d9239a46fdeb7826183e1f04853539c4bc799d93f3fa37f732b71be319d27dce2c1cbd7cb4a2a982a0a99e420f89caa6148b378fe82c2abf4e2ef21ef8a8fb824b93cb25d4155beffe61cbef30ea0af0d75f9c8fabafaeb88ff604"}}}, 0x75) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) write$tun(r0, &(0x7f0000000280)={@void, @val={0x2, 0x80, 0x5, 0x5, 0x7f, 0x2}, @eth={@local, @local, @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x4}}, {@llc_tr={0x11, {@snap={0x0, 0xab, 'i', "e9bcb7", 0xdada, "03c017d6bdd379f7e259626f248c1e704928cd64c065c1040d5bc45f1378dd169d86380be63657210188e1bf567fce5400d5cdac1af3de536b2d616caa80b939ce2f21a918dfb7b1f32f81276f65bad188650b6391e649b6dab39736b97cf72ca9e02fedae3aa0af7c2bc96ec1ec87d4783cf0ea9b4395cbee727d59c317ba74d405"}}}}}}, 0xaa) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @val={0x2, 0x4, 0x7, 0x1bc6, 0xfff, 0x6}, @x25={0x3, 0x9c, 0xfb, "179528f985373baae126cc130943d1a1d1652869a777701ea401c6a21fdc6e3e0664cb33219aa0652e2bdcae2b784c24b19511277f830fce7f16c2838b7fb71242ac0f2a3188a0b602b501ccc059fed17cc536cc367ff1e9dfcb6fa06b6e7a06cc96ae318d80bd07dc5caca805dacc11656fc10bbd8a6df976abcf7488d427956d2a9e868170784129307800ea277da7eb6f1153b347fd68ff1dbd611921c61619d6210d9bbe335785a0e948ef87c7f7f0f3e598e89384e6242f91a16ed8"}}, 0xcb) 12:11:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x60, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:11:45 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x6000000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:11:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 37) 12:12:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1) 12:12:00 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x6558000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:12:00 executing program 1: io_uring_enter(0xffffffffffffffff, 0x2d87, 0xf338, 0x3, &(0x7f00000000c0)={[0xfffffffffffffffe]}, 0x8) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) pread64(0xffffffffffffffff, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) listen(0xffffffffffffffff, 0x3) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x2c, 0x1d, 0xc21, 0x0, 0x25dfdbff, {0x4, 0x0, 0x2}, [@nested={0x18, 0x11, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0) 12:12:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x300, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x10, &(0x7f0000000340)=ANY=[]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000400)='./file0\x00') unlinkat(r0, &(0x7f0000000000)='./file1/file0\x00', 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080), 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x81}) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) mknodat$null(r0, &(0x7f0000000040)='./file1\x00', 0x8000, 0x103) chdir(&(0x7f0000000480)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000540)=ANY=[@ANYBLOB="00fb9e0440a645f8ae4dcd2a30553feca0e4d6c1fad4021ba629518b173ec21d266e8df44d8f5667de620c751aeeeb5271ea3e32d1d83dbc538a7d7d57fd5f160b6c7f77c4229e209d3b6f24746383d208f23efb4df1cc0d7df7521cfe53d9d9539a0b879c16e4c55224ab71add9a5970673b5bc7738225566897766347ba88b119eeca92976e854ecac6355629b75fb714e045269f3138e5d9e44012de902f4b373fda5f8"], 0x9e, 0x6) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x5, 0xcf}) 12:12:00 executing program 5: getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x67}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x4) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x2000}}, './file0\x00'}) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000380)=0x5) r5 = syz_open_pts(r0, 0x64100) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f00000003c0)) r6 = dup2(0xffffffffffffffff, r0) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) readv(r6, &(0x7f00000015c0)=[{&(0x7f0000000440)=""/111, 0x6f}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/212, 0xd4}], 0x3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000016c0)={0x0, 0x0}, &(0x7f0000001700)=0xc) syz_mount_image$ext4(&(0x7f0000001600)='ext4\x00', &(0x7f0000001640)='./file0\x00', 0x3f, 0x0, &(0x7f0000001680), 0x2000030, &(0x7f0000001740)={[{@grpjquota}, {@user_xattr}], [{@smackfshat={'smackfshat', 0x3d, '{t}\'&'}}, {@fowner_eq}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x64, 0x62, 0x31, 0x35, 0x63, 0x32, 0x36], 0x2d, [0x35, 0x37, 0x36, 0x37], 0x2d, [0x63, 0x38, 0x63, 0x38], 0x2d, [0x38, 0x39, 0x65, 0x30], 0x2d, [0x30, 0x62, 0x39, 0x61, 0x33, 0x35, 0x31, 0x32]}}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r8}}]}) mount(&(0x7f0000001800)=@md0, &(0x7f0000001840)='./file0\x00', &(0x7f0000001880)='hpfs\x00', 0x901024, &(0x7f00000018c0)='smackfshat') ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001900)={{0x1, 0x1, 0x18, r7, {0x6, 0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000001b00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001980)={0x114, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x50}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xb8, 0xac, "7abc06a43087b91f17ddf4fd7f789207dab8548cac58e84ca76408a53073894a99c7e054b61f8a41139fdeaf206fcb5bc1a5b10ae33b6ea6c0ca87b71eaf46d851008c041ffb2becb2a03d431686b1aaad902f39ccc274896740aa582c8a95194a80406c62df7d6ff7f966c4b0df2162a6f5d182c5191c6b1104ca156e29ac46429b886f407a100960f1ca5ca0b97fb42288b32a43a89e9b35177a8200e40ebb42d5c7e8657b627bfc666dce1562f30d83f5124d"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6c6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x6c}, {0x1b, 0x1}, {0x7, 0x1}, {0xb, 0x1}, {0x1}, {0x18, 0x1}, {0x1b, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4ef}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000082}, 0x40) [ 1696.411490] FAULT_INJECTION: forcing a failure. [ 1696.411490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1696.413559] CPU: 0 PID: 10802 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1696.414737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.416139] Call Trace: [ 1696.416595] dump_stack+0x107/0x167 [ 1696.417224] should_fail.cold+0x5/0xa [ 1696.417885] _copy_from_user+0x2e/0x1b0 [ 1696.418555] __copy_msghdr_from_user+0x91/0x4b0 [ 1696.419350] ? __ia32_sys_shutdown+0x80/0x80 [ 1696.420107] ? udp_v6_push_pending_frames+0x360/0x360 [ 1696.420989] ? inet6_sendmsg+0xbd/0x140 [ 1696.421676] ? inet6_compat_ioctl+0x320/0x320 [ 1696.422426] ? __sock_sendmsg+0x55/0x190 [ 1696.423131] sendmsg_copy_msghdr+0xa1/0x160 [ 1696.423859] ? do_recvmmsg+0x6d0/0x6d0 [ 1696.424534] ? __lock_acquire+0x1657/0x5b00 [ 1696.425286] ___sys_sendmsg+0xc6/0x170 [ 1696.425957] ? sendmsg_copy_msghdr+0x160/0x160 [ 1696.426759] ? vmacache_find+0x55/0x2a0 [ 1696.427448] ? __lockdep_reset_lock+0x180/0x180 [ 1696.428240] ? lock_acquire+0x197/0x470 [ 1696.428913] ? find_held_lock+0x2c/0x110 [ 1696.429598] ? __might_fault+0xd3/0x180 [ 1696.430268] ? lock_downgrade+0x6d0/0x6d0 [ 1696.430979] ? asm_exc_page_fault+0x1e/0x30 12:12:00 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x8035000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1696.431870] __sys_sendmmsg+0x195/0x470 [ 1696.432505] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1696.433220] ? lock_downgrade+0x6d0/0x6d0 [ 1696.433916] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.434721] ? wait_for_completion_io+0x270/0x270 [ 1696.435531] ? rcu_read_lock_any_held+0x75/0xa0 [ 1696.436307] ? vfs_write+0x354/0xa70 [ 1696.436933] ? fput_many+0x2f/0x1a0 [ 1696.437520] ? ksys_write+0x1a9/0x260 [ 1696.438269] ? __ia32_sys_read+0xb0/0xb0 [ 1696.439149] __x64_sys_sendmmsg+0x99/0x100 [ 1696.439894] do_syscall_64+0x33/0x40 [ 1696.440518] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1696.441371] RIP: 0033:0x7f29466f0b19 [ 1696.441983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.444995] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1696.446255] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1696.447425] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 12:12:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:00 executing program 4: prctl$PR_SET_ENDIAN(0x14, 0x1) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4f4f, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x24004804}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x30, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x80000001) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e22, 0x52d, @remote, 0x6}, 0x1c) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0xe7e) readv(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f00000003c0)=""/121, 0x79}], 0x1) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)=0x4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') [ 1696.448570] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.449809] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1696.450988] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:12:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x2000, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:00 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x78b3}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/49, 0x31}], 0x1, &(0x7f00000004c0)=""/177, 0xb1}, 0x0, 0x0, 0x1, {0x1}}, 0x5) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x4b33, &(0x7f0000000040)={0x2, {0x4, 0x0, 0xefd1}}) r7 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r7, 0x8000000) syz_io_uring_setup(0x3a75, &(0x7f0000000500)={0x0, 0x1cb2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r10, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x3ff, 0x6, 0x0, {0x0, r11, r7}}, 0xfffff801) syz_io_uring_submit(r9, 0x0, &(0x7f0000000800)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13, 0x1, {0x0, r11}}, 0x1f) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r6, 0x2, 0x0, 0x2, 0x6, 0x1, {0x0, r11}}, 0x6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x480e, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x200018d, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000001300), &(0x7f0000001340)) 12:12:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 38) 12:12:00 executing program 5: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) [ 1696.636736] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem 12:12:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:00 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x8100000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1696.643741] EXT4-fs (loop5): Can't read superblock on 2nd try [ 1696.658294] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1696.667441] FAULT_INJECTION: forcing a failure. [ 1696.667441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1696.668575] CPU: 1 PID: 10843 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1696.669195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1696.669935] Call Trace: [ 1696.670177] dump_stack+0x107/0x167 [ 1696.670509] should_fail.cold+0x5/0xa [ 1696.670867] _copy_from_user+0x2e/0x1b0 [ 1696.671231] __copy_msghdr_from_user+0x91/0x4b0 [ 1696.671647] ? __ia32_sys_shutdown+0x80/0x80 [ 1696.672045] ? udp_v6_push_pending_frames+0x360/0x360 [ 1696.672505] ? inet6_sendmsg+0xbd/0x140 [ 1696.672868] ? inet6_compat_ioctl+0x320/0x320 [ 1696.673266] ? __sock_sendmsg+0x55/0x190 [ 1696.673639] sendmsg_copy_msghdr+0xa1/0x160 [ 1696.674024] ? do_recvmmsg+0x6d0/0x6d0 [ 1696.674375] ? __lock_acquire+0x1657/0x5b00 [ 1696.674777] ___sys_sendmsg+0xc6/0x170 [ 1696.675136] ? sendmsg_copy_msghdr+0x160/0x160 [ 1696.675545] ? __lockdep_reset_lock+0x180/0x180 [ 1696.675956] ? trace_hardirqs_on+0x5b/0x180 [ 1696.676347] ? lock_acquire+0x197/0x470 [ 1696.676701] ? find_held_lock+0x2c/0x110 [ 1696.677070] ? __might_fault+0xd3/0x180 [ 1696.677427] ? lock_downgrade+0x6d0/0x6d0 [ 1696.677800] ? io_schedule_timeout+0x140/0x140 [ 1696.678221] __sys_sendmmsg+0x195/0x470 [ 1696.678583] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1696.678975] ? lock_downgrade+0x6d0/0x6d0 [ 1696.679357] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1696.679789] ? wait_for_completion_io+0x270/0x270 [ 1696.680221] ? rcu_read_lock_any_held+0x75/0xa0 [ 1696.680640] ? vfs_write+0x354/0xa70 [ 1696.680977] ? fput_many+0x2f/0x1a0 [ 1696.681305] ? ksys_write+0x1a9/0x260 [ 1696.681645] ? __ia32_sys_read+0xb0/0xb0 [ 1696.682009] __x64_sys_sendmmsg+0x99/0x100 [ 1696.682391] do_syscall_64+0x33/0x40 [ 1696.682730] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1696.683184] RIP: 0033:0x7f29466f0b19 [ 1696.683517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1696.685140] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1696.685815] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1696.686445] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1696.687089] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1696.687720] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1696.688352] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:12:14 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x86ddffff00000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:12:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000340)=ANY=[@ANYBLOB="0000007fff000000"]) clock_gettime(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) ppoll(&(0x7f0000000200)=[{r0, 0x348}, {r0, 0x4000}, {r0, 0x2000}, {r5, 0x10}, {r6, 0xa}], 0x5, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={[0x81]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup2(r4, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000005c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd_index=0x4, 0x7, &(0x7f0000000400)=""/234, 0xea, 0x7}, 0x5) io_uring_setup(0x1a1c, &(0x7f0000000280)={0x0, 0x3445, 0x20, 0x0, 0xd5, 0x0, r0}) 12:12:14 executing program 6: r0 = creat(0x0, 0x0) open_by_handle_at(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0xfe, 0x0, 0x4307, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x47) getpgid(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) signalfd(r0, &(0x7f0000000180)={[0x267a1bf6]}, 0x8) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) 12:12:14 executing program 5: connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da41335f"}, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x1}, 0x480c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x30, 0xffffffffffffffff, 0x10000000) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r6}, 0x480f) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 12:12:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x4000, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:14 executing program 4: prctl$PR_SET_ENDIAN(0x14, 0x1) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4f4f, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x24004804}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x30, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0}, 0x80000001) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e22, 0x52d, @remote, 0x6}, 0x1c) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0xe7e) readv(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f00000003c0)=""/121, 0x79}], 0x1) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)=0x4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') 12:12:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 39) 12:12:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x0}, [@srh]}}}}}}}, 0x0) 12:12:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x2}, [@srh]}}}}}}}, 0x0) [ 1710.094484] FAULT_INJECTION: forcing a failure. [ 1710.094484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.097161] CPU: 0 PID: 10872 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1710.098314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1710.099698] Call Trace: [ 1710.100144] dump_stack+0x107/0x167 [ 1710.100758] should_fail.cold+0x5/0xa [ 1710.101403] _copy_from_user+0x2e/0x1b0 [ 1710.102074] __copy_msghdr_from_user+0x91/0x4b0 [ 1710.102858] ? __ia32_sys_shutdown+0x80/0x80 [ 1710.103591] ? udp_v6_push_pending_frames+0x360/0x360 [ 1710.104454] ? inet6_sendmsg+0xbd/0x140 [ 1710.105118] ? inet6_compat_ioctl+0x320/0x320 [ 1710.105864] ? __sock_sendmsg+0x55/0x190 [ 1710.106548] sendmsg_copy_msghdr+0xa1/0x160 [ 1710.107290] ? do_recvmmsg+0x6d0/0x6d0 [ 1710.107947] ? __lock_acquire+0x1657/0x5b00 [ 1710.108695] ___sys_sendmsg+0xc6/0x170 [ 1710.109349] ? sendmsg_copy_msghdr+0x160/0x160 [ 1710.110108] ? vmacache_find+0x55/0x2a0 [ 1710.110772] ? __lockdep_reset_lock+0x180/0x180 [ 1710.111558] ? lock_acquire+0x197/0x470 [ 1710.112215] ? find_held_lock+0x2c/0x110 [ 1710.112895] ? __might_fault+0xd3/0x180 [ 1710.113555] ? lock_downgrade+0x6d0/0x6d0 [ 1710.114241] ? asm_exc_page_fault+0x1e/0x30 [ 1710.114988] __sys_sendmmsg+0x195/0x470 [ 1710.115654] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1710.116368] ? lock_downgrade+0x6d0/0x6d0 [ 1710.117077] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1710.117881] ? wait_for_completion_io+0x270/0x270 [ 1710.118684] ? rcu_read_lock_any_held+0x75/0xa0 [ 1710.119460] ? vfs_write+0x354/0xa70 [ 1710.120085] ? fput_many+0x2f/0x1a0 [ 1710.120678] ? ksys_write+0x1a9/0x260 [ 1710.121294] ? __ia32_sys_read+0xb0/0xb0 [ 1710.121964] __x64_sys_sendmmsg+0x99/0x100 [ 1710.122644] do_syscall_64+0x33/0x40 [ 1710.123252] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1710.124069] RIP: 0033:0x7f29466f0b19 [ 1710.124670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1710.127607] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1710.128872] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1710.130049] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1710.131236] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1710.132415] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1710.133596] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:12:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x3}, [@srh]}}}}}}}, 0x0) 12:12:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x6000, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:14 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x8847000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:12:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0xffff, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='projid_map\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/147, 0x93}], 0x2, 0x8, 0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000000)={0x5ac, {0x11, 0x80, 0x5, 0x5, 0x100000001}}) r3 = fsmount(r0, 0x0, 0x4) ioctl$TCXONC(r3, 0x540a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') 12:12:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:14 executing program 6: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x7, 0x4, 0x0, 0x7ffc0000}]}) set_mempolicy(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x101, 0x95, 0x0, 0xe92}, {0x40, 0x1, 0x5, 0x1}]}) write(r0, &(0x7f00000001c0)="0e569a409af3a40c5b479f270b2917ea758dffa6eb399707329d40a93eff62c03f6158f0977a5e97aec8056eed0baa3d6c929c195d01ab1c9d17292569ab34e989c70a0bc31ec3ef131df74b4fba8b208a6acb82676b9deec01023a56e7af9", 0x5f) r2 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r2, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r2, 0xa) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x2, r3, 0x8}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x1, 0x5, 0x1, 0x44}, {0x3f, 0x1, 0x1f, 0x7}, {0x5, 0x8, 0x2, 0x81}, {0x3, 0x1, 0x9, 0x3}, {0x8000, 0x3, 0x1f, 0x333a}, {0x3, 0x2, 0x5, 0x8}, {0x2, 0x20, 0x1f, 0x2a}, {0x2, 0xf0, 0x80, 0x7}]}, 0x10) 12:12:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 40) 12:12:14 executing program 1: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="13c215c0b8868ffd247538af1dfdd072", 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x9, 0x4) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x9, 0x8, 0x5, 0x5, 0x0, 0xffffffff80000001, 0x10008, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x8d81, 0x1}, 0x1056d, 0x1cd5, 0x7fe, 0x0, 0x80000000, 0x3c3, 0x5, 0x0, 0x80, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf={0x99, &(0x7f0000000140)="d944eff75675131a8cf078cf382d0bb8a23acb6ce3bf5d76a8ead90ab8fb29bff0b3659b18686abcb715747ac9d2b722b6492894c7acde2cb5e9617311d188e47906edd44a5a4c18e0c5bb6097a5eb839188cc09448a29eb5587d55fe20c1de061da758ddd83e8ca083f717acccb9459984c9a6fbbbf1ebff0c58c77964be476ae8c6f7236ab60353704c4220e9b5d4fb1b83d613288667b54"}) r0 = syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x100000000, 0x8, &(0x7f00000007c0)=[{&(0x7f00000002c0)="5544c3fd27e3be3085690c6bb50f58597b91dcefd317c241a39ae1539b54954d8d1d5b791d9da9362b072df2c15f749c0bc4b5ccf62ff96a02deae0cc2d31026417ef27522bfa9d959be3fd58c27ede9d0e183ad4eb7c7b982eecdfea8ac82a3a310b8", 0x63, 0x1}, {&(0x7f0000000340)="0c8bc270ece2f85d6c8b8ac7400119ff76819fcc9c5e685a4cc4ab4245d4b08c3cbb00711e5c56d4ea89d8e94880fc7680cc8abba579afa45d5d03f7df625cfc2b61771f3615aefac622cccff14307e395c30dc7268302d37f2b6b179c750e69854f4d1d207a019c89b4fc5ebda4acdb69c4fd50276e32ffbfd60bb8bb3a4be473bdea396a83e66e363ec32aab80dd8c80e13acd1370a9fabaa62302eae44296315143e162d0501488a8f619a02ca456c1fe5fd34d58ca3baafec85444d2dad372164df3715d4cd77f85b7086736d9198fad78e1e2f543d39f43f4b04e9e698878476d3a1129d5ed1811a057f425f2baab5a0acddc6b03a9f3e2", 0xfa, 0x2}, {&(0x7f0000000440)="049625c66a7477ee5c1fa4135e0d9880fca8495d5a73fc7c09a323b0e59d46e9bac4b97b0841c15ac65e5b31bf4f680e6240f8ba4b10efaa8e55cbd9218d370c49d29c1f3f53f49454b3780bf9ee4d74fb9aa52aefb8e8c533068b2c67ecf1bc9f7c09f0e573b5381a43d482582c23dd001920d542304ac41e7ca83dea5a963dddd6cfd90ce839ec93206605d31b11a0d3558f25ee156e3b3f824d5496d56562e0c346ebf4d1846f4883a6eab5ed8107ac1e0e76bc699caff763b6375f1c69e33994abb7c40757ab1d3573b5790ade979425e851c00e0515e0b8", 0xda, 0x3f}, {&(0x7f0000000540)="38981bc48d2a6abf4bc7d4668c6cddb09d676d99eb40f45e87798efe266169622657fce098", 0x25, 0x3}, {&(0x7f0000000580)="f175592c735387", 0x7}, {&(0x7f00000005c0)="653b8b425c1ce6691e28c972389c8eb3c34b53ab8dd5e0bc8634367d8507348b7d8e3d9a892ee18a2c949cf9451d855c0f5b36b4f5553fc24f0c9aa941acbe", 0x3f, 0xfffffffffffffffe}, {&(0x7f0000000600)="234c247450fa468d466762735b6c1867583fbf79e35c88a932e569dfde72387c2c171ad49d08c4283961da62c7987c4989b04596ef8bffc962d0467217f28ba5d3e8db91070e74915b796a286fa7e9c9edc850afdb5f201cf81f73d155ca3e887758f351ab56215ae43b862ee089bb19eac3c62db7d5f0ae005e7d9b82ce8f6c372f4443d80b63", 0x87, 0x5}, {&(0x7f00000006c0)="0f95e293d66ab12d55a48d5d06b7cf4e4081ed7bf542e159958b2bd04ffc8535b6bbf193a6de601b3d7f1cd44a1e3e69cb89bf2b0654a91361ffb459f5e803233e122a3cbd6bbd22873af73b3c92c0e59ffeb5aa9f46d7d47a2d264629e947686699e433207686faa35babfaea5fcddabcbfb43a3d68b94e550bccad75f78080c9e1fa1fc92d1773ab2b2a8d501c3815e721a91a9a86d73e8e47f89af4cc20d62c848d1bc1a92a68e2e5b6716d243464b8bb9d7d459a4a6897f9b8af45420dbc1d7a5dbcad0f97933bdc7d4c360aa47998cf3da2006bf2b0e179481cfc73eb759f80b8c21c11cd53930bb57a796304b063", 0xf1, 0x8001}], 0xa0, &(0x7f0000000880)={[{}], [{@euid_gt={'euid>', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x32, 0x36, 0x61, 0x35, 0x38, 0x31, 0x32], 0x2d, [0x34, 0x62, 0x37, 0x34], 0x2d, [0x32, 0x61, 0x63, 0x61], 0x2d, [0x65, 0x39, 0x36, 0x30], 0x2d, [0x62, 0x32, 0x52, 0x62, 0x64, 0x62, 0x39, 0x38]}}}, {@pcr={'pcr', 0x3d, 0x14}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x36, 0x65, 0x31, 0x37, 0x31, 0x39, 0x3e8b7ac375a4a0], 0x2d, [0x37, 0x33, 0x34, 0x32], 0x2d, [0x30, 0xa, 0x38, 0x61], 0x2d, [0x66, 0x30, 0x38, 0x65], 0x2d, [0x35, 0x64, 0x61, 0x30, 0x66, 0x37, 0x64, 0x35]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{)@'}}, {@euid_lt}]}) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = open(&(0x7f0000000980)='./file1\x00', 0x101000, 0x30) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000a00)='net_cls.classid\x00', 0x2, 0x0) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e22, 0x7, @loopback, 0x101}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {r3}}, './file1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) flock(r5, 0x1) r6 = syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000b00)='./file1\x00', 0x5c40, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b40), 0x0, 0x8f}], 0x30048, &(0x7f0000000bc0)={[{@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'utf8'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x63, 0x53, 0x35, 0x65, 0x36, 0x66, 0x39], 0x2d, [0x65, 0x0, 0x39], 0x2d, [0x31, 0x37, 0x61, 0x35], 0x2d, [0x34, 0x5b, 0x37, 0x66], 0x2d, [0x34, 0x36, 0x65, 0x65, 0x31, 0x63, 0x64, 0x61]}}}, {@dont_appraise}, {@seclabel}, {@uid_lt={'uid<', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'euid>'}}, {@dont_appraise}, {@fowner_lt={'fowner<', 0xee01}}]}) dup2(r4, r6) mount$9p_xen(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x400, &(0x7f0000000d80)={'trans=xen,', {[{@dfltgid}, {@loose}, {@afid={'afid', 0x3d, 0x9}}, {@access_any}, {@cache_loose}], [{@obj_user={'obj_user', 0x3d, 'uni_xlate=0'}}]}}) sendmmsg$inet6(r2, &(0x7f0000000f80)=[{{&(0x7f0000000e00)={0xa, 0x4e23, 0x691, @private0, 0x81}, 0x1c, &(0x7f0000000e40), 0x0, &(0x7f0000000e80)=[@rthdr={{0x38, 0x29, 0x39, {0x5c, 0x4, 0x0, 0x8, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}}}, @rthdr={{0x48, 0x29, 0x39, {0x88, 0x6, 0x2, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x2f, 0x7, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x28, {0x0, 0x8, 0xe0, 0xfffb, [0x7, 0x1, 0x5, 0x100000000000000]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xf876}}], 0xe8}}], 0x1, 0x18005) syz_mount_image$nfs4(&(0x7f0000000fc0), &(0x7f0000001000)='./file0\x00', 0x200, 0x7, &(0x7f0000001500)=[{&(0x7f0000001040)="c2b03f8698bb83a57a43ebd50be8e674cbf7da95275568afbba21a3e88c82476d6e1d7b7bc9046c7e9136efacd2806d6d2d98c5b612e20cf3dd3e1be3acc2d06ccba04e3bcb4244caf551e4e08aef15622deb4b4ef39d344b4daedcef59256f51933f1f02a05eb6dae25c98f71ee134850ce8b84ad15e031d27848a6d9905304b32b38de", 0x84}, {&(0x7f0000001100)="a3e5a1e4905253e9f00024829afd7f53779c56044f49fc842cb6715eee12c0e2de1b2429692a7dd44346392338ef46b37097a2cf8770564e06b2d9e31aebde8f4485d6cd4c77bb95475b99a036aefafbfffacfeccbe09d9fc0202e13864bdb7e43ba8e1c8e00c4db01db076d8832b8fc5f96fbf874a981ad69d1a92ea02aa8501c15b780b094049a0d83cf888d9c72d7ad39fc0cf258a8d579bfa8303f2546b76ebf491c44041d8cebc7fad2fadb5a708ad5e3d17f27c46a2cf48aebb56694e0e85054d05cb9bbe490195fa195b333a08bbe0c289e139a72cf42df281c59c2342cfd347454d95614f641e9c511fa41a2d63e8a4334f6eae3", 0xf8, 0xaa}, {&(0x7f0000001200), 0x0, 0x7}, {&(0x7f0000001240)="bc3682f7998adfc8418a757dc522c7a64fb7742015b4fc26b82112b84e1b60f9f840af324c7eb8c77ee0a28c852ab9516bb5ce11aa1bc3b21b39f1436e9cdd5f60421e1ec915b87ad874cd164ff937", 0x4f, 0xfffffffffffffffe}, {&(0x7f00000012c0)="2212a2b968a1dd5749c5107b44dbc1cc1719617935a43fec48c475c078978a91a81f47c3ee8e9fb3bd540e11e1fb8bbaf28f7ea34c363d5f1794c0e02cf1b639769015f070db8b4bb2ce869ce98c043c519c1e8127d991a571d62b28b4bec61f5b4c83d79da903bac26c6bea22cbc00d954b6c13050fe35277683593a38c6abf1b8600890402343befdb7efd81425be28b59a3d3164c0b96e65bbd2bfd330cc869a8ac1063d08f571903c5cc7cd2", 0xae, 0x2e}, {&(0x7f0000001380)="a1f57408e5d815e8928eb998ac53317a12017a946b4e0ee3aa8f7dae3b45a93e4665e465efd4fcdcefa7dac73070180ad8ce329c88475a51f4540620ec1c7b4d66dc0b0ab76ad3230e5c607959", 0x4d, 0x8}, {&(0x7f0000001400)="f32ce996e126be68a608b19e6284ff376e69579ca3ab333d8ae36021132f8efd99f967de3d0240c1164b5ee5eeba6f2ef12bccda1bfe78654befc4f2d2a6732e6117dbecb238706002bc51782a0cd2fc9a233567837f0c2b3a10279d6da74dde98b0e776c37ef1477b4b472ab12494169a8b4d741129aa03edc39a147d60fb38be213fff416c55820c7b5cab0ab4af84af3da68812514aa3bf181a699881ae558f25d88e7c523f8c7d908b95fa830d8db081e3673f1528f13634452632310fd3a97b8c48891e4cc5c14b67ccece1435abc88a8d018d68db2228f1fff533da7ce2b01cf3d7fc5e5650b", 0xe9}], 0x201010, &(0x7f00000015c0)={[{'\\)'}, {'euid<'}, {}, {'dont_appraise'}, {'nonumtail=0'}, {'[!^/,%'}, {'/%$@'}]}) 12:12:14 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x8848000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1710.296519] FAULT_INJECTION: forcing a failure. [ 1710.296519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.297557] CPU: 1 PID: 10894 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1710.298134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1710.298836] Call Trace: [ 1710.299066] dump_stack+0x107/0x167 [ 1710.299380] should_fail.cold+0x5/0xa [ 1710.299707] _copy_from_user+0x2e/0x1b0 [ 1710.300048] __copy_msghdr_from_user+0x91/0x4b0 [ 1710.300439] ? __ia32_sys_shutdown+0x80/0x80 [ 1710.300798] ? udp_v6_push_pending_frames+0x360/0x360 [ 1710.301231] ? inet6_sendmsg+0xbd/0x140 [ 1710.301560] ? inet6_compat_ioctl+0x320/0x320 [ 1710.301928] ? __sock_sendmsg+0x55/0x190 [ 1710.302258] sendmsg_copy_msghdr+0xa1/0x160 [ 1710.302621] ? do_recvmmsg+0x6d0/0x6d0 [ 1710.302953] ? __lock_acquire+0x1657/0x5b00 [ 1710.303322] ___sys_sendmsg+0xc6/0x170 [ 1710.303641] ? sendmsg_copy_msghdr+0x160/0x160 [ 1710.304025] ? vmacache_find+0x55/0x2a0 [ 1710.304348] ? __lockdep_reset_lock+0x180/0x180 [ 1710.304742] ? lock_acquire+0x197/0x470 [ 1710.305063] ? find_held_lock+0x2c/0x110 [ 1710.305409] ? __might_fault+0xd3/0x180 [ 1710.305729] ? lock_downgrade+0x6d0/0x6d0 [ 1710.306078] ? asm_exc_page_fault+0x1e/0x30 [ 1710.306438] __sys_sendmmsg+0x195/0x470 [ 1710.306779] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1710.307135] ? lock_downgrade+0x6d0/0x6d0 [ 1710.307495] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1710.307897] ? wait_for_completion_io+0x270/0x270 [ 1710.308303] ? rcu_read_lock_any_held+0x75/0xa0 [ 1710.308690] ? vfs_write+0x354/0xa70 [ 1710.309008] ? fput_many+0x2f/0x1a0 [ 1710.309314] ? ksys_write+0x1a9/0x260 [ 1710.309633] ? __ia32_sys_read+0xb0/0xb0 [ 1710.309981] __x64_sys_sendmmsg+0x99/0x100 [ 1710.310336] do_syscall_64+0x33/0x40 [ 1710.310645] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1710.311080] RIP: 0033:0x7f29466f0b19 [ 1710.311392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1710.312894] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1710.313515] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1710.314099] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1710.314679] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1710.315264] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1710.315852] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1710.325702] audit: type=1326 audit(1707739934.575:159): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10895 comm="syz-executor.4" exe="/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21cb660b19 code=0x0 [ 1711.154931] audit: type=1326 audit(1707739935.404:160): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10895 comm="syz-executor.4" exe="/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21cb660b19 code=0x0 12:12:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:29 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3}, {0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) fcntl$dupfd(r0, 0x0, r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r3, 0x6) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x8, 0x4, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x5}, 0x40002, 0x0, 0x0, 0x4, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000080)) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) unshare(0x48020200) 12:12:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, &(0x7f0000000000)=0xba, 0x4) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000008", @ANYRES16=0x0, @ANYBLOB="040000000000000000003000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 12:12:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 41) 12:12:29 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x8864000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:12:29 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c5", 0x6}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10010, r3, 0x8000000) creat(&(0x7f0000000040)='./file0\x00', 0x21) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x3000) 12:12:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x6}, [@srh]}}}}}}}, 0x0) 12:12:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r3, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r3, 0xa) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x401, 0x8}}}}, [@NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x40, 0x5, 0x100, 0x1, 0x8, 0x1, 0x4cb5, 0x7fff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5fc}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x94b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x20040004) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="14000400766574ec255f746f5f626f6e640000000800050009"], 0x40}}, 0x0) [ 1725.529207] FAULT_INJECTION: forcing a failure. [ 1725.529207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.531469] CPU: 1 PID: 10931 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1725.532569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1725.533890] Call Trace: [ 1725.534308] dump_stack+0x107/0x167 [ 1725.534882] should_fail.cold+0x5/0xa [ 1725.535491] _copy_from_user+0x2e/0x1b0 [ 1725.536129] __copy_msghdr_from_user+0x91/0x4b0 [ 1725.536905] ? __ia32_sys_shutdown+0x80/0x80 [ 1725.537625] ? udp_v6_push_pending_frames+0x360/0x360 [ 1725.538464] ? inet6_sendmsg+0xbd/0x140 [ 1725.539119] ? inet6_compat_ioctl+0x320/0x320 [ 1725.539845] ? __sock_sendmsg+0x55/0x190 [ 1725.540513] sendmsg_copy_msghdr+0xa1/0x160 [ 1725.541212] ? do_recvmmsg+0x6d0/0x6d0 [ 1725.541851] ? __lock_acquire+0x1657/0x5b00 [ 1725.542565] ___sys_sendmsg+0xc6/0x170 [ 1725.543208] ? sendmsg_copy_msghdr+0x160/0x160 [ 1725.543967] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1725.544844] ? __lockdep_reset_lock+0x180/0x180 [ 1725.545606] ? lock_acquire+0x197/0x470 [ 1725.546268] ? find_held_lock+0x2c/0x110 [ 1725.546937] ? __might_fault+0xd3/0x180 [ 1725.547611] ? lock_downgrade+0x6d0/0x6d0 [ 1725.548305] ? io_schedule_timeout+0x140/0x140 [ 1725.549065] __sys_sendmmsg+0x195/0x470 [ 1725.549719] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1725.550422] ? lock_downgrade+0x6d0/0x6d0 [ 1725.551131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1725.551937] ? wait_for_completion_io+0x270/0x270 [ 1725.552743] ? rcu_read_lock_any_held+0x75/0xa0 [ 1725.553515] ? vfs_write+0x354/0xa70 [ 1725.554145] ? fput_many+0x2f/0x1a0 [ 1725.554738] ? ksys_write+0x1a9/0x260 [ 1725.555366] ? __ia32_sys_read+0xb0/0xb0 [ 1725.556037] __x64_sys_sendmmsg+0x99/0x100 [ 1725.556724] do_syscall_64+0x33/0x40 [ 1725.557327] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1725.558154] RIP: 0033:0x7f29466f0b19 [ 1725.558789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1725.561800] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1725.563069] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1725.564237] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1725.565410] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.566594] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1725.567787] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1725.603219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 12:12:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:29 executing program 6: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x9) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000040)) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100, 0x800}}, './file0\x00'}) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000240), 0x8e, 0x60e003) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000002c0)=0x3, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044080}, 0x20044850) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x20, 0x0, 0x11, @loopback, @mcast1, 0x40, 0x7800, 0x9, 0x1}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={&(0x7f0000000480), 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x21c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8f3e9e4c5faf91d9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf0d766f3a724df59}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x80}, 0x80) open_by_handle_at(r2, &(0x7f0000000880)=@ceph_nfs_confh={0x10, 0x2, {0x0, 0x7}}, 0x4d00) fsetxattr$security_ima(r1, &(0x7f00000008c0), &(0x7f0000000900)=@sha1={0x1, "a5cb0040055fb99b2fb2b4e817dc79ba3b99cf49"}, 0x15, 0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000980)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f0000000a80)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000ac0)={@private2, 0xa, r7}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c001) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x800) [ 1725.633296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 12:12:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 42) 12:12:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x8a80c, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x410, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2}) 12:12:44 executing program 6: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0xa000, &(0x7f0000001540)) 12:12:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c1823", 0x12}, {0x0}], 0x2}, 0x0, 0x4000000}, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='pids.max\x00', 0x2, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0xe4, 0x3ed, 0x800, 0x70bd2c, 0x25dfdbfe, "d896dbd30ece1bea73c55ef67204c699009e160cd51c8f52950ed78f7d528898a603cba6e9c5e583d557ef8c59184579d5d62b54c39ef53c11d139f5149787007b663ed52ec732baf3ef6697c2c59869c50667a67309242e1c9287ba89c99d6631063ad8f5d43b1385a91e6838a18ebd38935383bb737d6cb6b945e594e62f10d2c696ab0b29c03060a31d2c74966889bae29293f5757767bc34331b98ad5346198d9d14caa16c8edb3e585c0972b2036796be44f2bb2d8a8902146d485a4bcec1f132ac536358149fa292122c5dce9c0446", ["", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x6000, @fd=r5, 0x8, 0x8, 0x1, 0x0, 0x0, {0x1, r6}}, 0x101) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:12:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x2}, [@srh]}}}}}}}, 0x0) 12:12:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800000002, 0x100}, 0x82c, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmsg$unix(r2, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) fallocate(r2, 0x0, 0xffff, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = dup2(r5, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r6, 0x0, &(0x7f0000000240)=""/61, 0x3d}, 0x0) pipe(&(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x23d4}}, 0x100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) timerfd_create(0x5, 0x800) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x8001, 0x0, [0x4, 0x8, 0x400000000], &(0x7f0000000040)}) syz_open_dev$ttys(0xc, 0x2, 0x1) 12:12:44 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x88a8ffff00000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1740.411312] FAULT_INJECTION: forcing a failure. [ 1740.411312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.413383] CPU: 0 PID: 10955 Comm: syz-executor.0 Not tainted 5.10.209 #1 12:12:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1740.414539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.416031] Call Trace: [ 1740.416487] dump_stack+0x107/0x167 [ 1740.417118] should_fail.cold+0x5/0xa [ 1740.417778] _copy_from_user+0x2e/0x1b0 [ 1740.418465] __copy_msghdr_from_user+0x91/0x4b0 [ 1740.419246] ? __ia32_sys_shutdown+0x80/0x80 [ 1740.420000] ? udp_v6_push_pending_frames+0x360/0x360 [ 1740.420881] ? inet6_sendmsg+0xbd/0x140 [ 1740.421550] ? inet6_compat_ioctl+0x320/0x320 [ 1740.422310] ? __sock_sendmsg+0x55/0x190 [ 1740.422995] sendmsg_copy_msghdr+0xa1/0x160 [ 1740.423732] ? do_recvmmsg+0x6d0/0x6d0 [ 1740.424400] ? __lock_acquire+0x1657/0x5b00 [ 1740.425133] ___sys_sendmsg+0xc6/0x170 [ 1740.425803] ? sendmsg_copy_msghdr+0x160/0x160 [ 1740.426558] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1740.427489] ? __lockdep_reset_lock+0x180/0x180 [ 1740.428271] ? lock_acquire+0x197/0x470 [ 1740.428951] ? find_held_lock+0x2c/0x110 [ 1740.429631] ? __might_fault+0xd3/0x180 [ 1740.430312] ? lock_downgrade+0x6d0/0x6d0 [ 1740.430999] ? asm_exc_page_fault+0x1e/0x30 [ 1740.431759] __sys_sendmmsg+0x195/0x470 [ 1740.432445] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1740.433162] ? lock_downgrade+0x6d0/0x6d0 [ 1740.433893] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1740.434715] ? wait_for_completion_io+0x270/0x270 [ 1740.435523] ? rcu_read_lock_any_held+0x75/0xa0 [ 1740.436312] ? vfs_write+0x354/0xa70 [ 1740.436937] ? fput_many+0x2f/0x1a0 [ 1740.437556] ? ksys_write+0x1a9/0x260 [ 1740.438194] ? __ia32_sys_read+0xb0/0xb0 [ 1740.438896] __x64_sys_sendmmsg+0x99/0x100 [ 1740.439607] do_syscall_64+0x33/0x40 [ 1740.440242] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1740.441086] RIP: 0033:0x7f29466f0b19 [ 1740.441718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.444801] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1740.446083] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1740.447288] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1740.448481] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.449681] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1740.450882] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:12:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0xb657) syz_io_uring_complete(r1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 12:12:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:12:44 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x88caffff00000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:12:44 executing program 4: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f00000001c0)=""/10, 0xa}], 0x5, &(0x7f0000000280)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}}, {{&(0x7f0000000400), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000480)=""/154, 0x9a}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000640)=""/61, 0x3d}, {&(0x7f0000000680)=""/152, 0x98}, {&(0x7f0000000740)=""/59, 0x3b}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/146, 0x92}], 0x8}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/249, 0xf9}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/48, 0x30}, {&(0x7f0000000cc0)=""/187, 0xbb}, {&(0x7f0000000d80)=""/33, 0x21}], 0x6, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f80)=""/38, 0x26}, {&(0x7f0000000fc0)=""/132, 0x84}], 0x2, &(0x7f00000010c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000001200), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001280)=""/72, 0x48}, {&(0x7f0000001300)=""/178, 0xb2}], 0x2}}, {{&(0x7f0000001400), 0x6e, &(0x7f0000001540)=[{&(0x7f0000001480)=""/179, 0xb3}], 0x1, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f0000001780)=""/80, 0x50}, {&(0x7f0000001800)}, {&(0x7f0000001840)=""/17, 0x11}, {&(0x7f0000001880)=""/95, 0x5f}, {&(0x7f0000001900)=""/128, 0x80}, {&(0x7f0000001980)=""/132, 0x84}], 0x7, &(0x7f0000001ac0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/207, 0xcf}, {&(0x7f0000001c00)=""/119, 0x77}], 0x2}}], 0x8, 0x12120, &(0x7f0000001ec0)={0x77359400}) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001f00), 0x40c480, 0x0) fcntl$dupfd(r7, 0x406, r10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r8, 0x4040942c, &(0x7f0000001f40)={0x0, 0x5, [0x1, 0x5, 0x6, 0x10001, 0x1ff, 0x4]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000001fc0)={r1, 0x401, 0x3, 0xec}) io_submit(0x0, 0x1, &(0x7f0000002100)=[&(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000002000)="03fd7089d3d1173e6adc497c7f542447cd4bc0a0dceb98573d3ec1cd1ae975faec7552b64bef574680e81c8cbe2a54ae740a497b14109fd5b35ac1d39ed5ff6073d0cdc2ce8ee05a971b316f4856c19c8e0e5e79a42c47752ab8e57acc19aeef4e4e957c89596532d9e04423aa3cecd2a427fd888c542aab846036291bfad47fa0900b819c6e5979948296105c992213e6c05397885aeca499fa2dbb91c90ca8c45054399bdf18a910a6e22e1eda956d4f6df003", 0xb4, 0x1, 0x0, 0x2}]) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000002140)={0x8b, 0x1, 0x8001, 0x0, 0x4}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r5) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x44, r12, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x69}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x19}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x44}}, 0x20000050) bind$inet(r3, &(0x7f0000002300)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000002340)={0x2, 0x4e24, @private=0xa010100}, 0x10) recvmsg$unix(r0, &(0x7f0000003680)={&(0x7f0000002380), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000002400)=""/128, 0x80}, {&(0x7f0000002480)=""/132, 0x84}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/74, 0x4a}], 0x4, &(0x7f0000003600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x40) dup3(r4, r13, 0x80000) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000036c0)=0x100) fcntl$getown(r9, 0x9) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000003700)={0x6}, 0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r14, &(0x7f0000003740), 0x8, 0x0) 12:12:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x3}, [@srh]}}}}}}}, 0x0) 12:13:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x60}, [@srh]}}}}}}}, 0x0) 12:13:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x202400, 0x20) ftruncate(r0, 0xffff) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(0xffffffffffffffff, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x7c, @empty, 0x5}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000000)=0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r3 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r3, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r3, 0xa) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x3c, 0x0, "fb2d1b4387bd4c40e86697d153ce05abdfb754b60e79215593f4ba19ba091aac94aacb6fd08496be7646fc611c0861729215ae90581f2bf3dca630e543954adc8cc991946b64325cc0f7af44b9277267"}, 0xd8) 12:13:00 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 12:13:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:13:00 executing program 6: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r1, 0xa) openat(r1, &(0x7f0000000000)='./file1\x00', 0x802400, 0xa8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x188000d, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB="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", @ANYRES64=r0, @ANYRES64=r2]) 12:13:00 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x8906000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:13:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000640)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x66}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) 12:13:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 43) [ 1756.314151] FAULT_INJECTION: forcing a failure. [ 1756.314151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.315193] CPU: 1 PID: 11008 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1756.315758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1756.316434] Call Trace: [ 1756.316655] dump_stack+0x107/0x167 [ 1756.316955] should_fail.cold+0x5/0xa [ 1756.317279] _copy_from_user+0x2e/0x1b0 [ 1756.317618] __copy_msghdr_from_user+0x91/0x4b0 [ 1756.318010] ? __ia32_sys_shutdown+0x80/0x80 [ 1756.318375] ? udp_v6_push_pending_frames+0x360/0x360 [ 1756.318810] ? inet6_sendmsg+0xbd/0x140 [ 1756.319143] ? inet6_compat_ioctl+0x320/0x320 [ 1756.319522] ? __sock_sendmsg+0x55/0x190 [ 1756.319866] sendmsg_copy_msghdr+0xa1/0x160 [ 1756.320227] ? do_recvmmsg+0x6d0/0x6d0 [ 1756.320560] ? __lock_acquire+0x1657/0x5b00 [ 1756.320928] ___sys_sendmsg+0xc6/0x170 [ 1756.321253] ? sendmsg_copy_msghdr+0x160/0x160 [ 1756.321634] ? __lockdep_reset_lock+0x180/0x180 [ 1756.322027] ? lock_acquire+0x197/0x470 [ 1756.322357] ? find_held_lock+0x2c/0x110 [ 1756.322698] ? __might_fault+0xd3/0x180 [ 1756.323033] ? lock_downgrade+0x6d0/0x6d0 [ 1756.323379] ? io_schedule_timeout+0x140/0x140 [ 1756.323758] __sys_sendmmsg+0x195/0x470 [ 1756.324094] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1756.324446] ? lock_downgrade+0x6d0/0x6d0 [ 1756.324790] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1756.325195] ? wait_for_completion_io+0x270/0x270 [ 1756.325594] ? rcu_read_lock_any_held+0x75/0xa0 [ 1756.325976] ? vfs_write+0x354/0xa70 [ 1756.326285] ? fput_many+0x2f/0x1a0 [ 1756.326579] ? ksys_write+0x1a9/0x260 [ 1756.326891] ? __ia32_sys_read+0xb0/0xb0 [ 1756.327239] __x64_sys_sendmmsg+0x99/0x100 [ 1756.327597] do_syscall_64+0x33/0x40 [ 1756.327911] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1756.328338] RIP: 0033:0x7f29466f0b19 [ 1756.328649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1756.330166] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1756.330800] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1756.331395] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1756.331982] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.332573] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1756.333162] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:13:00 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) getsockopt$inet_pktinfo(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) shutdown(0xffffffffffffffff, 0x1) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r4}, 0x18, 0x0) kcmp(0x0, 0x0, 0x1, r0, r0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r0) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = accept4(r2, &(0x7f0000000200)=@nl=@proc, &(0x7f0000000280)=0x80, 0x0) open_by_handle_at(r6, &(0x7f00000002c0)=@reiserfs_3={0xc, 0x3, {0x9, 0x200, 0xff01}}, 0x400) 12:13:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x0}, [@srh]}}}}}}}, 0x0) 12:13:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0xff}, [@srh]}}}}}}}, 0x0) 12:13:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x2}, [@srh]}}}}}}}, 0x0) 12:13:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:13:00 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xdc05000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1756.455901] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 12:13:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 44) 12:13:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)="e86bdc95657e", 0x6}], 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)={0x0, 0xfb, 0x4e, 0x3, 0x9, "4fb83fdc439619487c04d4564250b525", "f66f38f148983aacf534841a516e8a6bed5ee7f487cfee0d18510262976621fc8b2bc25f6e64eacee57a8e78999ea28e80dd8273111104fc44"}, 0x4e, 0x2) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 12:13:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x10200) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1e) unshare(0x48020200) [ 1756.555942] Process accounting resumed [ 1756.560278] FAULT_INJECTION: forcing a failure. [ 1756.560278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.561367] CPU: 1 PID: 11043 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1756.561959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1756.562625] Call Trace: [ 1756.562847] dump_stack+0x107/0x167 [ 1756.563155] should_fail.cold+0x5/0xa [ 1756.563482] _copy_from_user+0x2e/0x1b0 [ 1756.563829] __copy_msghdr_from_user+0x91/0x4b0 [ 1756.564201] ? __ia32_sys_shutdown+0x80/0x80 [ 1756.564573] ? udp_v6_push_pending_frames+0x360/0x360 [ 1756.564995] ? inet6_sendmsg+0xbd/0x140 [ 1756.565317] ? inet6_compat_ioctl+0x320/0x320 [ 1756.565674] ? __sock_sendmsg+0x55/0x190 [ 1756.566014] sendmsg_copy_msghdr+0xa1/0x160 [ 1756.566364] ? do_recvmmsg+0x6d0/0x6d0 [ 1756.566690] ? __lock_acquire+0x1657/0x5b00 [ 1756.567048] ___sys_sendmsg+0xc6/0x170 [ 1756.567369] ? sendmsg_copy_msghdr+0x160/0x160 [ 1756.567743] ? vmacache_find+0x55/0x2a0 [ 1756.568070] ? __lockdep_reset_lock+0x180/0x180 [ 1756.568453] ? lock_acquire+0x197/0x470 [ 1756.568769] ? find_held_lock+0x2c/0x110 [ 1756.569107] ? __might_fault+0xd3/0x180 [ 1756.569433] ? lock_downgrade+0x6d0/0x6d0 [ 1756.569768] ? asm_exc_page_fault+0x1e/0x30 [ 1756.570129] __sys_sendmmsg+0x195/0x470 [ 1756.570457] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1756.570821] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1756.571171] ? clockevents_program_event+0x131/0x360 [ 1756.571583] ? tick_program_event+0xa8/0x140 [ 1756.571942] ? hrtimer_interrupt+0x771/0x9b0 [ 1756.572309] __x64_sys_sendmmsg+0x99/0x100 [ 1756.572652] do_syscall_64+0x33/0x40 [ 1756.572951] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1756.573358] RIP: 0033:0x7f29466f0b19 [ 1756.573654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1756.575107] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1756.575722] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1756.576292] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1756.576862] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.577432] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1756.578002] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:13:16 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x28, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fe, 0x0, 0x0, @u32}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="da"}]}]}, 0x28}}, 0x0) r4 = openat2(r3, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340)={0x52ac0, 0x107, 0x14}, 0x18) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000380)=0x7851669e) getdents64(r0, &(0x7f0000000140)=""/255, 0xff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES16], 0x14}}, 0x4090) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fadvise64(r6, 0x0, 0x0, 0x1) readv(r2, &(0x7f00000002c0), 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x0) unshare(0x48020200) 12:13:16 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f0000000480)=""/6, 0x6}, {&(0x7f00000004c0)=""/42, 0x2a}], 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000b2c1b6629c34", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff], 0x60}, 0x40010102) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xa5, 0x1, 0x1, 0x1, 0x0, 0x80, 0x400, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x4400, 0x7, 0x1, 0x0, 0x5, 0xcc, 0xfffb, 0x0, 0x7, 0x0, 0x100000001}, r1, 0x10, r0, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x3, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x400c2, 0x56, 0x20, 0x5, 0x9648, 0x6, 0x6, 0x0, 0x9d, 0x0, 0x8001}) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x10, r4, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) 12:13:16 executing program 4: lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r0, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r0, 0xa) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="5cdadd7bdda529192d702eb172a7a34dc0b3c9daceb4d9237b5d651d03e13332a76a578d50241493dce477966d980ab1402ea899705e774a2bb3", 0x3a}, {&(0x7f0000000140)="d0dacb1e5882544e8dcedf47ae263da3f2a94f2e5dcb420527afa750f92b720b9cb73618f758fdfca8b3738c24e13c5fba830f923a0f4ea51a10f987621a66dba6359f560b3e4f91f0d3fac428254cdc182a4d701cb3767a048ef2f2f349d48d57d1c7d367403a7e20aa7e24f2af2bbf1117779b6bd6d0745edbc93adf322e209ae4eeb4162cad62d328571b69b7c937365142810e4167c725fe459d7c082559eb5014e9190b70e2134fc20cb4349baf49eeb03994fc9399043875030e601494c08b8e531a9ab1d755c22291504e8e6215e43d19b0ac243e4205eea35e1bfb0d419c8779", 0xe4}, {&(0x7f0000000340)="0a570c1d2704767834ea5b28a67b8bb2b00131353799492f467e24691fcd83fe39e991172f5a37b692c424ab1be16167d942b29148e7d7076e53c418b6c3484fe22929f22c31785efc457534eff1c90e9a61067a6829616f3ea7d801bc778e9f048f5c6ee9b03bd8524d83916081ce77c67d683b6d0a30d342a13b73d610d8efd0bf12c6efd8024cb8312ce62d375396dd7590d38c1cc51068d813b6e95eb29d26", 0xa1}], 0x3, &(0x7f0000000600)=[@rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x1, 0x81, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @loopback]}}}, @dstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, '\x00', [@pad1]}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x8, 0xb, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x40}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x30000}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7, 0x2, [0x2, 0x7ff, 0x1, 0x7ff, 0x5c2]}}, @enc_lim={0x4, 0x1, 0x57}, @jumbo={0xc2, 0x4, 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts_2292={{0xa8, 0x29, 0x36, {0x6, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xcfa}, @generic={0xff, 0x7d, "074c54e06737441e7203789d98244f697b79bc5f0d002624ecf672a0f1dfc89521ef2670381be61b652b9155039f0fd70e1e06cc4ac98b62ed300251401fd006124320e3642cff309406634498016456ba06f01406969e014d55b1a4bc261172deca2b384fdd78b0a4fd75b97b7b8ec5d70441aca040464ee25ac6a188"}, @generic={0x5, 0x4, "955cafe9"}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x0, 0x4, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x1f8}, 0x40000) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) dup2(r2, r1) 12:13:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 45) 12:13:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = eventfd2(0x80, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) dup3(r1, r2, 0x80000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000ffff, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 12:13:16 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xe005000000000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:13:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x3}, [@srh]}}}}}}}, 0x0) 12:13:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x2}]}}}}}}}, 0x0) [ 1772.235237] FAULT_INJECTION: forcing a failure. [ 1772.235237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.237990] CPU: 1 PID: 11057 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1772.239260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1772.240789] Call Trace: [ 1772.241294] dump_stack+0x107/0x167 [ 1772.241975] should_fail.cold+0x5/0xa [ 1772.242694] _copy_from_user+0x2e/0x1b0 [ 1772.243439] __copy_msghdr_from_user+0x91/0x4b0 [ 1772.244303] ? __ia32_sys_shutdown+0x80/0x80 [ 1772.245118] ? udp_v6_push_pending_frames+0x360/0x360 [ 1772.246071] ? inet6_sendmsg+0xbd/0x140 [ 1772.246699] ? inet6_compat_ioctl+0x320/0x320 [ 1772.247510] ? __sock_sendmsg+0x55/0x190 [ 1772.248127] sendmsg_copy_msghdr+0xa1/0x160 [ 1772.248905] ? do_recvmmsg+0x6d0/0x6d0 [ 1772.249489] ? __lock_acquire+0x1657/0x5b00 [ 1772.250296] ___sys_sendmsg+0xc6/0x170 [ 1772.250869] ? sendmsg_copy_msghdr+0x160/0x160 [ 1772.251723] ? vmacache_find+0x55/0x2a0 [ 1772.252314] ? __lockdep_reset_lock+0x180/0x180 [ 1772.253187] ? lock_acquire+0x197/0x470 [ 1772.253923] ? find_held_lock+0x2c/0x110 [ 1772.254704] ? __might_fault+0xd3/0x180 [ 1772.255446] ? lock_downgrade+0x6d0/0x6d0 [ 1772.256099] __sys_sendmmsg+0x195/0x470 [ 1772.256849] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1772.257651] ? lock_downgrade+0x6d0/0x6d0 [ 1772.258453] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1772.259361] ? wait_for_completion_io+0x270/0x270 [ 1772.260272] ? rcu_read_lock_any_held+0x75/0xa0 [ 1772.261146] ? vfs_write+0x354/0xa70 [ 1772.261829] ? fput_many+0x2f/0x1a0 [ 1772.262507] ? ksys_write+0x1a9/0x260 [ 1772.263061] ? __ia32_sys_read+0xb0/0xb0 [ 1772.263832] __x64_sys_sendmmsg+0x99/0x100 [ 1772.264603] do_syscall_64+0x33/0x40 [ 1772.265145] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1772.266064] RIP: 0033:0x7f29466f0b19 [ 1772.266650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1772.269956] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1772.271329] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1772.272624] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1772.273919] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1772.275217] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1772.276526] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:13:32 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x28, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fe, 0x0, 0x0, @u32}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="da"}]}]}, 0x28}}, 0x0) r4 = openat2(r3, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340)={0x52ac0, 0x107, 0x14}, 0x18) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000380)=0x7851669e) getdents64(r0, &(0x7f0000000140)=""/255, 0xff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES16], 0x14}}, 0x4090) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fadvise64(r6, 0x0, 0x0, 0x1) readv(r2, &(0x7f00000002c0), 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x0) unshare(0x48020200) 12:13:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x3}]}}}}}}}, 0x0) 12:13:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 46) 12:13:32 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0xeffdffff00000000, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:13:32 executing program 6: flock(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x7fffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{0x7, 0x8, 0x4, 0x1f}, {0x2, 0x1, 0x3, 0x80}, {0x8000, 0x3, 0x74, 0x20}, {0x9, 0x3f, 0xfa}, {0x4, 0x80, 0xfa}, {0x8, 0x40, 0x7, 0x9}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/custom1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x9}, {&(0x7f0000010400)="020000000300000004", 0x9, 0xfffc}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000280)=ANY=[]) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r2, 0x8000000) syz_io_uring_setup(0x3a75, &(0x7f0000000500)={0x0, 0x1cb2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x3ff, 0x6, 0x0, {0x0, r6, r2}}, 0xfffff801) syz_io_uring_submit(r4, 0x0, &(0x7f0000000800)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13, 0x1, {0x0, r6}}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xff) fcntl$setstatus(r1, 0x4, 0x0) 12:13:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x6}, [@srh]}}}}}}}, 0x0) 12:13:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000003c0)=ANY=[@ANYBLOB="004eacec960ffb88f61a07b8c3f3c1aa396415dd0a7f001ad8f12a0550226bd1e28d879881662de6e6455c10101413dd1af65629c18457a48018181c0886b1f44bfb08b4ddcdc7e2fe379d5decb37f7b439736147bf79be0eb4803c5799422b638a525a1cb52d17f45d89e61b08b2c11cc305f459456465732f71211a31469d71166a303b4824dd894066e954b9f387670b4913b3d203cf2f2bd754e3106bfa1863a6d5647ce2e64799d2b91be7c74dde94e3b520597"]) setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x8, 0x9, &(0x7f00000019c0)=[{&(0x7f0000000540)="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", 0x1000, 0xe3}, {&(0x7f0000001540)="6d54ab1caea06f0bd5371ba8b30d5db3d5aa4e0c0b96038eacfd6c8239db4d407c3d65f6e3590e27ff45402da058b4b7046d3f8d685ae1ad654e08f079384f42102d0c23c3f2a7a88ff2", 0x4a, 0x2}, {&(0x7f00000015c0)="bb67", 0x2, 0x401}, {&(0x7f0000001600)="dbc903a386ed5410455ef309e3f2c39a0b9e3c3c435085b9e03eaedada3769d5043af48e4a673ae3376247e5533bfb9d0480ba0cc518df122077f5ce983369e62389940d965d507e663eaec273ab6eb8030da19f0c8873cb3b6a51daba9b71f8a4f08bccba844908c9d62bb40809efa720", 0x71, 0x1}, {&(0x7f0000001680)="d841f36803ae1d8ebebda8016995ccfaf01e7b5591f91d62dc11e955de0ba05e849c21c3b330cf95af55038f6f9c99c5d210e95fa6bfdf6f4272b49b7ebc47a4e67ebf9501f83387a422d2c2e1720d382f774c37b7c750b8cc21bc56b29ccd78d7dc2e5cc9fac073a2824c6c930beff9d2b29c432bcc5d86b963e922184aef6384dcb9f85a621e10431e6cf9b6b8ee6cb807d94772e75a686cce6e55db798bf5fe5d650166ff3e4dcec8f6310236d45999d437e189bf8d59ad4f0c08463a91aac02cab9a776f1de8959b4b5d9b69", 0xce, 0x209}, {&(0x7f0000001780)="bad2d296824bccc6f0645da96d5baca01eb38623a674173acc426507df23cfaeb6b8cacca678c7f91807404da962a4cc3ed6eec5adc5ec853b919b6ad17a3a9a0d77ced6a44bea1208", 0x49, 0x9}, {&(0x7f0000001800)="ee52e4585b5b6d2814e937719693d25fda3c35e78d4052d1118df7398f62f9be9fec6f4a4ea7913e9b98f8db5efb71acb3b4821043b873a70cfcf2238692492628cda2cf9228dfb67e26979e233712b09e922ac0deb6b2a023832bc24718400ad026b8953ec7ea5e6f5a14d5a00e707bc318c9bb05c14ef1fb640446caabc3a8a8e80cd34bbfd2991cfea2a62e0658f205d33536be6a90b606fe2340d202f7dc9cbd7d182c0a2c3953501fcdd8f0d1647b9757b2d647f9dcac011170d36f2de9ed40bf26a6c8a9c0cfd356204478f9e9dd62040bdd87b2c514a77acedce35dc43d002005afdddb0fde6c423cebade35fd904", 0xf2, 0xdfa}, {&(0x7f0000001900)="51f403ce", 0x4, 0x724}, {&(0x7f0000001940)="b239d24cda9b91fada572496c6bf02ce84a8693b835e2c95c07ff056167e861a96e7e1afea6a858a9788962476697f8f01fb8a7b8a2f695bb6eca510b264c68752841da4f52637112381db33876352a0ea4bcff3cdc105a2219a5c787b85b10de2d2812687827d84c23652866bd1dc2fef15cdd495149d96daaa2e", 0x7b, 0x4}], 0x8, &(0x7f0000001ac0)={[{@nobh}, {@norecovery}, {@noload}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'system_u:object_r:autofs_device_t:s0\x00'}}]}) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x3) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x144) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x40) write(r2, &(0x7f0000000240)="01", 0x1) openat(r0, &(0x7f0000000480)='./file0\x00', 0x200400, 0x0) r3 = openat(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x12) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0xa}, 0x15100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x20d315) open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x83) bind$unix(r3, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r4, 0x0) 12:13:32 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002000028020000028401001b", 0x65, 0x400}, {0x0}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff01", 0x1003, 0x2000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='\x82)#!\\^-^)\x00', &(0x7f0000000140)='./file2\x00', r0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file2\x00', 0x0) [ 1788.216666] FAULT_INJECTION: forcing a failure. [ 1788.216666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.219335] CPU: 0 PID: 11090 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1788.220687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1788.222312] Call Trace: [ 1788.222835] dump_stack+0x107/0x167 [ 1788.223566] should_fail.cold+0x5/0xa [ 1788.224341] _copy_from_user+0x2e/0x1b0 [ 1788.225134] __copy_msghdr_from_user+0x91/0x4b0 [ 1788.226041] ? __ia32_sys_shutdown+0x80/0x80 [ 1788.226915] ? udp_v6_push_pending_frames+0x360/0x360 [ 1788.227977] ? inet6_sendmsg+0xbd/0x140 [ 1788.228760] ? inet6_compat_ioctl+0x320/0x320 [ 1788.229630] ? __sock_sendmsg+0x55/0x190 [ 1788.230442] sendmsg_copy_msghdr+0xa1/0x160 [ 1788.231286] ? do_recvmmsg+0x6d0/0x6d0 [ 1788.232093] ? __lock_acquire+0x1657/0x5b00 [ 1788.232965] ___sys_sendmsg+0xc6/0x170 [ 1788.233745] ? sendmsg_copy_msghdr+0x160/0x160 [ 1788.234647] ? vmacache_find+0x55/0x2a0 [ 1788.235441] ? __lockdep_reset_lock+0x180/0x180 [ 1788.236383] ? lock_acquire+0x197/0x470 [ 1788.237175] ? find_held_lock+0x2c/0x110 [ 1788.237884] ? __might_fault+0xd3/0x180 [ 1788.238588] ? lock_downgrade+0x6d0/0x6d0 [ 1788.239300] ? asm_exc_page_fault+0x1e/0x30 [ 1788.240101] __sys_sendmmsg+0x195/0x470 [ 1788.240795] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1788.241566] ? lock_downgrade+0x6d0/0x6d0 [ 1788.242336] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1788.243214] ? wait_for_completion_io+0x270/0x270 [ 1788.244053] ? rcu_read_lock_any_held+0x75/0xa0 [ 1788.244846] ? vfs_write+0x354/0xa70 [ 1788.245486] ? fput_many+0x2f/0x1a0 [ 1788.246109] ? ksys_write+0x1a9/0x260 [ 1788.246760] ? __ia32_sys_read+0xb0/0xb0 [ 1788.247464] __x64_sys_sendmmsg+0x99/0x100 [ 1788.248189] do_syscall_64+0x33/0x40 [ 1788.248816] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1788.249687] RIP: 0033:0x7f29466f0b19 12:13:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x2}]}}}}}}}, 0x0) [ 1788.250323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1788.253483] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1788.254771] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1788.255985] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1788.257186] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1788.258385] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1788.259589] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1788.260729] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 12:13:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x60}]}}}}}}}, 0x0) 12:13:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1788.303580] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:13:32 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:13:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 47) [ 1788.360368] FAULT_INJECTION: forcing a failure. [ 1788.360368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.361391] CPU: 1 PID: 11114 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1788.361950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1788.362625] Call Trace: [ 1788.362847] dump_stack+0x107/0x167 [ 1788.363152] should_fail.cold+0x5/0xa [ 1788.363469] _copy_from_user+0x2e/0x1b0 [ 1788.363804] __copy_msghdr_from_user+0x91/0x4b0 [ 1788.364182] ? __ia32_sys_shutdown+0x80/0x80 [ 1788.364541] ? udp_v6_push_pending_frames+0x360/0x360 [ 1788.364958] ? inet6_sendmsg+0xbd/0x140 [ 1788.365284] ? inet6_compat_ioctl+0x320/0x320 [ 1788.365648] ? __sock_sendmsg+0x55/0x190 [ 1788.365985] sendmsg_copy_msghdr+0xa1/0x160 [ 1788.366333] ? do_recvmmsg+0x6d0/0x6d0 [ 1788.366646] ? __lock_acquire+0x1657/0x5b00 [ 1788.367017] ___sys_sendmsg+0xc6/0x170 [ 1788.367321] ? sendmsg_copy_msghdr+0x160/0x160 [ 1788.367699] ? vmacache_find+0x55/0x2a0 [ 1788.368019] ? __lockdep_reset_lock+0x180/0x180 [ 1788.368393] ? lock_acquire+0x197/0x470 [ 1788.368702] ? find_held_lock+0x2c/0x110 [ 1788.369021] ? __might_fault+0xd3/0x180 [ 1788.369330] ? lock_downgrade+0x6d0/0x6d0 [ 1788.369665] ? asm_exc_page_fault+0x1e/0x30 [ 1788.370021] __sys_sendmmsg+0x195/0x470 [ 1788.370341] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1788.370687] ? lock_downgrade+0x6d0/0x6d0 [ 1788.371044] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1788.371421] ? wait_for_completion_io+0x270/0x270 [ 1788.371823] ? rcu_read_lock_any_held+0x75/0xa0 [ 1788.372211] ? vfs_write+0x354/0xa70 [ 1788.372503] ? fput_many+0x2f/0x1a0 [ 1788.372804] ? ksys_write+0x1a9/0x260 [ 1788.373119] ? __ia32_sys_read+0xb0/0xb0 [ 1788.373443] __x64_sys_sendmmsg+0x99/0x100 [ 1788.373799] do_syscall_64+0x33/0x40 [ 1788.374088] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1788.374510] RIP: 0033:0x7f29466f0b19 [ 1788.374800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1788.376217] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1788.376840] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1788.377426] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1788.378008] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1788.378606] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1788.379192] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:13:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 48) 12:13:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x2880, 0x82) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000008c0)=ANY=[@ANYBLOB="03000000", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000b2f9e9bbfed76a79f897b2289235aab287d5a29e44d2ca36937388853ae78102f0a4693460a92cfb3434b07cbfe4776a079e9dfb70673a6031"]) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r5) signalfd(r5, &(0x7f0000000200)={[0x9]}, 0x8) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffffdef, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @empty}}) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="56f9e72ad881f9d7c0a98574a3b1d0eafb5afa4cf59a0984bc0f3fca58d65b025fd0e765171c6cbb6677a6b5055f9f890c856a717ecb6441c888e063098f5b18094199a2ee25290ec86003a35e6025f7e9ac0051dd267b2138eaa9f05eadf1cc8864624a281f5f182cada7c57df29fddfdf02237c816a17d9d23c29d0f31dfe2f3291cb2156eca619558735ee420d22943680918e06dd786c9765a77", 0x9c}, {&(0x7f0000000500)="76d51e8283bae99a5dae5161e970665c6181fa025089b4f531149e56b5c9450c99888c5ffb5da1c08aaf43da162c5a9bf4ed9460dc9b89d6579497e8db1825f6b31711133d89506892202107b158d17845dc9ac2c88a2fef2bbb5a18b534c29581f1b6add4848dfa6c30fa3396587a73105e8fb1d35b8e5db17e3ad561b41772766271e8569eba6bf5c429e08722ab78274ef3fe9b59f434c7c70e0f4181c0e6ad8731d62eba4658171911f51f441941558b3f69d99ac2b5826f541cbe7b93a7776c93501353436c07e6b2abc42fb00366519caff3608d8a4d0659940fb9111eaee87cbc5dfaf934398b09583eec81", 0xef}], 0x2, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffa0bd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0xa0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)='S', 0x1}], 0x1, &(0x7f0000000600)}}, {{&(0x7f0000000640)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000680)="57e4e473d79d2f738408b5c3bd0f4a22fed0232d31917207f9d7c7ab0d5a23d16c869f4dc611430a9c5c0ddbd1fe9dc2d66f", 0x32}, {&(0x7f00000006c0)="2cc1b7f9092220f319c57a5198d2f0ee840e6932a904c150048a5eb5d2dc07797eb18d8bac72b37afc808f3a85249755b6984e7369415b939a752cf4c8c06f4b7ea2d267df45ae5dc72916267c039a8bb263373902c60fcc49f0c5ac0e9a6e599b2a3453ee3b285f3afdc26c6d61ce489a99800e3652680eca32ae80fdc9afeb37027a94c47a41f8fbf470e0d6f8bde0ce018be998b60468f04ae88d77a794ee1a4729a0ee668772205ebf67075711a3ccfd7662af7ed517318368cd40e93b742c6cce77738b71b0f2cbcac9902960f29a68f50432b1b2920fcd4b9341544acf381e2975d49269b8ef24", 0xea}], 0x2}}], 0x3, 0x20000800) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 1788.419777] FAULT_INJECTION: forcing a failure. [ 1788.419777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.421130] CPU: 1 PID: 11119 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1788.421691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1788.422365] Call Trace: [ 1788.422588] dump_stack+0x107/0x167 [ 1788.422891] should_fail.cold+0x5/0xa [ 1788.423207] _copy_from_user+0x2e/0x1b0 [ 1788.423537] __copy_msghdr_from_user+0x91/0x4b0 [ 1788.423938] ? __ia32_sys_shutdown+0x80/0x80 [ 1788.424300] ? udp_v6_push_pending_frames+0x360/0x360 [ 1788.424721] ? inet6_sendmsg+0xbd/0x140 [ 1788.425045] ? inet6_compat_ioctl+0x320/0x320 [ 1788.425418] ? __sock_sendmsg+0x55/0x190 [ 1788.425750] sendmsg_copy_msghdr+0xa1/0x160 [ 1788.426108] ? do_recvmmsg+0x6d0/0x6d0 [ 1788.426426] ? __lock_acquire+0x1657/0x5b00 [ 1788.426787] ___sys_sendmsg+0xc6/0x170 [ 1788.427110] ? sendmsg_copy_msghdr+0x160/0x160 [ 1788.427493] ? __lockdep_reset_lock+0x180/0x180 [ 1788.427875] ? trace_hardirqs_on+0x5b/0x180 [ 1788.428232] ? lock_acquire+0x197/0x470 [ 1788.428550] ? find_held_lock+0x2c/0x110 [ 1788.428889] ? __might_fault+0xd3/0x180 [ 1788.429211] ? lock_downgrade+0x6d0/0x6d0 [ 1788.429550] ? io_schedule_timeout+0x140/0x140 [ 1788.429924] __sys_sendmmsg+0x195/0x470 [ 1788.430252] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1788.430602] ? lock_downgrade+0x6d0/0x6d0 [ 1788.430946] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1788.431335] ? wait_for_completion_io+0x270/0x270 [ 1788.431721] ? rcu_read_lock_any_held+0x75/0xa0 [ 1788.432106] ? vfs_write+0x354/0xa70 [ 1788.432410] ? fput_many+0x2f/0x1a0 [ 1788.432710] ? ksys_write+0x1a9/0x260 [ 1788.433014] ? __ia32_sys_read+0xb0/0xb0 [ 1788.433348] __x64_sys_sendmmsg+0x99/0x100 [ 1788.433695] do_syscall_64+0x33/0x40 [ 1788.433999] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1788.434415] RIP: 0033:0x7f29466f0b19 [ 1788.434719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1788.436219] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1788.436831] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1788.437400] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1788.437968] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1788.438535] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1788.439106] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:13:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x2}, [@srh]}}}}}}}, 0x0) [ 1788.503480] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 12:13:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x2880, 0x82) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000008c0)=ANY=[@ANYBLOB="03000000", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000b2f9e9bbfed76a79f897b2289235aab287d5a29e44d2ca36937388853ae78102f0a4693460a92cfb3434b07cbfe4776a079e9dfb70673a6031"]) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r5) signalfd(r5, &(0x7f0000000200)={[0x9]}, 0x8) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffffdef, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @empty}}) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="56f9e72ad881f9d7c0a98574a3b1d0eafb5afa4cf59a0984bc0f3fca58d65b025fd0e765171c6cbb6677a6b5055f9f890c856a717ecb6441c888e063098f5b18094199a2ee25290ec86003a35e6025f7e9ac0051dd267b2138eaa9f05eadf1cc8864624a281f5f182cada7c57df29fddfdf02237c816a17d9d23c29d0f31dfe2f3291cb2156eca619558735ee420d22943680918e06dd786c9765a77", 0x9c}, {&(0x7f0000000500)="76d51e8283bae99a5dae5161e970665c6181fa025089b4f531149e56b5c9450c99888c5ffb5da1c08aaf43da162c5a9bf4ed9460dc9b89d6579497e8db1825f6b31711133d89506892202107b158d17845dc9ac2c88a2fef2bbb5a18b534c29581f1b6add4848dfa6c30fa3396587a73105e8fb1d35b8e5db17e3ad561b41772766271e8569eba6bf5c429e08722ab78274ef3fe9b59f434c7c70e0f4181c0e6ad8731d62eba4658171911f51f441941558b3f69d99ac2b5826f541cbe7b93a7776c93501353436c07e6b2abc42fb00366519caff3608d8a4d0659940fb9111eaee87cbc5dfaf934398b09583eec81", 0xef}], 0x2, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffa0bd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0xa0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)='S', 0x1}], 0x1, &(0x7f0000000600)}}, {{&(0x7f0000000640)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000680)="57e4e473d79d2f738408b5c3bd0f4a22fed0232d31917207f9d7c7ab0d5a23d16c869f4dc611430a9c5c0ddbd1fe9dc2d66f", 0x32}, {&(0x7f00000006c0)="2cc1b7f9092220f319c57a5198d2f0ee840e6932a904c150048a5eb5d2dc07797eb18d8bac72b37afc808f3a85249755b6984e7369415b939a752cf4c8c06f4b7ea2d267df45ae5dc72916267c039a8bb263373902c60fcc49f0c5ac0e9a6e599b2a3453ee3b285f3afdc26c6d61ce489a99800e3652680eca32ae80fdc9afeb37027a94c47a41f8fbf470e0d6f8bde0ce018be998b60468f04ae88d77a794ee1a4729a0ee668772205ebf67075711a3ccfd7662af7ed517318368cd40e93b742c6cce77738b71b0f2cbcac9902960f29a68f50432b1b2920fcd4b9341544acf381e2975d49269b8ef24", 0xea}], 0x2}}], 0x3, 0x20000800) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:13:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x3}, [@srh]}}}}}}}, 0x0) 12:13:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x2880, 0x82) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000008c0)=ANY=[@ANYBLOB="03000000", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000b2f9e9bbfed76a79f897b2289235aab287d5a29e44d2ca36937388853ae78102f0a4693460a92cfb3434b07cbfe4776a079e9dfb70673a6031"]) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r5) signalfd(r5, &(0x7f0000000200)={[0x9]}, 0x8) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffffdef, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @empty}}) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="56f9e72ad881f9d7c0a98574a3b1d0eafb5afa4cf59a0984bc0f3fca58d65b025fd0e765171c6cbb6677a6b5055f9f890c856a717ecb6441c888e063098f5b18094199a2ee25290ec86003a35e6025f7e9ac0051dd267b2138eaa9f05eadf1cc8864624a281f5f182cada7c57df29fddfdf02237c816a17d9d23c29d0f31dfe2f3291cb2156eca619558735ee420d22943680918e06dd786c9765a77", 0x9c}, {&(0x7f0000000500)="76d51e8283bae99a5dae5161e970665c6181fa025089b4f531149e56b5c9450c99888c5ffb5da1c08aaf43da162c5a9bf4ed9460dc9b89d6579497e8db1825f6b31711133d89506892202107b158d17845dc9ac2c88a2fef2bbb5a18b534c29581f1b6add4848dfa6c30fa3396587a73105e8fb1d35b8e5db17e3ad561b41772766271e8569eba6bf5c429e08722ab78274ef3fe9b59f434c7c70e0f4181c0e6ad8731d62eba4658171911f51f441941558b3f69d99ac2b5826f541cbe7b93a7776c93501353436c07e6b2abc42fb00366519caff3608d8a4d0659940fb9111eaee87cbc5dfaf934398b09583eec81", 0xef}], 0x2, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffa0bd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0xa0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)='S', 0x1}], 0x1, &(0x7f0000000600)}}, {{&(0x7f0000000640)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000680)="57e4e473d79d2f738408b5c3bd0f4a22fed0232d31917207f9d7c7ab0d5a23d16c869f4dc611430a9c5c0ddbd1fe9dc2d66f", 0x32}, {&(0x7f00000006c0)="2cc1b7f9092220f319c57a5198d2f0ee840e6932a904c150048a5eb5d2dc07797eb18d8bac72b37afc808f3a85249755b6984e7369415b939a752cf4c8c06f4b7ea2d267df45ae5dc72916267c039a8bb263373902c60fcc49f0c5ac0e9a6e599b2a3453ee3b285f3afdc26c6d61ce489a99800e3652680eca32ae80fdc9afeb37027a94c47a41f8fbf470e0d6f8bde0ce018be998b60468f04ae88d77a794ee1a4729a0ee668772205ebf67075711a3ccfd7662af7ed517318368cd40e93b742c6cce77738b71b0f2cbcac9902960f29a68f50432b1b2920fcd4b9341544acf381e2975d49269b8ef24", 0xea}], 0x2}}], 0x3, 0x20000800) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:13:46 executing program 1: writev(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f00000000c0)="959b9f32bda81e34d5bc1f82c6c8b1d4930641b2e04b9a4c89038d693d0b144a08673f41889b3b8906baab089678fa24618a3757a55929e2355968373ebda07a3a576a22d17afe32251f947fecf94e171e81cb3bd1930167d563cc", 0x5b}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="bbb8ad23255296b47e7136c01bc23e221e19abc39a3309aa8c4ec5097be52974bb558ab7fce8dc4633c7974c5b9ef3a135bed2a893acdd113487600372457e09e66132d00d6b46e175e8acd7604748e0b1ebf388e9dc902e4c4a61e3783f608cab0aaf7f8255a933e3152e7a9c130275d4ccda8190311f5935c0fc78b1a200b63bda82e5af0dbf369eecabd163496eb7646f154988fdd17568b20c6c9987f502cf8332240b7c2c975a4dfd7c07f319f05f6d6590a9dafee7297b29c37884346cdb3192808679", 0xc6}, {&(0x7f0000001240)="0c738661e27efff210846024893b4395f020a00f5a285ef42dbacd388273bc58982422ddac0c117ac6b41a6106c11cc18b5dab6950a49f4a7f23af44b0ee50577ee37bfb7407efaa40d755c95df23733b216afb32b6a0af7b1a2c1fce09d003bc50d1bed182e65a30e0d2c9912d5dffcc0042b8ca17145d3ff12bf797d2a57674065278375b813dfd955274013ec362a1ee4d3cace40a0edae14a108bfbc77632c43dfcac9a5e7192914371eaaa358ed014c5516c67bf5bb6dc41e9b99995dcd1637fa41b02b9682d5bb", 0xca}, {&(0x7f0000001340)="c2dfa8540b133a695ba27ed9ee6b4424dfd5559a35ac1f3f64bc8799f2bca70e381ebeb72aad7d1de8126e1e96125a1823df36389f64be1cbe8149fc0cd1b5e622fd1264d6bcd63a0fd97ce95837ec479e67313fd229d5834973c02cba12133ecd1ef8b5704cc3246d003308e92bf0a671f27fec", 0x74}], 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) ftruncate(0xffffffffffffffff, 0x1) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) creat(&(0x7f0000000000)='./file0\x00', 0x68) 12:13:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0xff}]}}}}}}}, 0x0) 12:13:46 executing program 6: flock(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x7fffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{0x7, 0x8, 0x4, 0x1f}, {0x2, 0x1, 0x3, 0x80}, {0x8000, 0x3, 0x74, 0x20}, {0x9, 0x3f, 0xfa}, {0x4, 0x80, 0xfa}, {0x8, 0x40, 0x7, 0x9}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/custom1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x9}, {&(0x7f0000010400)="020000000300000004", 0x9, 0xfffc}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000280)=ANY=[]) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r2, 0x8000000) syz_io_uring_setup(0x3a75, &(0x7f0000000500)={0x0, 0x1cb2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x3ff, 0x6, 0x0, {0x0, r6, r2}}, 0xfffff801) syz_io_uring_submit(r4, 0x0, &(0x7f0000000800)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13, 0x1, {0x0, r6}}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xff) fcntl$setstatus(r1, 0x4, 0x0) 12:13:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 49) 12:13:46 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1802.680556] FAULT_INJECTION: forcing a failure. [ 1802.680556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1802.682336] CPU: 1 PID: 11142 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1802.683315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1802.684493] Call Trace: [ 1802.684871] dump_stack+0x107/0x167 [ 1802.685395] should_fail.cold+0x5/0xa [ 1802.685955] _copy_from_user+0x2e/0x1b0 [ 1802.686524] __copy_msghdr_from_user+0x91/0x4b0 [ 1802.687182] ? __ia32_sys_shutdown+0x80/0x80 [ 1802.687799] ? udp_v6_push_pending_frames+0x360/0x360 [ 1802.688538] ? inet6_sendmsg+0xbd/0x140 [ 1802.689102] ? inet6_compat_ioctl+0x320/0x320 [ 1802.689734] ? __sock_sendmsg+0x55/0x190 [ 1802.690325] sendmsg_copy_msghdr+0xa1/0x160 [ 1802.690962] ? do_recvmmsg+0x6d0/0x6d0 [ 1802.691514] ? __lock_acquire+0x1657/0x5b00 [ 1802.692146] ___sys_sendmsg+0xc6/0x170 [ 1802.692701] ? sendmsg_copy_msghdr+0x160/0x160 [ 1802.693339] ? vmacache_find+0x55/0x2a0 [ 1802.693914] ? __lockdep_reset_lock+0x180/0x180 [ 1802.694580] ? lock_acquire+0x197/0x470 [ 1802.695141] ? find_held_lock+0x2c/0x110 [ 1802.695723] ? __might_fault+0xd3/0x180 [ 1802.696295] ? lock_downgrade+0x6d0/0x6d0 [ 1802.696886] ? asm_exc_page_fault+0x1e/0x30 [ 1802.697520] __sys_sendmmsg+0x195/0x470 [ 1802.698085] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1802.698694] ? lock_downgrade+0x6d0/0x6d0 [ 1802.699304] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1802.700031] ? wait_for_completion_io+0x270/0x270 [ 1802.700723] ? rcu_read_lock_any_held+0x75/0xa0 [ 1802.701376] ? vfs_write+0x354/0xa70 [ 1802.701937] ? fput_many+0x2f/0x1a0 [ 1802.702452] ? ksys_write+0x1a9/0x260 [ 1802.703022] ? __ia32_sys_read+0xb0/0xb0 [ 1802.703609] __x64_sys_sendmmsg+0x99/0x100 [ 1802.704259] do_syscall_64+0x33/0x40 [ 1802.704789] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1802.705541] RIP: 0033:0x7f29466f0b19 [ 1802.706066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1802.708744] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1802.709832] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1802.710870] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1802.711919] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1802.712965] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1802.713999] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:13:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:13:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x60}, [@srh]}}}}}}}, 0x0) [ 1802.766716] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 12:13:47 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0xe, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:13:47 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f00000002c0), 0x2, 0x200041) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r2, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r2, 0xa) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ftruncate(r3, 0x1) r4 = openat$incfs(r1, &(0x7f0000000140)='.log\x00', 0x183201, 0x1) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000a, 0x4000010, r4, 0x3) r5 = fcntl$dupfd(r2, 0x406, r3) write$binfmt_elf64(r5, &(0x7f0000001080)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x9, 0x0, 0x5, 0x3, 0x6, 0x80000000, 0x3d, 0x40, 0x331, 0xc8, 0x8001, 0x38, 0x2, 0xff, 0x5, 0x6}, [{0x7, 0x5, 0x6, 0x5, 0x7, 0x20, 0x400, 0x13b0}, {0x3, 0x78b7, 0x100000001, 0x6, 0x10000, 0x8, 0xbd4, 0x2a77c1fb}], "8e6b2721acf537a1cb564b9c213de9923773f7c91d6657f3d082f004832e896ae953800b4f3d48eb01aeb597a3c4fc56ec81a9471184c8b57b2416f13b9b53c377e8c7809341b059a19efffec2cf9671b9fa2aecd13d7eecf54f0451ccdc77ab67a529c2188e93541de932ac038d87c08ccf43b4ce908129d79c8ba4ceaabcffa240fba65f855777697ba723778b1c8e889cae26dd2a8bab0702d93ff845e2fe952c961708423b72acda3300bc4b2e1e027c88f83ab25e8b420bca08a196d80d5cc6708d35e6c49146554cdbad683a4cd87f21", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x983) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 12:13:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0xff}, [@srh]}}}}}}}, 0x0) 12:13:47 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x128000, 0xe2, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x200, 0x600}, {&(0x7f0000010400)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010a00)="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"/1408, 0x580, 0x8800}, {&(0x7f0000011000)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000011100)="0042454130310100"/32, 0x20, 0x9800}, {&(0x7f0000011200)="004e535230320100"/32, 0x20, 0xa000}, {&(0x7f0000011300)="0054454130310100"/32, 0x20, 0xa800}, {&(0x7f0000011400)="0100020019000000ac59f001200000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303134364200000000000000", 0x60, 0x10000}, {&(0x7f0000011500)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x100c0}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x10160}, {&(0x7f0000011700)="04000200e60000001faff0012100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x10800}, {&(0x7f0000011800)="000000000000000000000000000000000000000600"/32, 0x20, 0x108e0}, {&(0x7f0000011900)='\x00*genisoimage\x00'/32, 0x20, 0x10960}, {&(0x7f0000011a00)="050002006d0000005003f001220000000200000001000000022b4e5352303200", 0x20, 0x11000}, {&(0x7f0000011b00)="0000000000000000000000000000000000000000000000000100000001010000b9000000002a67656e69736f696d61676500"/64, 0x40, 0x110a0}, {&(0x7f0000011c00)="060002004f0000006411ae012300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x11800}, {&(0x7f0000011d00)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x118c0}, {&(0x7f0000011e00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x119a0}, {&(0x7f0000011f00)="07000200b10000006d0f0800240000000400"/32, 0x20, 0x12000}, {&(0x7f0000012000)="08000200200000000000f0012500"/32, 0x20, 0x12800}, {&(0x7f0000012100)="01000200eb000000c007f001300000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303134394300000000000000", 0x60, 0x18000}, {&(0x7f0000012200)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x180c0}, {&(0x7f0000012300)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x18160}, {&(0x7f0000012400)="04000200f60000001faff0013100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x18800}, {&(0x7f0000012500)="000000000000000000000000000000000000000600"/32, 0x20, 0x188e0}, {&(0x7f0000012600)='\x00*genisoimage\x00'/32, 0x20, 0x18960}, {&(0x7f0000012700)="050002007d0000005003f001320000000200000001000000022b4e5352303200", 0x20, 0x19000}, {&(0x7f0000012800)="0000000000000000000000000000000000000000000000000100000001010000b9000000002a67656e69736f696d61676500"/64, 0x40, 0x190a0}, {&(0x7f0000012900)="060002005f0000006411ae013300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x19800}, {&(0x7f0000012a00)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x198c0}, {&(0x7f0000012b00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x199a0}, {&(0x7f0000012c00)="07000200c10000006d0f0800340000000400"/32, 0x20, 0x1a000}, {&(0x7f0000012d00)="08000200300000000000f0013500"/32, 0x20, 0x1a800}, {&(0x7f0000012e00)="09000200fe00000092ab7600400000007810e40709140b2a3a0000000100000000000000000000000c01000000000000000000000000000000000000000000000000000000000000010000002e00000000000000b9000000002a67656e69736f696d61676500000000000000000000000000000000000000050000000200000002010201020100"/160, 0xa0, 0x20000}, {&(0x7f0000012f00)="080002003c0000000000f0014100"/32, 0x20, 0x20800}, {&(0x7f0000013000)="02000200ce00000001d7f0010001000000800000200000000080000030000000", 0x20, 0x80000}, {&(0x7f0000013100)="0001020032000000e559f001000000007810e40709140b2a3a0000000300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d00"/128, 0x80, 0x80800}, {&(0x7f0000013200)="00000000000000000000000000000006004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000600"/128, 0x80, 0x808e0}, {&(0x7f0000013300)="0000000000000000000000000000000000080000020000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000201030000000000", 0x40, 0x80980}, {&(0x7f0000013400)="08000200fc0000000000f0010100"/32, 0x20, 0x81000}, {&(0x7f0000013500)="050102004c000000f4a6a800020000000000000004000000010000040000000000003002ffffffffffffffffa51400000200000000000000080100000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000000000000000000000000000008000000080100000300"/192, 0xc0, 0x81800}, {&(0x7f0000013600)="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"/288, 0x120, 0x82000}, {&(0x7f0000013800)="05010200280000000173a800040000000000000004000000010000040000000000003002ffffffffffffffffa51400000100000000000000540000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000005010000000000000000000008000000540000000500"/192, 0xc0, 0x82800}, {&(0x7f0000013900)="01010200ca000000476218000500000001000a00000800000200000000000000000000000000000001010200d2000000affe1c000500000001000006000800000a000000000000000b01000000000866696c653000"/96, 0x60, 0x83000}, {&(0x7f0000013a00)="050102001300000097c6a800060000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000640000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000007010000000000000000000008000000640000001700"/192, 0xc0, 0x83800}, {&(0x7f0000013b00)="0501020061000000a406a800070000000000000004000000010000050000000000003002ffffffffffffffff8410000001000000000000000a0000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d61676500000000000000000000000000000000000000080100000000000000000000080000000a0000001800"/192, 0xc0, 0x84000}, {&(0x7f0000013c00)="050102008c000000c50fa800080000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000009010000000000000000000008000000282300001900"/192, 0xc0, 0x84800}, {&(0x7f0000013d00)="05010200ad000000ed07a800090000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000a010000000000000000000008000000282300001e00"/192, 0xc0, 0x85000}, {&(0x7f0000013e00)="05010200f80000004cf2a8000a0000000000000004000000010000050000000000003002ffffffffffffffff8410000001000000000000001a0400000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000b0100000000000000000000080000001a0400002300"/192, 0xc0, 0x85800}, {&(0x7f0000013f00)="01001401000001000000050015010000010046494c4530000000000000000000", 0x20, 0x86000}, {&(0x7f0000014000)="01000000011400010000050000000115000146494c4530000000000000000000", 0x20, 0x87000}, {&(0x7f0000014100)="010016010000010000000a0017010000010000660069006c0065003000000000", 0x20, 0x88000}, {&(0x7f0000014200)="010000000116000100000a0000000117000100660069006c0065003000000000", 0x20, 0x89000}, {&(0x7f0000014300)="2200140100000000011400080000000008007809140b2a3a080200000100000101002200140100000000011400080000000008007809140b2a3a080200000100000101012c00180100000000011864000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600150100000000011500080000000008007809140b2a3a08020000010000010546494c45302a0019010000000001190a0000000000000a7809140b2a3a08000000010000010846494c45312e3b31002a001a0100000000011a28230000000023287809140b2a3a08000000010000010846494c45322e3b31002a001f0100000000011f28230000000023287809140b2a3a08000000010000010846494c45332e3b3100"/288, 0x120, 0x8a000}, {&(0x7f0000014500)="2200150100000000011500080000000008007809140b2a3a080200000100000101002200140100000000011400080000000008007809140b2a3a080200000100000101012a0024010000000001241a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0x8a800}, {&(0x7f0000014600)="2200160100000000011600080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101013400180100000000011864000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00170100000000011700080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0019010000000001190a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c001a0100000000011a28230000000023287809140b2a3a08000000010000010a00660069006c00650032002c001f0100000000011f28230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0x8b000}, {&(0x7f0000014800)="2200170100000000011700080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101012c0024010000000001241a0400000000041a7809140b2a3a08000000010000010a00660069006c0065003000"/128, 0x80, 0x8b800}, {&(0x7f0000014900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8c000}, {&(0x7f0000014a00)='syzkallers\x00'/32, 0x20, 0x8c800}, {&(0x7f0000014b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000015000)="000000000000000001000003000000000000000000000000000000000000000002000007000000300000002f00"/64, 0x40, 0xc8000}, {&(0x7f0000015100)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xc80e0}, {&(0x7f0000015200)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xc81e0}, {&(0x7f0000015300)="00000000000000000100000300000002000000030000000b000000010000000402000025000000600000005b00"/64, 0x40, 0xce000}, {&(0x7f0000015400)="000000000000000000000000000000000000000000000000f800000000000000", 0x20, 0xce0e0}, {&(0x7f0000015500)="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"/1216, 0x4c0, 0xce1e0}, {&(0x7f0000015a00)="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", 0x220, 0xce7e0}, {&(0x7f0000015d00)="00000000000000000000000000000000000000000000000041e1000000000000", 0x20, 0xcfbc0}, {&(0x7f0000015e00)="000000000000000001000003000000000000000000000000000000000000000002000025000000100000000f00000000200000ff00"/64, 0x40, 0xda000}, {&(0x7f0000015f00)="000000000000000000000000000000000000000000000000020a010000000000", 0x20, 0xda060}, {&(0x7f0000016000)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xda0e0}, {&(0x7f0000016100)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xda1e0}, {&(0x7f0000016200)="4244db8cf0c2db8cf0c2010000000003002401b800000800000020000004000000100194054344524f4d0000000000000000000000000000000000000000000000000000000000000005000060000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000c00000000000000000000c000000c0018000000000000", 0xa0, 0xdc000}, {&(0x7f0000016300)="020002008700000001d7f001b901000000800000200000000080000030000000", 0x20, 0xdc800}, {&(0x7f0000016400)="020002008800000001d7f001ba01000000800000200000000080000030000000", 0x20, 0xdd000}, {&(0x7f0000016500)="020002008900000001d7f001bb01000000800000200000000080000030000000", 0x20, 0xdd800}, {&(0x7f0000016600)="020002008a00000001d7f001bc01000000800000200000000080000030000000", 0x20, 0xde000}, {&(0x7f0000016700)="020002008b00000001d7f001bd01000000800000200000000080000030000000", 0x20, 0xde800}, {&(0x7f0000016800)="020002008c00000001d7f001be01000000800000200000000080000030000000", 0x20, 0xdf000}, {&(0x7f0000016900)="020002008d00000001d7f001bf01000000800000200000000080000030000000", 0x20, 0xdf800}, {&(0x7f0000016a00)="020002008e00000001d7f001c001000000800000200000000080000030000000", 0x20, 0xe0000}, {&(0x7f0000016b00)="020002008f00000001d7f001c101000000800000200000000080000030000000", 0x20, 0xe0800}, {&(0x7f0000016c00)="020002009000000001d7f001c201000000800000200000000080000030000000", 0x20, 0xe1000}, {&(0x7f0000016d00)="020002009100000001d7f001c301000000800000200000000080000030000000", 0x20, 0xe1800}, {&(0x7f0000016e00)="020002009200000001d7f001c401000000800000200000000080000030000000", 0x20, 0xe2000}, {&(0x7f0000016f00)="020002009300000001d7f001c501000000800000200000000080000030000000", 0x20, 0xe2800}, {&(0x7f0000017000)="020002009400000001d7f001c601000000800000200000000080000030000000", 0x20, 0xe3000}, {&(0x7f0000017100)="020002009500000001d7f001c701000000800000200000000080000030000000", 0x20, 0xe3800}, {&(0x7f0000017200)="020002009600000001d7f001c801000000800000200000000080000030000000", 0x20, 0xe4000}, {&(0x7f0000017300)="020002009700000001d7f001c901000000800000200000000080000030000000", 0x20, 0xe4800}, {&(0x7f0000017400)="020002009800000001d7f001ca01000000800000200000000080000030000000", 0x20, 0xe5000}, {&(0x7f0000017500)="020002009900000001d7f001cb01000000800000200000000080000030000000", 0x20, 0xe5800}, {&(0x7f0000017600)="020002009a00000001d7f001cc01000000800000200000000080000030000000", 0x20, 0xe6000}, {&(0x7f0000017700)="020002009b00000001d7f001cd01000000800000200000000080000030000000", 0x20, 0xe6800}, {&(0x7f0000017800)="020002009c00000001d7f001ce01000000800000200000000080000030000000", 0x20, 0xe7000}, {&(0x7f0000017900)="020002009d00000001d7f001cf01000000800000200000000080000030000000", 0x20, 0xe7800}, {&(0x7f0000017a00)="020002009e00000001d7f001d001000000800000200000000080000030000000", 0x20, 0xe8000}, {&(0x7f0000017b00)="020002009f00000001d7f001d101000000800000200000000080000030000000", 0x20, 0xe8800}, {&(0x7f0000017c00)="02000200a000000001d7f001d201000000800000200000000080000030000000", 0x20, 0xe9000}, {&(0x7f0000017d00)="02000200a100000001d7f001d301000000800000200000000080000030000000", 0x20, 0xe9800}, {&(0x7f0000017e00)="02000200a200000001d7f001d401000000800000200000000080000030000000", 0x20, 0xea000}, {&(0x7f0000017f00)="02000200a300000001d7f001d501000000800000200000000080000030000000", 0x20, 0xea800}, {&(0x7f0000018000)="02000200a400000001d7f001d601000000800000200000000080000030000000", 0x20, 0xeb000}, {&(0x7f0000018100)="02000200a500000001d7f001d701000000800000200000000080000030000000", 0x20, 0xeb800}, {&(0x7f0000018200)="02000200a600000001d7f001d801000000800000200000000080000030000000", 0x20, 0xec000}, {&(0x7f0000018300)="02000200a700000001d7f001d901000000800000200000000080000030000000", 0x20, 0xec800}, {&(0x7f0000018400)="02000200a800000001d7f001da01000000800000200000000080000030000000", 0x20, 0xed000}, {&(0x7f0000018500)="02000200a900000001d7f001db01000000800000200000000080000030000000", 0x20, 0xed800}, {&(0x7f0000018600)="02000200aa00000001d7f001dc01000000800000200000000080000030000000", 0x20, 0xee000}, {&(0x7f0000018700)="02000200ab00000001d7f001dd01000000800000200000000080000030000000", 0x20, 0xee800}, {&(0x7f0000018800)="02000200ac00000001d7f001de01000000800000200000000080000030000000", 0x20, 0xef000}, {&(0x7f0000018900)="02000200ad00000001d7f001df01000000800000200000000080000030000000", 0x20, 0xef800}, {&(0x7f0000018a00)="02000200ae00000001d7f001e001000000800000200000000080000030000000", 0x20, 0xf0000}, {&(0x7f0000018b00)="02000200af00000001d7f001e101000000800000200000000080000030000000", 0x20, 0xf0800}, {&(0x7f0000018c00)="02000200b000000001d7f001e201000000800000200000000080000030000000", 0x20, 0xf1000}, {&(0x7f0000018d00)="02000200b100000001d7f001e301000000800000200000000080000030000000", 0x20, 0xf1800}, {&(0x7f0000018e00)="02000200b200000001d7f001e401000000800000200000000080000030000000", 0x20, 0xf2000}, {&(0x7f0000018f00)="02000200b300000001d7f001e501000000800000200000000080000030000000", 0x20, 0xf2800}, {&(0x7f0000019000)="02000200b400000001d7f001e601000000800000200000000080000030000000", 0x20, 0xf3000}, {&(0x7f0000019100)="02000200b500000001d7f001e701000000800000200000000080000030000000", 0x20, 0xf3800}, {&(0x7f0000019200)="02000200b600000001d7f001e801000000800000200000000080000030000000", 0x20, 0xf4000}, {&(0x7f0000019300)="02000200b700000001d7f001e901000000800000200000000080000030000000", 0x20, 0xf4800}, {&(0x7f0000019400)="02000200b800000001d7f001ea01000000800000200000000080000030000000", 0x20, 0xf5000}, {&(0x7f0000019500)="02000200b900000001d7f001eb01000000800000200000000080000030000000", 0x20, 0xf5800}, {&(0x7f0000019600)="02000200ba00000001d7f001ec01000000800000200000000080000030000000", 0x20, 0xf6000}, {&(0x7f0000019700)="02000200bb00000001d7f001ed01000000800000200000000080000030000000", 0x20, 0xf6800}, {&(0x7f0000019800)="02000200bc00000001d7f001ee01000000800000200000000080000030000000", 0x20, 0xf7000}, {&(0x7f0000019900)="02000200bd00000001d7f001ef01000000800000200000000080000030000000", 0x20, 0xf7800}, {&(0x7f0000019a00)="02000200be00000001d7f001f001000000800000200000000080000030000000", 0x20, 0xf8000}, {&(0x7f0000019b00)="02000200bf00000001d7f001f101000000800000200000000080000030000000", 0x20, 0xf8800}, {&(0x7f0000019c00)="02000200c000000001d7f001f201000000800000200000000080000030000000", 0x20, 0xf9000}, {&(0x7f0000019d00)="02000200c100000001d7f001f301000000800000200000000080000030000000", 0x20, 0xf9800}, {&(0x7f0000019e00)="02000200c200000001d7f001f401000000800000200000000080000030000000", 0x20, 0xfa000}, {&(0x7f0000019f00)="02000200c300000001d7f001f501000000800000200000000080000030000000", 0x20, 0xfa800}, {&(0x7f000001a000)="02000200c400000001d7f001f601000000800000200000000080000030000000", 0x20, 0xfb000}, {&(0x7f000001a100)="02000200c500000001d7f001f701000000800000200000000080000030000000", 0x20, 0xfb800}, {&(0x7f000001a200)="02000200c600000001d7f001f801000000800000200000000080000030000000", 0x20, 0xfc000}, {&(0x7f000001a300)="02000200c700000001d7f001f901000000800000200000000080000030000000", 0x20, 0xfc800}, {&(0x7f000001a400)="02000200c800000001d7f001fa01000000800000200000000080000030000000", 0x20, 0xfd000}, {&(0x7f000001a500)="02000200c900000001d7f001fb01000000800000200000000080000030000000", 0x20, 0xfd800}, {&(0x7f000001a600)="02000200ca00000001d7f001fc01000000800000200000000080000030000000", 0x20, 0xfe000}, {&(0x7f000001a700)="02000200cb00000001d7f001fd01000000800000200000000080000030000000", 0x20, 0xfe800}, {&(0x7f000001a800)="02000200cc00000001d7f001fe01000000800000200000000080000030000000", 0x20, 0xff000}, {&(0x7f000001a900)="02000200cd00000001d7f001ff01000000800000200000000080000030000000", 0x20, 0xff800}, {&(0x7f000001aa00)="02000200cf00000001d7f0010002000000800000200000000080000030000000", 0x20, 0x100000}, {&(0x7f000001ab00)="02000200d000000001d7f0010102000000800000200000000080000030000000", 0x20, 0x100800}, {&(0x7f000001ac00)="02000200d100000001d7f0010202000000800000200000000080000030000000", 0x20, 0x101000}, {&(0x7f000001ad00)="02000200d200000001d7f0010302000000800000200000000080000030000000", 0x20, 0x101800}, {&(0x7f000001ae00)="02000200d300000001d7f0010402000000800000200000000080000030000000", 0x20, 0x102000}, {&(0x7f000001af00)="02000200d400000001d7f0010502000000800000200000000080000030000000", 0x20, 0x102800}, {&(0x7f000001b000)="02000200d500000001d7f0010602000000800000200000000080000030000000", 0x20, 0x103000}, {&(0x7f000001b100)="02000200d600000001d7f0010702000000800000200000000080000030000000", 0x20, 0x103800}, {&(0x7f000001b200)="02000200d700000001d7f0010802000000800000200000000080000030000000", 0x20, 0x104000}, {&(0x7f000001b300)="02000200d800000001d7f0010902000000800000200000000080000030000000", 0x20, 0x104800}, {&(0x7f000001b400)="02000200d900000001d7f0010a02000000800000200000000080000030000000", 0x20, 0x105000}, {&(0x7f000001b500)="02000200da00000001d7f0010b02000000800000200000000080000030000000", 0x20, 0x105800}, {&(0x7f000001b600)="02000200db00000001d7f0010c02000000800000200000000080000030000000", 0x20, 0x106000}, {&(0x7f000001b700)="02000200dc00000001d7f0010d02000000800000200000000080000030000000", 0x20, 0x106800}, {&(0x7f000001b800)="02000200dd00000001d7f0010e02000000800000200000000080000030000000", 0x20, 0x107000}, {&(0x7f000001b900)="02000200de00000001d7f0010f02000000800000200000000080000030000000", 0x20, 0x107800}, {&(0x7f000001ba00)="02000200df00000001d7f0011002000000800000200000000080000030000000", 0x20, 0x108000}, {&(0x7f000001bb00)="02000200e000000001d7f0011102000000800000200000000080000030000000", 0x20, 0x108800}, {&(0x7f000001bc00)="02000200e100000001d7f0011202000000800000200000000080000030000000", 0x20, 0x109000}, {&(0x7f000001bd00)="02000200e200000001d7f0011302000000800000200000000080000030000000", 0x20, 0x109800}, {&(0x7f000001be00)="02000200e300000001d7f0011402000000800000200000000080000030000000", 0x20, 0x10a000}, {&(0x7f000001bf00)="02000200e400000001d7f0011502000000800000200000000080000030000000", 0x20, 0x10a800}, {&(0x7f000001c000)="02000200e500000001d7f0011602000000800000200000000080000030000000", 0x20, 0x10b000}, {&(0x7f000001c100)="02000200e600000001d7f0011702000000800000200000000080000030000000", 0x20, 0x10b800}, {&(0x7f000001c200)="02000200e700000001d7f0011802000000800000200000000080000030000000", 0x20, 0x10c000}, {&(0x7f000001c300)="02000200e800000001d7f0011902000000800000200000000080000030000000", 0x20, 0x10c800}, {&(0x7f000001c400)="02000200e900000001d7f0011a02000000800000200000000080000030000000", 0x20, 0x10d000}, {&(0x7f000001c500)="02000200ea00000001d7f0011b02000000800000200000000080000030000000", 0x20, 0x10d800}, {&(0x7f000001c600)="02000200eb00000001d7f0011c02000000800000200000000080000030000000", 0x20, 0x10e000}, {&(0x7f000001c700)="02000200ec00000001d7f0011d02000000800000200000000080000030000000", 0x20, 0x10e800}, {&(0x7f000001c800)="02000200ed00000001d7f0011e02000000800000200000000080000030000000", 0x20, 0x10f000}, {&(0x7f000001c900)="02000200ee00000001d7f0011f02000000800000200000000080000030000000", 0x20, 0x10f800}, {&(0x7f000001ca00)="02000200ef00000001d7f0012002000000800000200000000080000030000000", 0x20, 0x110000}, {&(0x7f000001cb00)="02000200f000000001d7f0012102000000800000200000000080000030000000", 0x20, 0x110800}, {&(0x7f000001cc00)="02000200f100000001d7f0012202000000800000200000000080000030000000", 0x20, 0x111000}, {&(0x7f000001cd00)="02000200f200000001d7f0012302000000800000200000000080000030000000", 0x20, 0x111800}, {&(0x7f000001ce00)="02000200f300000001d7f0012402000000800000200000000080000030000000", 0x20, 0x112000}, {&(0x7f000001cf00)="02000200f400000001d7f0012502000000800000200000000080000030000000", 0x20, 0x112800}, {&(0x7f000001d000)="02000200f500000001d7f0012602000000800000200000000080000030000000", 0x20, 0x113000}, {&(0x7f000001d100)="02000200f600000001d7f0012702000000800000200000000080000030000000", 0x20, 0x113800}, {&(0x7f000001d200)="02000200f700000001d7f0012802000000800000200000000080000030000000", 0x20, 0x114000}, {&(0x7f000001d300)="02000200f800000001d7f0012902000000800000200000000080000030000000", 0x20, 0x114800}, {&(0x7f000001d400)="02000200f900000001d7f0012a02000000800000200000000080000030000000", 0x20, 0x115000}, {&(0x7f000001d500)="02000200fa00000001d7f0012b02000000800000200000000080000030000000", 0x20, 0x115800}, {&(0x7f000001d600)="02000200fb00000001d7f0012c02000000800000200000000080000030000000", 0x20, 0x116000}, {&(0x7f000001d700)="02000200fc00000001d7f0012d02000000800000200000000080000030000000", 0x20, 0x116800}, {&(0x7f000001d800)="02000200fd00000001d7f0012e02000000800000200000000080000030000000", 0x20, 0x117000}, {&(0x7f000001d900)="02000200fe00000001d7f0012f02000000800000200000000080000030000000", 0x20, 0x117800}, {&(0x7f000001da00)="02000200ff00000001d7f0013002000000800000200000000080000030000000", 0x20, 0x118000}, {&(0x7f000001db00)="020002000000000001d7f0013102000000800000200000000080000030000000", 0x20, 0x118800}, {&(0x7f000001dc00)="020002000100000001d7f0013202000000800000200000000080000030000000", 0x20, 0x119000}, {&(0x7f000001dd00)="020002000200000001d7f0013302000000800000200000000080000030000000", 0x20, 0x119800}, {&(0x7f000001de00)="020002000300000001d7f0013402000000800000200000000080000030000000", 0x20, 0x11a000}, {&(0x7f000001df00)="020002000400000001d7f0013502000000800000200000000080000030000000", 0x20, 0x11a800}, {&(0x7f000001e000)="020002000500000001d7f0013602000000800000200000000080000030000000", 0x20, 0x11b000}, {&(0x7f000001e100)="020002000600000001d7f0013702000000800000200000000080000030000000", 0x20, 0x11b800}, {&(0x7f000001e200)="020002000700000001d7f0013802000000800000200000000080000030000000", 0x20, 0x11c000}, {&(0x7f000001e300)="020002000800000001d7f0013902000000800000200000000080000030000000", 0x20, 0x11c800}, {&(0x7f000001e400)="020002000900000001d7f0013a02000000800000200000000080000030000000", 0x20, 0x11d000}, {&(0x7f000001e500)="020002000a00000001d7f0013b02000000800000200000000080000030000000", 0x20, 0x11d800}, {&(0x7f000001e600)="020002000b00000001d7f0013c02000000800000200000000080000030000000", 0x20, 0x11e000}, {&(0x7f000001e700)="020002000c00000001d7f0013d02000000800000200000000080000030000000", 0x20, 0x11e800}, {&(0x7f000001e800)="020002000d00000001d7f0013e02000000800000200000000080000030000000", 0x20, 0x11f000}, {&(0x7f000001e900)="020002000e00000001d7f0013f02000000800000200000000080000030000000", 0x20, 0x11f800}, {&(0x7f000001ea00)="020002000f00000001d7f0014002000000800000200000000080000030000000", 0x20, 0x120000}, {&(0x7f000001eb00)="020002001000000001d7f0014102000000800000200000000080000030000000", 0x20, 0x120800}, {&(0x7f000001ec00)="020002001100000001d7f0014202000000800000200000000080000030000000", 0x20, 0x121000}, {&(0x7f000001ed00)="020002001200000001d7f0014302000000800000200000000080000030000000", 0x20, 0x121800}, {&(0x7f000001ee00)="020002001300000001d7f0014402000000800000200000000080000030000000", 0x20, 0x122000}, {&(0x7f000001ef00)="020002001400000001d7f0014502000000800000200000000080000030000000", 0x20, 0x122800}, {&(0x7f000001f000)="020002001500000001d7f0014602000000800000200000000080000030000000", 0x20, 0x123000}, {&(0x7f000001f100)="020002001600000001d7f0014702000000800000200000000080000030000000", 0x20, 0x123800}, {&(0x7f000001f200)="020002001700000001d7f0014802000000800000200000000080000030000000", 0x20, 0x124000}, {&(0x7f000001f300)="020002001800000001d7f0014902000000800000200000000080000030000000", 0x20, 0x124800}, {&(0x7f000001f400)="020002001900000001d7f0014a02000000800000200000000080000030000000", 0x20, 0x125000}, {&(0x7f000001f500)="020002001a00000001d7f0014b02000000800000200000000080000030000000", 0x20, 0x125800}, {&(0x7f000001f600)="020002001b00000001d7f0014c02000000800000200000000080000030000000", 0x20, 0x126000}, {&(0x7f000001f700)="020002001c00000001d7f0014d02000000800000200000000080000030000000", 0x20, 0x126800}, {&(0x7f000001f800)="020002001d00000001d7f0014e02000000800000200000000080000030000000", 0x20, 0x127000}, {&(0x7f000001f900)="020002001e00000001d7f0014f02000000800000200000000080000030000000", 0x20, 0x127800}], 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="80a71597c4f24afbc4592a4665212fa87448fbe1baab9d0f7e9f3bed71e886beaf0e3817974b0f93523a3703e1d1d7d0ff05a7c8893cfb9c8900793111ff7b4566486a39a824c30072e13b74cc8cfc7b79d6c86aa760df009609f15eb99871afd4126949c52936bec4f43e603ca3e1111ffbf0d620854da8f30a68b1b38d1557ca79abcee42e1aaa3fbfb911f7b4a5c900f85637c8542c6c5b82490c8d7262d848d4522b1fb67daeeb7fcb10c73618741251411c34ec32c6c17f92bdde48a027447a72599f33b0"]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001840)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="e035bebd06193eac6bb0ca8618f7f251c68f40d6276cf6317740dd15cc6d99999206ee8e9b6da9afaa8c18e9f9185e07a9fb02", 0x33, 0x1}], 0x800, &(0x7f0000001940)={[{@shortname_winnt}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@fsname={'fsname', 0x3d, 'iso9660\x00'}}, {@hash}, {@uid_eq}, {@subj_type}, {@euid_lt={'euid<', r1}}, {@uid_eq}, {@smackfstransmute}]}) 12:13:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 50) 12:13:47 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x2}]}}}}}}}, 0x0) 12:13:47 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x11, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:13:47 executing program 4: getxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x37e4, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x1, 0xfffffffc}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd, 0x7, &(0x7f00000010c0)=""/223, 0xdf, 0x20, 0x1}, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}, 0x62) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000003c0)={0x0, 0xfe53, 0x0, 0xfffffffe, 0xa7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000240)=0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r4, r0, r3], 0x3}, 0xa3ca) sendmsg$inet6(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r6, &(0x7f0000000000), 0x5ac, 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000140)={0x401}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000380)=0x9, 0x4) 12:13:47 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000a004e2000000001fc010000000000000000000000000001ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200400040fc00000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe880000000000000000000000000101000400"/521], 0x410) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000005, 0x80010, 0xffffffffffffffff, 0x78ce4000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@in6={0xa, 0x4e21, 0x1, @empty, 0x101}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="9b629c98b0ca7f9186595842ada399610a8cdef8392b4d9f2fe916aba3", 0x1d}, {&(0x7f00000003c0)="08bc5a8463e1b022040512fb93de01f8dd3d6ca0bc45ce2bd69b2d8b828766e18c5a067917af45fbb8edd666d7c421db58a22adda0a623d5ab", 0x39}, {&(0x7f0000000400)="b8ae37ba8ff7ef2a88aaaefa4fb3ac439e1353b31c4c53de40", 0x19}, {&(0x7f0000000440)="887d49147d6e6c53878967510570764c88631b053b5ba0a5fc4de666d18fb878ecf1c8039c1dda747203b1849ad291", 0x2f}], 0x4}, 0x0, 0x4004801, 0x1}, 0x400) sendmsg$BATADV_CMD_SET_MESH(r4, 0x0, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25", 0x17}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1803.022682] FAULT_INJECTION: forcing a failure. [ 1803.022682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1803.024834] CPU: 0 PID: 11166 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1803.026066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1803.027443] Call Trace: [ 1803.027915] dump_stack+0x107/0x167 [ 1803.028588] should_fail.cold+0x5/0xa [ 1803.029286] _copy_from_user+0x2e/0x1b0 [ 1803.029960] __copy_msghdr_from_user+0x91/0x4b0 [ 1803.030701] ? __ia32_sys_shutdown+0x80/0x80 [ 1803.031414] ? udp_v6_push_pending_frames+0x360/0x360 [ 1803.032329] ? inet6_sendmsg+0xbd/0x140 [ 1803.033029] ? inet6_compat_ioctl+0x320/0x320 [ 1803.033794] ? __sock_sendmsg+0x55/0x190 [ 1803.034519] sendmsg_copy_msghdr+0xa1/0x160 [ 1803.035209] ? do_recvmmsg+0x6d0/0x6d0 [ 1803.035880] ? __lock_acquire+0x1657/0x5b00 [ 1803.036675] ___sys_sendmsg+0xc6/0x170 [ 1803.037370] ? sendmsg_copy_msghdr+0x160/0x160 [ 1803.038172] ? vmacache_find+0x55/0x2a0 [ 1803.038860] ? __lockdep_reset_lock+0x180/0x180 [ 1803.039609] ? lock_acquire+0x197/0x470 [ 1803.040254] ? find_held_lock+0x2c/0x110 [ 1803.040908] ? __might_fault+0xd3/0x180 [ 1803.041541] ? lock_downgrade+0x6d0/0x6d0 [ 1803.042198] ? asm_exc_page_fault+0x1e/0x30 [ 1803.042913] __sys_sendmmsg+0x195/0x470 [ 1803.043554] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1803.044252] ? lock_downgrade+0x6d0/0x6d0 [ 1803.044936] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1803.045708] ? wait_for_completion_io+0x270/0x270 [ 1803.046485] ? rcu_read_lock_any_held+0x75/0xa0 [ 1803.047227] ? vfs_write+0x354/0xa70 [ 1803.047837] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1803.048725] ? ksys_write+0x1a9/0x260 [ 1803.049356] ? __ia32_sys_read+0xb0/0xb0 [ 1803.050031] __x64_sys_sendmmsg+0x99/0x100 [ 1803.050723] do_syscall_64+0x33/0x40 [ 1803.051333] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1803.052173] RIP: 0033:0x7f29466f0b19 [ 1803.052784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1803.055716] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1803.056961] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1803.058091] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1803.059221] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.060360] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1803.061487] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:13:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1803.285693] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1025 (only 16 groups) 12:14:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x3}]}}}}}}}, 0x0) 12:14:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x8a, 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000008000008099dcd5f84278c0050000005ec72ab9e000000000000000000300000000000000000000620253b29df2a2048585d2294b5314f2632303d2"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240400c5) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x178, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}]}, 0x178}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x4, 0x70bd2a, 0x25dfdbff, {{{@in=@multicast2, @in=@loopback, 0x4e23, 0xfffc, 0x4e20, 0x8, 0x2, 0x0, 0x80, 0x5e, 0x0, 0xffffffffffffffff}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x2b}, @in=@remote, {0x80, 0x9, 0x2, 0x9ed, 0x3, 0x1, 0x4, 0x3}, {0x101, 0x238, 0x3}, {0x5ffd, 0xf5}, 0x70bd28, 0x3502, 0xa, 0x3, 0x7d, 0x9e}, 0x5, 0x40}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x8004}, 0x4000080) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setown(r2, 0x8, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) 12:14:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat(r0, &(0x7f0000000000)='./file0\x00', 0x400100, 0x80) close(r0) unshare(0x2a040600) unshare(0x60020000) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 12:14:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x2}]}}}}}}}, 0x0) 12:14:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ebb600001abd0f0000080000000000000a080000"], 0x14}}, 0x0) 12:14:02 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x60, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:14:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 51) 12:14:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xc3bb3000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x80, 0x0, 0x430a, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x20004}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x8000) fallocate(r0, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) openat(r1, &(0x7f0000000040)='./file1\x00', 0x101080, 0x20) [ 1817.999884] FAULT_INJECTION: forcing a failure. [ 1817.999884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1818.001127] CPU: 1 PID: 11203 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1818.001778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1818.002549] Call Trace: [ 1818.002827] dump_stack+0x107/0x167 [ 1818.003182] should_fail.cold+0x5/0xa [ 1818.003551] _copy_from_user+0x2e/0x1b0 [ 1818.003933] __copy_msghdr_from_user+0x91/0x4b0 [ 1818.004379] ? __ia32_sys_shutdown+0x80/0x80 [ 1818.004795] ? udp_v6_push_pending_frames+0x360/0x360 [ 1818.005282] ? inet6_sendmsg+0xbd/0x140 [ 1818.005657] ? inet6_compat_ioctl+0x320/0x320 [ 1818.006120] ? __sock_sendmsg+0x55/0x190 [ 1818.006511] sendmsg_copy_msghdr+0xa1/0x160 [ 1818.006917] ? do_recvmmsg+0x6d0/0x6d0 [ 1818.007287] ? __lock_acquire+0x1657/0x5b00 [ 1818.007704] ___sys_sendmsg+0xc6/0x170 [ 1818.008074] ? sendmsg_copy_msghdr+0x160/0x160 [ 1818.008545] ? vmacache_find+0x55/0x2a0 [ 1818.008927] ? __lockdep_reset_lock+0x180/0x180 [ 1818.009372] ? lock_acquire+0x197/0x470 [ 1818.009745] ? find_held_lock+0x2c/0x110 [ 1818.010142] ? __might_fault+0xd3/0x180 [ 1818.010517] ? lock_downgrade+0x6d0/0x6d0 [ 1818.010909] ? asm_exc_page_fault+0x1e/0x30 [ 1818.011330] __sys_sendmmsg+0x195/0x470 [ 1818.011708] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1818.012154] ? lock_downgrade+0x6d0/0x6d0 [ 1818.012564] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1818.013055] ? wait_for_completion_io+0x270/0x270 [ 1818.013513] ? rcu_read_lock_any_held+0x75/0xa0 [ 1818.013985] ? vfs_write+0x354/0xa70 [ 1818.014358] ? fput_many+0x2f/0x1a0 [ 1818.014748] ? ksys_write+0x1a9/0x260 [ 1818.015126] ? __ia32_sys_read+0xb0/0xb0 [ 1818.015546] __x64_sys_sendmmsg+0x99/0x100 [ 1818.015971] do_syscall_64+0x33/0x40 [ 1818.016359] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1818.016879] RIP: 0033:0x7f29466f0b19 [ 1818.017255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1818.019095] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1818.019857] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1818.020578] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1818.021296] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1818.022009] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1818.022728] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:14:02 executing program 1: r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9010}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140)={[0xf0]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ftruncate(r1, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)={0x3, 0xc8, "df1f240aa6d76a256f6939908d22746cc12079d379e60801f5e00c6666074dc3411828d543c7c15c4e6654d2a6872f1e042e6d6a89a63959ae4c3fdfe50ffce173d5566ccc80a24c895f6805438ce6860b1243cf4eccd73aed086809d99945f7504d1cde882e3cdb974e340b3f8386475cfca7d4fb1e1b51028a5ed5b3d1fabd7b1646e490385d49873f99d669489a2537fcd928a99da383f0ddbc83ed3179666a69975e03bd1e934d5b74e7088f5a5146d85370c444fdb3ccca51297be75c354954b52f41076d92"}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0x5a, 0x200c00) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x8040, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6163636573733d616e792c7365636c6162656c2c646f6e745f61707072616973650800000063aa0e0a036e745f61707072616973658361707072616973652c736d61636b66736465663d62696e666d745f6d697363002c6673757569643d6f61543464385c652d323766332d617266312d346334b02d34643734"]) sendfile(r2, r3, 0x0, 0x100000001) 12:14:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x60}]}}}}}}}, 0x0) 12:14:02 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x543, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:14:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x3}]}}}}}}}, 0x0) [ 1818.150720] 9pnet: Insufficient options for proto=fd 12:14:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 52) 12:14:02 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x5dc, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:14:02 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x69, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000a40)={0x3, 0x80, 0x6a, 0x7f, 0x5, 0x80, 0x0, 0x7, 0xc75eea443cd5e58, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb725, 0x0, @perf_config_ext={0x7, 0xa6}, 0x1008, 0x7, 0x6, 0x1, 0x1000, 0x5, 0x400, 0x0, 0x3, 0x0, 0xe2b}, 0x0, 0x6, 0xffffffffffffffff, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x15, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265549b"]}]}, 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000500)=0x5) sendmsg$nl_generic(r1, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)={0x1e0, 0x16, 0x802, 0x70bd29, 0x25dfdbfb, {0xc}, [@nested={0x1b6, 0x51, 0x0, 0x1, [@generic="721adfcdddebc99e8d32211b34003b96acbfcff2c7d1b1f609d90793ae087d34237e02078e95dc230831a7ec99432c4264af93bc2e4f8cafc3dbf9350b750f557585d71708231e3f915b247f59a000ebc58d7f7ba3b3170b8a55ded255b12126489bba6e18d579743d743b6250c82c0da10472132fd99cccf16157bb54a4e5d3e86221a60a875d9660fbdba40a4e39eda3781bb581f61dc97fabdc3257c42f6e18558812fc9589691b506ffc73c6e6a45936dae4be2c560298e18e1da1cd0fe1025663d0603cd1c7a645d06e25257a45c0535ecd4ad320b1450160c21cb9", @typed={0x4e, 0x7c, 0x0, 0x0, @binary="0f6a5d736b78d56439641db45c0860af26db2a7ca4d5bf608cb2a2a786a40548754411b15067f754c74fe0dc6e08c193ca482f356f47287eb36a31d9509405496fce0f3a7de20aab7dca"}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@remote}, @generic="9185bc0ef0c8f4106fc811290eb5c2cd52435c7bb52efcbb30599f7e4f9243726190773adcd65aa3a8bfefca26a488f484db9a144d3898412b323ef9df6e51f9235405ed85fbbca381e844c8c2ae8e0657a71b79dee6467d7c596fbf331e27d67d1daea0", @typed={0xc, 0x33, 0x0, 0x0, @u64=0x124}]}, @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4090}, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x4e23, 0x8, @remote, 0x7fffffff}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32]) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x5) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e00006000b000a00"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) unshare(0x48020200) [ 1818.274544] FAULT_INJECTION: forcing a failure. [ 1818.274544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1818.275743] CPU: 1 PID: 11228 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1818.276341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1818.277297] Call Trace: [ 1818.277573] dump_stack+0x107/0x167 [ 1818.277912] should_fail.cold+0x5/0xa [ 1818.278265] _copy_from_user+0x2e/0x1b0 [ 1818.278637] __copy_msghdr_from_user+0x91/0x4b0 [ 1818.279058] ? __ia32_sys_shutdown+0x80/0x80 [ 1818.279459] ? udp_v6_push_pending_frames+0x360/0x360 [ 1818.279928] ? inet6_sendmsg+0xbd/0x140 [ 1818.280275] ? inet6_compat_ioctl+0x320/0x320 [ 1818.280684] ? __sock_sendmsg+0x55/0x190 [ 1818.281057] sendmsg_copy_msghdr+0xa1/0x160 [ 1818.281450] ? do_recvmmsg+0x6d0/0x6d0 [ 1818.281806] ? __lock_acquire+0x1657/0x5b00 [ 1818.282207] ___sys_sendmsg+0xc6/0x170 [ 1818.282562] ? sendmsg_copy_msghdr+0x160/0x160 [ 1818.282974] ? vmacache_find+0x55/0x2a0 [ 1818.283341] ? __lockdep_reset_lock+0x180/0x180 [ 1818.283770] ? lock_acquire+0x197/0x470 [ 1818.284102] ? find_held_lock+0x2c/0x110 [ 1818.284456] ? __might_fault+0xd3/0x180 [ 1818.284814] ? lock_downgrade+0x6d0/0x6d0 [ 1818.285189] ? asm_exc_page_fault+0x1e/0x30 [ 1818.285591] __sys_sendmmsg+0x195/0x470 [ 1818.285957] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1818.286344] ? lock_downgrade+0x6d0/0x6d0 [ 1818.286702] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1818.287141] ? wait_for_completion_io+0x270/0x270 [ 1818.287538] ? rcu_read_lock_any_held+0x75/0xa0 [ 1818.287954] ? vfs_write+0x354/0xa70 [ 1818.288270] ? fput_many+0x2f/0x1a0 [ 1818.288599] ? ksys_write+0x1a9/0x260 [ 1818.288918] ? __ia32_sys_read+0xb0/0xb0 [ 1818.289286] __x64_sys_sendmmsg+0x99/0x100 [ 1818.289638] do_syscall_64+0x33/0x40 [ 1818.289979] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1818.290394] RIP: 0033:0x7f29466f0b19 [ 1818.290729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1818.292210] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1818.292894] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1818.293531] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1818.294161] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1818.294798] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1818.295429] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1818.319193] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1818.971710] 9pnet: Insufficient options for proto=fd [ 1819.149141] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 12:14:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x60}]}}}}}}}, 0x0) 12:14:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) dup2(0xffffffffffffffff, r3) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r0, r1, 0x0, 0x20d315) creat(&(0x7f00000000c0)='./file0\x00', 0x108) r6 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000004c0)=0x2362, 0x4) sendto(r6, 0x0, 0xfc, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0x80fe}, 0x80) 12:14:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() 12:14:17 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="85ee", 0x2}], 0x1, 0x5, 0x100ff, 0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="4d808000", @ANYRES32, @ANYBLOB="81000000000000002e2f66696c65300070f7f60267f2e595c766af6ffc589eff77ce59c89eb076ba177e1bfe98211473b0a394aced9acbcff1c798b0ba102cf659b7d7228cc606b3cc042cdca6601bc8c018a8ce036d08f915a01221ceae4d204fd831c40000200000c6af292342a01f8a9fd1a9d2fa2e5963a1b27aff1b84735004ad21c7ceb185742634fb4b5879d9fb16"]) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/341], 0xca) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 12:14:17 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x5e0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:14:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 53) 12:14:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = dup2(r0, r1) accept4$inet6(r2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000080)={r6, r7+60000000}, 0x1, 0x1, 0x3, {0x0, r8}}, 0xf56) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="d47b3511ea79529419786eca6893e4003615ce5f4514df8681e9c10c2a7f0cb028385b7bb7f4f676c6091ac41511d6d23188dcb7d9cf20a55f5f28fae40b69f9c8bb25a2a0dfaf003468cdc1cbd3786605bf04886abe8d1ae7079377f26c48a616c594387f1307cf8548cf9619a2c73cb5de0d7e0d7904b715e7900d808f5052f8c8a5c02d", 0x85}], 0x1, &(0x7f0000000480)=[{0xc8, 0x114, 0xbf9d, "4d060b0c5ae7c8c69e4bcf78c8958d2810051ab6f0b8c12310e0a41bb991e5530bc2c83f99e9a0fdc227d9d1b1ef22a2a8d26cb058ef0bc0341f7fcb03fc39975bc24ffac0e0acff083b856badfbf6e55fb636a53a53eded9a78a9ea68ddc829b39f8f1691092ecb8957f4d4501a30f88fd052f73deced4d1866114a1117b68c16f19e609a3b972852e3255fda50aa97618ab074987d33a18833fa3ec56a20618e97fb59b2049e040a0653824727632fe6c0409d20d4"}], 0xc8}, 0x0, 0x44000, 0x1, {0x0, r9}}, 0x6) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000380)=0x33, 0x4) connect$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 12:14:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0xff}]}}}}}}}, 0x0) [ 1833.708327] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1833.710187] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 12:14:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x2}]}}}}}}}, 0x0) 12:14:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000a1804886b1655e09966a7e07c404ecf87834ecdbb6650240e9635802004b17c759b22d78c09367f849dcb80000e15dcf7d09bbde4f408a32dbaed64f8c680c37873c7d65eecdf0eaed8aa6cb52ef5ae7ab35864f54190000000000003b207a59e9d55e0757fcf48c97ef843f7e00"/122]) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10) unshare(0x48020200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB, @ANYRES32=r4, @ANYRES64], 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3bcebe2b2944"}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, [{0x18, 0x1}, {0x16}, {0x6, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x6}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x404c085) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x8, @auto="afaadf0231faa5e6"}) 12:14:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0xff}]}}}}}}}, 0x0) [ 1833.738607] FAULT_INJECTION: forcing a failure. [ 1833.738607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1833.740668] CPU: 0 PID: 11265 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1833.741803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1833.743146] Call Trace: [ 1833.743589] dump_stack+0x107/0x167 [ 1833.744194] should_fail.cold+0x5/0xa [ 1833.744827] _copy_from_user+0x2e/0x1b0 [ 1833.745490] __copy_msghdr_from_user+0x91/0x4b0 [ 1833.746247] ? __ia32_sys_shutdown+0x80/0x80 [ 1833.746973] ? udp_v6_push_pending_frames+0x360/0x360 [ 1833.747838] ? inet6_sendmsg+0xbd/0x140 [ 1833.748493] ? inet6_compat_ioctl+0x320/0x320 [ 1833.749236] ? __sock_sendmsg+0x55/0x190 [ 1833.749901] sendmsg_copy_msghdr+0xa1/0x160 [ 1833.750596] ? do_recvmmsg+0x6d0/0x6d0 [ 1833.751242] ? __lock_acquire+0x1657/0x5b00 [ 1833.751962] ___sys_sendmsg+0xc6/0x170 [ 1833.752602] ? sendmsg_copy_msghdr+0x160/0x160 [ 1833.753353] ? vmacache_find+0x55/0x2a0 [ 1833.753998] ? __lockdep_reset_lock+0x180/0x180 [ 1833.754766] ? lock_acquire+0x197/0x470 [ 1833.755420] ? find_held_lock+0x2c/0x110 [ 1833.756099] ? __might_fault+0xd3/0x180 [ 1833.756754] ? lock_downgrade+0x6d0/0x6d0 [ 1833.757433] ? asm_exc_page_fault+0x1e/0x30 [ 1833.758139] __sys_sendmmsg+0x195/0x470 [ 1833.758801] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1833.759509] ? lock_downgrade+0x6d0/0x6d0 [ 1833.760207] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1833.760991] ? wait_for_completion_io+0x270/0x270 [ 1833.761786] ? rcu_read_lock_any_held+0x75/0xa0 [ 1833.762521] ? vfs_write+0x354/0xa70 [ 1833.763129] ? fput_many+0x2f/0x1a0 [ 1833.763717] ? ksys_write+0x1a9/0x260 [ 1833.764340] ? __ia32_sys_read+0xb0/0xb0 [ 1833.765005] __x64_sys_sendmmsg+0x99/0x100 [ 1833.765682] do_syscall_64+0x33/0x40 [ 1833.766276] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1833.767100] RIP: 0033:0x7f29466f0b19 [ 1833.767693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1833.770628] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1833.771848] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1833.772996] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1833.774135] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1833.775278] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1833.776417] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:14:18 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x608, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:14:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x3}]}}}}}}}, 0x0) 12:14:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 54) 12:14:18 executing program 6: r0 = inotify_init1(0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='ext4\x00', 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup(r1) copy_file_range(r4, &(0x7f00000003c0)=0x7, r3, &(0x7f0000000400)=0x4, 0x3f, 0x0) dup2(r2, r3) fsync(0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r5, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r5, 0xa) r6 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0x200}) syz_open_dev$vcsa(&(0x7f0000000200), 0x3, 0x8400) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x3, 0x0, 0x0, 0x6, 0x10620, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x3, &(0x7f00000000c0)={{0x0}}) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x43000f99) 12:14:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1834.089107] FAT-fs (loop4): bogus number of FAT sectors [ 1834.090116] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1834.097544] FAULT_INJECTION: forcing a failure. [ 1834.097544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1834.100166] CPU: 0 PID: 11290 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1834.101267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1834.102569] Call Trace: [ 1834.102994] dump_stack+0x107/0x167 [ 1834.103581] should_fail.cold+0x5/0xa [ 1834.104213] _copy_from_user+0x2e/0x1b0 [ 1834.104859] __copy_msghdr_from_user+0x91/0x4b0 [ 1834.105602] ? __ia32_sys_shutdown+0x80/0x80 [ 1834.106296] ? udp_v6_push_pending_frames+0x360/0x360 [ 1834.107121] ? inet6_sendmsg+0xbd/0x140 [ 1834.107749] ? inet6_compat_ioctl+0x320/0x320 [ 1834.108467] ? __sock_sendmsg+0x55/0x190 [ 1834.109120] sendmsg_copy_msghdr+0xa1/0x160 [ 1834.109805] ? do_recvmmsg+0x6d0/0x6d0 [ 1834.110427] ? __lock_acquire+0x1657/0x5b00 [ 1834.111129] ___sys_sendmsg+0xc6/0x170 [ 1834.111748] ? sendmsg_copy_msghdr+0x160/0x160 [ 1834.112480] ? vmacache_find+0x55/0x2a0 [ 1834.113118] ? __lockdep_reset_lock+0x180/0x180 [ 1834.113860] ? lock_acquire+0x197/0x470 [ 1834.114490] ? find_held_lock+0x2c/0x110 [ 1834.115137] ? __might_fault+0xd3/0x180 [ 1834.115768] ? lock_downgrade+0x6d0/0x6d0 [ 1834.116424] ? asm_exc_page_fault+0x1e/0x30 [ 1834.117134] __sys_sendmmsg+0x195/0x470 [ 1834.117768] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1834.118454] ? lock_downgrade+0x6d0/0x6d0 [ 1834.119129] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1834.119901] ? wait_for_completion_io+0x270/0x270 [ 1834.120672] ? rcu_read_lock_any_held+0x75/0xa0 [ 1834.121408] ? vfs_write+0x354/0xa70 [ 1834.122006] ? fput_many+0x2f/0x1a0 [ 1834.122587] ? ksys_write+0x1a9/0x260 [ 1834.123190] ? __ia32_sys_read+0xb0/0xb0 [ 1834.123846] __x64_sys_sendmmsg+0x99/0x100 [ 1834.124520] do_syscall_64+0x33/0x40 [ 1834.125112] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1834.125916] RIP: 0033:0x7f29466f0b19 [ 1834.126513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1834.129407] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1834.130607] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1834.131735] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1834.132870] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1834.133989] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1834.135109] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:14:18 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x689, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1834.538644] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1834.739061] FAT-fs (loop4): bogus number of FAT sectors [ 1834.740012] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1836.561979] Bluetooth: hci7: command 0x0405 tx timeout [ 1849.679590] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 12:14:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x118000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb1c8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x44000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)=ANY=[@ANYBLOB="0001a446a2017e8c955dbe71374b1093cfa8655c091ccad1dfc3aba6768fcb22d0fffffffffffffff87d8b0d498aa4adbb7f08d4180214bc17e458933bd6af0bd8fc433842481df5276e3004cdfc1da1c71caea04bc42d9b58bcfe8600260ed0f576", @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 12:14:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 55) 12:14:33 executing program 5: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = geteuid() ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x0, 0x7, 0x2, 0x7fffffff, {{0x4f, 0x4, 0x1, 0x36, 0x13c, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x44, 0x33, 0x3, 0x0, [{@private=0xa010101, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4}, {@multicast1, 0x13}, {@loopback, 0x25}, {@broadcast, 0x4}, {@multicast1, 0x10001}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xa31}]}, @timestamp={0x44, 0x20, 0xd6, 0x0, 0x2, [0x278, 0x18e, 0x4, 0x9, 0x6, 0xe32, 0x1000]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x9c, 0x3, 0x9, [{@rand_addr=0x64010101, 0x74d}, {@multicast1, 0xff}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x10001}, {@loopback, 0xfffffff8}, {@local, 0x200}, {@remote, 0xffff}, {@empty, 0x6}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0x47, 0x3, 0x7, [{@broadcast, 0x95}, {@broadcast, 0x7a}, {@loopback, 0x9}]}, @lsrr={0x83, 0x13, 0xf0, [@multicast1, @multicast2, @private=0xa010102, @empty]}, @cipso={0x86, 0x38, 0x3, [{0x2, 0xd, "47ffd5bb4f59b915819077"}, {0x2, 0x8, "7845a0119f57"}, {0x5, 0xa, "9fbfea38e5577f74"}, {0x5, 0xa, "82f10429f81212db"}, {0x7, 0x9, "e3dba42de872e8"}]}, @ssrr={0x89, 0x13, 0x22, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=@updpolicy={0x198, 0x19, 0x200, 0x70bd2d, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x4e24, 0x4, 0x4e20, 0x401, 0xa, 0x80, 0x80, 0x84, 0x0, r2}, {0x25, 0x22f9aa74, 0x100, 0x2, 0x14ed, 0x8e0000000, 0x20, 0x5}, {0x1, 0x0, 0x1, 0x7fff}, 0x4, 0x6e6bbf, 0x2, 0x1, 0x2, 0x2}, [@algo_aead={0xc8, 0x12, {{'authencesn(michael_mic-generic,xts-aes-neonbs)\x00'}, 0x3e0, 0x100, "07f6dfbe4778e219234e286d499a3b69a2164350d19c5058c2fdfc46ac248e631430277a7746934f473cd0b94f4aeece4a7ec76d6233671da5650281adbb6bc2eeec20c7ae567cc8ff1c5c3c8b610752aa54b6c6c30bc556b771d21c87512708caf87e2ad2bc7440562d14eb183cfca6e7597d4ab572d48dce8f322f"}}, @etimer_thresh={0x8, 0xc, 0x9}, @tfcpad={0x8, 0x16, 0x9}, @extra_flags={0x8, 0x18, 0x1}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000801}, 0x20008000) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4}]}]}, 0xfc}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044005) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005900000000000000000000000000000000000000000000000000000000000044000500ac1e000100000000000000000000000000000000000000000000000020010000000000000000000000000001000000000400"/180], 0xfc}}, 0x0) poll(&(0x7f0000000080)=[{r1, 0x19}, {r0, 0x402c}, {r5, 0x8040}], 0x3, 0x9) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) getpgrp(0x0) getpgrp(0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) unshare(0x48020200) 12:14:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x2}]}}}}}}}, 0x0) 12:14:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x71}, 0x12, 0x8000, 0x3, 0x1, 0x0, 0x8, 0x2, 0x0, 0xa2b80000, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x2) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) sendfile(r1, r3, 0x0, 0x100000001) 12:14:33 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x806, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:14:33 executing program 6: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file1\x00'}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xe, 0xffffffffffffffff, 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000380), 0x8, 0x180) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000440)=0x6) clone3(&(0x7f00000003c0)={0x800000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0xb}, &(0x7f00000001c0)=""/144, 0x90, &(0x7f0000000280)=""/151, &(0x7f0000000340)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 12:14:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:14:33 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0xe00, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1849.749523] FAULT_INJECTION: forcing a failure. [ 1849.749523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1849.752022] CPU: 1 PID: 11328 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1849.753154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1849.754496] Call Trace: [ 1849.754936] dump_stack+0x107/0x167 [ 1849.755540] should_fail.cold+0x5/0xa [ 1849.756174] _copy_from_user+0x2e/0x1b0 [ 1849.756837] __copy_msghdr_from_user+0x91/0x4b0 [ 1849.757611] ? __ia32_sys_shutdown+0x80/0x80 [ 1849.758436] ? udp_v6_push_pending_frames+0x360/0x360 [ 1849.759321] ? inet6_sendmsg+0xbd/0x140 [ 1849.759969] ? inet6_compat_ioctl+0x320/0x320 [ 1849.760698] ? __sock_sendmsg+0x55/0x190 [ 1849.761369] sendmsg_copy_msghdr+0xa1/0x160 [ 1849.762068] ? do_recvmmsg+0x6d0/0x6d0 [ 1849.762706] ? __lock_acquire+0x1657/0x5b00 [ 1849.763428] ___sys_sendmsg+0xc6/0x170 [ 1849.764063] ? sendmsg_copy_msghdr+0x160/0x160 [ 1849.764821] ? vmacache_find+0x55/0x2a0 [ 1849.765488] ? __lockdep_reset_lock+0x180/0x180 [ 1849.766260] ? lock_acquire+0x197/0x470 [ 1849.766919] ? find_held_lock+0x2c/0x110 [ 1849.767587] ? __might_fault+0xd3/0x180 [ 1849.768273] ? lock_downgrade+0x6d0/0x6d0 [ 1849.769067] ? asm_exc_page_fault+0x1e/0x30 [ 1849.769935] __sys_sendmmsg+0x195/0x470 [ 1849.770602] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1849.771371] ? lock_downgrade+0x6d0/0x6d0 [ 1849.772241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1849.773045] ? wait_for_completion_io+0x270/0x270 [ 1849.773938] ? rcu_read_lock_any_held+0x75/0xa0 [ 1849.774907] ? vfs_write+0x354/0xa70 [ 1849.775533] ? fput_many+0x2f/0x1a0 [ 1849.776139] ? ksys_write+0x1a9/0x260 [ 1849.776888] ? __ia32_sys_read+0xb0/0xb0 [ 1849.777587] __x64_sys_sendmmsg+0x99/0x100 [ 1849.778281] do_syscall_64+0x33/0x40 [ 1849.778890] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1849.779726] RIP: 0033:0x7f29466f0b19 [ 1849.780335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1849.783322] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1849.784585] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1849.785860] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1849.787218] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1849.788400] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1849.789699] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:14:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x3}]}}}}}}}, 0x0) [ 1849.801166] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 12:14:34 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x2}]}}}}}}}, 0x0) 12:14:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x60}]}}}}}}}, 0x0) 12:14:34 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x3}]}}}}}}}, 0x0) 12:14:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x2}]}}}}}}}, 0x0) [ 1849.967165] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! 12:14:34 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x1100, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:14:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 56) [ 1850.010044] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1850.038533] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1850.083368] FAULT_INJECTION: forcing a failure. [ 1850.083368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1850.084452] CPU: 0 PID: 11351 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1850.085079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1850.085815] Call Trace: [ 1850.086065] dump_stack+0x107/0x167 [ 1850.086390] should_fail.cold+0x5/0xa [ 1850.086738] _copy_from_user+0x2e/0x1b0 [ 1850.087102] __copy_msghdr_from_user+0x91/0x4b0 [ 1850.087524] ? __ia32_sys_shutdown+0x80/0x80 [ 1850.087920] ? udp_v6_push_pending_frames+0x360/0x360 [ 1850.088385] ? inet6_sendmsg+0xbd/0x140 [ 1850.088750] ? inet6_compat_ioctl+0x320/0x320 [ 1850.089152] ? __sock_sendmsg+0x55/0x190 [ 1850.089520] sendmsg_copy_msghdr+0xa1/0x160 [ 1850.089908] ? do_recvmmsg+0x6d0/0x6d0 [ 1850.090263] ? __lock_acquire+0x1657/0x5b00 [ 1850.090657] ___sys_sendmsg+0xc6/0x170 [ 1850.091010] ? sendmsg_copy_msghdr+0x160/0x160 [ 1850.091419] ? __lockdep_reset_lock+0x180/0x180 [ 1850.091840] ? lock_acquire+0x197/0x470 [ 1850.092196] ? find_held_lock+0x2c/0x110 [ 1850.092576] ? __might_fault+0xd3/0x180 [ 1850.092932] ? lock_downgrade+0x6d0/0x6d0 [ 1850.093309] ? io_schedule_timeout+0x140/0x140 [ 1850.093724] __sys_sendmmsg+0x195/0x470 [ 1850.094085] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1850.094489] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1850.094879] ? clockevents_program_event+0x131/0x360 [ 1850.095339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1850.095808] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1850.096292] ? trace_hardirqs_on+0x5b/0x180 [ 1850.096683] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1850.097178] __x64_sys_sendmmsg+0x99/0x100 [ 1850.097560] do_syscall_64+0x33/0x40 [ 1850.097892] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1850.098348] RIP: 0033:0x7f29466f0b19 [ 1850.098683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1850.100311] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1850.101006] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1850.101639] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1850.102272] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1850.102908] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1850.103541] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:14:49 executing program 5: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = geteuid() ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x0, 0x7, 0x2, 0x7fffffff, {{0x4f, 0x4, 0x1, 0x36, 0x13c, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x44, 0x33, 0x3, 0x0, [{@private=0xa010101, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4}, {@multicast1, 0x13}, {@loopback, 0x25}, {@broadcast, 0x4}, {@multicast1, 0x10001}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xa31}]}, @timestamp={0x44, 0x20, 0xd6, 0x0, 0x2, [0x278, 0x18e, 0x4, 0x9, 0x6, 0xe32, 0x1000]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x9c, 0x3, 0x9, [{@rand_addr=0x64010101, 0x74d}, {@multicast1, 0xff}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x10001}, {@loopback, 0xfffffff8}, {@local, 0x200}, {@remote, 0xffff}, {@empty, 0x6}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0x47, 0x3, 0x7, [{@broadcast, 0x95}, {@broadcast, 0x7a}, {@loopback, 0x9}]}, @lsrr={0x83, 0x13, 0xf0, [@multicast1, @multicast2, @private=0xa010102, @empty]}, @cipso={0x86, 0x38, 0x3, [{0x2, 0xd, "47ffd5bb4f59b915819077"}, {0x2, 0x8, "7845a0119f57"}, {0x5, 0xa, "9fbfea38e5577f74"}, {0x5, 0xa, "82f10429f81212db"}, {0x7, 0x9, "e3dba42de872e8"}]}, @ssrr={0x89, 0x13, 0x22, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000008c0)=@updpolicy={0x198, 0x19, 0x200, 0x70bd2d, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x4e24, 0x4, 0x4e20, 0x401, 0xa, 0x80, 0x80, 0x84, 0x0, r2}, {0x25, 0x22f9aa74, 0x100, 0x2, 0x14ed, 0x8e0000000, 0x20, 0x5}, {0x1, 0x0, 0x1, 0x7fff}, 0x4, 0x6e6bbf, 0x2, 0x1, 0x2, 0x2}, [@algo_aead={0xc8, 0x12, {{'authencesn(michael_mic-generic,xts-aes-neonbs)\x00'}, 0x3e0, 0x100, "07f6dfbe4778e219234e286d499a3b69a2164350d19c5058c2fdfc46ac248e631430277a7746934f473cd0b94f4aeece4a7ec76d6233671da5650281adbb6bc2eeec20c7ae567cc8ff1c5c3c8b610752aa54b6c6c30bc556b771d21c87512708caf87e2ad2bc7440562d14eb183cfca6e7597d4ab572d48dce8f322f"}}, @etimer_thresh={0x8, 0xc, 0x9}, @tfcpad={0x8, 0x16, 0x9}, @extra_flags={0x8, 0x18, 0x1}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000801}, 0x20008000) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4}]}]}, 0xfc}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044005) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005900000000000000000000000000000000000000000000000000000000000044000500ac1e000100000000000000000000000000000000000000000000000020010000000000000000000000000001000000000400"/180], 0xfc}}, 0x0) poll(&(0x7f0000000080)=[{r1, 0x19}, {r0, 0x402c}, {r5, 0x8040}], 0x3, 0x9) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) getpgrp(0x0) getpgrp(0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) unshare(0x48020200) 12:14:49 executing program 1: timerfd_create(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x352c00, 0x90) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r1, 0xa) getdents(r1, &(0x7f0000000080)=""/74, 0x4a) sync() 12:14:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0xff}]}}}}}}}, 0x0) 12:14:49 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x3580, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:14:49 executing program 6: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="099fd0ba6fef"}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008880) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400ffff5200c5d518a8497f5be67834270000001506aeab42cabf9d00"], 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x3f, 0x8001, 0xf}}) 12:14:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x60}]}}}}}}}, 0x0) 12:14:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 57) 12:14:49 executing program 4: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x5, 0xfffc}]}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') add_key$keyring(&(0x7f0000000300), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/168}) r6 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='net/snmp6\x00', r1) r7 = openat2(r5, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x10, 0x1d}, 0x18) ioctl$TIOCSCTTY(r7, 0x540e, 0x5470) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x1d, r8, &(0x7f00000003c0)="48226d78129a94beb4f1ad22da77bc27781bca46fa0e35c36b8c6a8ceb5e2ecc", 0x20) keyctl$KEYCTL_MOVE(0x1e, r3, r6, r8, 0x1) unshare(0x48020200) [ 1865.269728] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 12:14:49 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4305, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1865.323492] FAULT_INJECTION: forcing a failure. [ 1865.323492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1865.325446] CPU: 0 PID: 11379 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1865.326478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1865.327732] Call Trace: [ 1865.328135] dump_stack+0x107/0x167 [ 1865.328688] should_fail.cold+0x5/0xa [ 1865.329294] _copy_from_user+0x2e/0x1b0 [ 1865.329916] __copy_msghdr_from_user+0x91/0x4b0 [ 1865.330621] ? __ia32_sys_shutdown+0x80/0x80 [ 1865.331299] ? udp_v6_push_pending_frames+0x360/0x360 [ 1865.332134] ? inet6_sendmsg+0xbd/0x140 [ 1865.332748] ? inet6_compat_ioctl+0x320/0x320 [ 1865.333423] ? __sock_sendmsg+0x55/0x190 [ 1865.334057] sendmsg_copy_msghdr+0xa1/0x160 [ 1865.334710] ? do_recvmmsg+0x6d0/0x6d0 [ 1865.335316] ? __lock_acquire+0x1657/0x5b00 [ 1865.335990] ___sys_sendmsg+0xc6/0x170 [ 1865.336573] ? sendmsg_copy_msghdr+0x160/0x160 [ 1865.337287] ? __lockdep_reset_lock+0x180/0x180 [ 1865.338022] ? lock_acquire+0x197/0x470 [ 1865.338619] ? find_held_lock+0x2c/0x110 [ 1865.339252] ? __might_fault+0xd3/0x180 [ 1865.339855] ? lock_downgrade+0x6d0/0x6d0 [ 1865.340486] ? io_schedule_timeout+0x140/0x140 [ 1865.341202] __sys_sendmmsg+0x195/0x470 [ 1865.341808] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1865.342461] ? lock_downgrade+0x6d0/0x6d0 [ 1865.343112] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1865.343845] ? wait_for_completion_io+0x270/0x270 [ 1865.344578] ? rcu_read_lock_any_held+0x75/0xa0 [ 1865.345298] ? vfs_write+0x354/0xa70 [ 1865.345875] ? fput_many+0x2f/0x1a0 [ 1865.346446] ? ksys_write+0x1a9/0x260 [ 1865.347035] ? __ia32_sys_read+0xb0/0xb0 [ 1865.347664] __x64_sys_sendmmsg+0x99/0x100 [ 1865.348327] do_syscall_64+0x33/0x40 [ 1865.348906] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1865.349688] RIP: 0033:0x7f29466f0b19 [ 1865.350250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1865.353015] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1865.354145] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1865.355232] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1865.356289] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1865.357362] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1865.358435] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:14:49 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x189) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/dev/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x1810, 0x0) 12:14:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0xff}]}}}}}}}, 0x0) 12:14:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x2}]}}}}}}}, 0x0) 12:14:49 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4788, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:15:04 executing program 6: memfd_create(&(0x7f0000000340)='\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x1000) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000300)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4c00) write$P9_RREADLINK(r2, &(0x7f0000000640)=ANY=[], 0x16) r3 = syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) sendfile(r1, r6, &(0x7f0000000380)=0x6, 0x34) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) io_uring_enter(r3, 0x5c33, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 12:15:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x3}]}}}}}}}, 0x0) 12:15:04 executing program 1: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x424, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) acct(&(0x7f0000000140)='./file0\x00') pidfd_open(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 12:15:04 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r1, 0xa) readv(r1, &(0x7f0000001200)=[{&(0x7f0000001140)=""/22, 0x16}, {&(0x7f0000001180)=""/115, 0x73}], 0x2) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x1000)=nil) pread64(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x0) 12:15:04 executing program 5: syz_read_part_table(0x4, 0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x7fff}, {&(0x7f0000000000)="bd42d24dd980b5abcfd093fe24af9f95a425faba3bb736d5f462dff2fda3a02371e7dcad3d848217f5839e776ebfe91c88738e1aec4bbd967518968b11e1f27399ba99478d6254c7790d2820adb655eedddce68634a38ee77595d6da08beba5d053c530e03fa2c3ea79d8525bfc40bbec26b9d348e41bd1be480d7355357", 0x7e, 0x8}]) 12:15:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:15:04 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4888, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:15:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 58) 12:15:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x2}]}}}}}}}, 0x0) [ 1880.747622] FAULT_INJECTION: forcing a failure. [ 1880.747622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.748641] CPU: 1 PID: 11420 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1880.749206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.749878] Call Trace: [ 1880.750103] dump_stack+0x107/0x167 [ 1880.750405] should_fail.cold+0x5/0xa [ 1880.750718] _copy_from_user+0x2e/0x1b0 [ 1880.751050] __copy_msghdr_from_user+0x91/0x4b0 [ 1880.751430] ? __ia32_sys_shutdown+0x80/0x80 [ 1880.751788] ? udp_v6_push_pending_frames+0x360/0x360 [ 1880.752211] ? inet6_sendmsg+0xbd/0x140 [ 1880.752535] ? inet6_compat_ioctl+0x320/0x320 [ 1880.752901] ? __sock_sendmsg+0x55/0x190 [ 1880.753237] sendmsg_copy_msghdr+0xa1/0x160 [ 1880.753589] ? do_recvmmsg+0x6d0/0x6d0 [ 1880.753910] ? __lock_acquire+0x1657/0x5b00 [ 1880.754269] ___sys_sendmsg+0xc6/0x170 [ 1880.754594] ? sendmsg_copy_msghdr+0x160/0x160 [ 1880.754604] ? vmacache_find+0x55/0x2a0 [ 1880.754616] ? __lockdep_reset_lock+0x180/0x180 [ 1880.754630] ? lock_acquire+0x197/0x470 [ 1880.754639] ? find_held_lock+0x2c/0x110 [ 1880.754652] ? __might_fault+0xd3/0x180 [ 1880.754662] ? lock_downgrade+0x6d0/0x6d0 [ 1880.754672] ? asm_exc_page_fault+0x1e/0x30 [ 1880.754693] __sys_sendmmsg+0x195/0x470 [ 1880.754707] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1880.754716] ? lock_downgrade+0x6d0/0x6d0 12:15:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xa0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x7a, 0x5, 0x7, 0x0, 0x80000000, 0x3, 0x3e, 0x3d, 0x1bc, 0x40, 0x1e6, 0x4, 0x7, 0x38, 0x2, 0x7, 0xff, 0x8}, [{0x6474e551, 0x2, 0xf974, 0x2, 0x3, 0x2, 0x6e7, 0x4}], "ebd5d193cb41d158d2f5fb46fafc7c59df93e52eee915aa9b3a22dc6c7e7bced53690426d490d86e1b582269a7b8770f15e24cf223283d73c69681", ['\x00', '\x00', '\x00']}, 0x3b3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000001) [ 1880.754738] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1880.754750] ? wait_for_completion_io+0x270/0x270 [ 1880.754763] ? rcu_read_lock_any_held+0x75/0xa0 [ 1880.754772] ? vfs_write+0x354/0xa70 [ 1880.754785] ? fput_many+0x2f/0x1a0 [ 1880.754795] ? ksys_write+0x1a9/0x260 [ 1880.754805] ? __ia32_sys_read+0xb0/0xb0 [ 1880.754819] __x64_sys_sendmmsg+0x99/0x100 [ 1880.754832] do_syscall_64+0x33/0x40 [ 1880.754840] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1880.754848] RIP: 0033:0x7f29466f0b19 [ 1880.754857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.754862] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1880.754874] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 12:15:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x401}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000080)) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x224100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 1880.754880] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1880.754886] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 12:15:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1880.754892] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 12:15:05 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x5865, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1880.754898] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:15:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x3}]}}}}}}}, 0x0) [ 1880.854149] Process accounting resumed 12:15:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 59) [ 1880.874972] Restarting kernel threads ... done. [ 1880.903069] Restarting kernel threads ... done. 12:15:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x60}]}}}}}}}, 0x0) [ 1880.928654] FAULT_INJECTION: forcing a failure. [ 1880.928654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.930503] CPU: 0 PID: 11444 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1880.931484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.932646] Call Trace: [ 1880.933034] dump_stack+0x107/0x167 [ 1880.933562] should_fail.cold+0x5/0xa [ 1880.934116] _copy_from_user+0x2e/0x1b0 [ 1880.934690] __copy_msghdr_from_user+0x91/0x4b0 [ 1880.935349] ? __ia32_sys_shutdown+0x80/0x80 [ 1880.935978] ? udp_v6_push_pending_frames+0x360/0x360 [ 1880.936705] ? inet6_sendmsg+0xbd/0x140 [ 1880.937277] ? inet6_compat_ioctl+0x320/0x320 [ 1880.937915] ? __sock_sendmsg+0x55/0x190 [ 1880.938501] sendmsg_copy_msghdr+0xa1/0x160 [ 1880.939110] ? do_recvmmsg+0x6d0/0x6d0 [ 1880.939671] ? __lock_acquire+0x1657/0x5b00 [ 1880.940298] ___sys_sendmsg+0xc6/0x170 [ 1880.940867] ? sendmsg_copy_msghdr+0x160/0x160 [ 1880.941521] ? vmacache_find+0x55/0x2a0 [ 1880.942090] ? __lockdep_reset_lock+0x180/0x180 [ 1880.942766] ? lock_acquire+0x197/0x470 [ 1880.943328] ? find_held_lock+0x2c/0x110 [ 1880.943917] ? __might_fault+0xd3/0x180 [ 1880.944479] ? lock_downgrade+0x6d0/0x6d0 [ 1880.945071] ? asm_exc_page_fault+0x1e/0x30 [ 1880.945701] __sys_sendmmsg+0x195/0x470 [ 1880.946273] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1880.946887] ? lock_downgrade+0x6d0/0x6d0 [ 1880.947494] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1880.948179] ? wait_for_completion_io+0x270/0x270 [ 1880.948869] ? rcu_read_lock_any_held+0x75/0xa0 [ 1880.949533] ? vfs_write+0x354/0xa70 [ 1880.950069] ? fput_many+0x2f/0x1a0 [ 1880.950593] ? ksys_write+0x1a9/0x260 [ 1880.951135] ? __ia32_sys_read+0xb0/0xb0 [ 1880.951723] __x64_sys_sendmmsg+0x99/0x100 [ 1880.952325] do_syscall_64+0x33/0x40 [ 1880.952859] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1880.953591] RIP: 0033:0x7f29466f0b19 [ 1880.954127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.956700] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1880.957797] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1880.958808] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1880.959812] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.960823] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1880.961844] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:15:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x2}]}}}}}}}, 0x0) 12:15:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000001040102000a000000000000000000000800034000003220050001000100000069ee9b715073213fcba083f1547e2aa30f586c9401f46caa2700b9928981c394bf6399f2396524f9031e8d547036648c15acff69aac444cefd5adc8c6991f40bb5a6056a35073654a1ace10c7ab1ba332b4d08abfbef3949e60b9350b1bb9c8a512dee4c5d64f4ac984e782f7a1fdedc2863b11f72c78337fd4e2c498d051c94"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) open(&(0x7f00000000c0)='./file0\x00', 0x820000, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r5, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @loopback}}}], 0x20}}], 0x2, 0x0) [ 1880.997355] device lo entered promiscuous mode [ 1881.002897] Process accounting resumed 12:15:05 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x6000, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:15:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0xff}]}}}}}}}, 0x0) 12:15:05 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000480)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xfe, "bdf0ecfbb30ba8"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001e00)={r2, 0x5}) 12:15:05 executing program 4: r0 = socket$inet(0x2, 0x800, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x2011, r0, 0x0) 12:15:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x3}]}}}}}}}, 0x0) 12:15:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:15:05 executing program 6: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/202) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182) unshare(0x48020200) r1 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000100)=""/182) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/127) 12:15:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 60) 12:15:21 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$SG_IO(r4, 0x1274, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000280), 0x2) r5 = dup2(r1, r1) io_uring_setup(0x1b33, &(0x7f00000003c0)={0x0, 0xc7e7, 0x20, 0x3, 0x175, 0x0, r2}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) write$binfmt_elf64(r6, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x7, 0x2, 0x6, 0x100, 0x2, 0x3, 0x5f20d68c, 0x199, 0x40, 0x1b4, 0x6, 0x5, 0x38, 0x2, 0xf800, 0x4, 0x7}, [{0x6474e550, 0x677, 0x2, 0x1, 0x3, 0x1, 0x6, 0x40}], "27664ac67964241cc65db8f03af9dd97971efe0c9dca2c9f3b94f69c1cce155455248be64d2a45c29f04a4ae6d0fc7cc637047601ed806b22180d2833d6b53a65662f2802363a4b6d9180f92da2a042ae9856cf0426a0c103396bfcd418c64503202e38278daeb31ba7fa02c90231a754e1e8cd9f3a8b2c3235967bd6fc1b4f2865aa1845a1efe2fe7c939934ef98ffad3e6e39c2d5a346832568221484e9327d7f690d5d67d5bc14a33e7c1f81dcbd758d4a2b57afe3b89f57c9e5b3cee134b6afb", ['\x00', '\x00']}, 0x33a) write$binfmt_elf64(r5, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x2, 0x6, 0x0, 0xea5, 0x2, 0x3e, 0x0, 0x0, 0x40, 0x31e, 0x0, 0x0, 0x38, 0x1, 0x1f32, 0x1, 0x100}, [{0x0, 0x3, 0x5, 0xff, 0xa0, 0xdd7, 0x1000000003, 0xffff}], "5563cd9a58df47eb7fe1862c4d6716e03dda73ad79bdf1e9a003bcf3986c50d4e8aa28c957fb3d2f3a377ec19cccee4be2003b4f8551fca880d37a4b11600af6227109e9493fb7702e12a94b4c79f4", ['\x00', '\x00', '\x00']}, 0x3c7) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r8 = syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, 0xffffffffffffffff, r5, r1, r7, r8, r1], 0x7) 12:15:21 executing program 1: syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000140)=@random="7b8baf3777ecfb5d5eb10f", 0xb, 0x1) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:15:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x2}]}}}}}}}, 0x0) 12:15:21 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x6488, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:15:21 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x11) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat(r1, &(0x7f0000000180)='./file0\x00', 0x800, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) fcntl$dupfd(r5, 0x406, r0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) epoll_create(0x3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x36, 0x0, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000400)="4feb7dc9166b6447a088582072c238800a92451d113f8c0580441e896595a1225a3281da76798b7719fc27f0eb034bc3c3e044325e23", 0x0, 0x2, 0x0, 0x0, 0x0}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:15:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x60}]}}}}}}}, 0x0) 12:15:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="c826f5a003e4fecc3e82a6357b8a4efc5f4802dc9f943e1590d19200a6445f87289deb5591bc910c8aad91d8560022fb5e4969622238acf26d1b55035b9e28f34de857c1b2e89b49cf9b53c5429a961332e8d2d2edafdf10e2fce892feba74738da107ee417955c86a3ae6a0bbda18a9dc0e0a1efdb8f665d1b5b089fc08cb21dabea0e4f0bd75f3b35f58", @ANYRES32, @ANYBLOB="fea4221beee7fad2b79e2eb6d87a6657bd4dfc91fc37c02c1d9ce027ec983c38", @ANYRES32=r0, @ANYRESHEX], 0x28}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r1, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {}, @broadcast}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x1) [ 1897.293694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1897.298640] FAULT_INJECTION: forcing a failure. [ 1897.298640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1897.300719] CPU: 1 PID: 11496 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1897.301786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.303013] Call Trace: [ 1897.303429] dump_stack+0x107/0x167 [ 1897.303456] should_fail.cold+0x5/0xa [ 1897.303487] _copy_from_user+0x2e/0x1b0 [ 1897.303514] __copy_msghdr_from_user+0x91/0x4b0 [ 1897.303535] ? __ia32_sys_shutdown+0x80/0x80 [ 1897.303555] ? udp_v6_push_pending_frames+0x360/0x360 [ 1897.303579] ? inet6_sendmsg+0xbd/0x140 [ 1897.303599] ? inet6_compat_ioctl+0x320/0x320 [ 1897.303615] ? __sock_sendmsg+0x55/0x190 [ 1897.303643] sendmsg_copy_msghdr+0xa1/0x160 [ 1897.303661] ? do_recvmmsg+0x6d0/0x6d0 [ 1897.303686] ? __lock_acquire+0x1657/0x5b00 [ 1897.303721] ___sys_sendmsg+0xc6/0x170 [ 1897.303743] ? sendmsg_copy_msghdr+0x160/0x160 [ 1897.303759] ? vmacache_find+0x55/0x2a0 [ 1897.303782] ? __lockdep_reset_lock+0x180/0x180 [ 1897.303810] ? lock_acquire+0x197/0x470 [ 1897.303827] ? find_held_lock+0x2c/0x110 [ 1897.303853] ? __might_fault+0xd3/0x180 [ 1897.303872] ? lock_downgrade+0x6d0/0x6d0 [ 1897.303889] ? asm_exc_page_fault+0x1e/0x30 [ 1897.303930] __sys_sendmmsg+0x195/0x470 [ 1897.303957] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1897.304003] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1897.318583] ? clockevents_program_event+0x131/0x360 [ 1897.318610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1897.318628] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1897.318644] ? trace_hardirqs_on+0x5b/0x180 [ 1897.318664] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1897.318702] __x64_sys_sendmmsg+0x99/0x100 [ 1897.318726] do_syscall_64+0x33/0x40 [ 1897.318743] entry_SYSCALL_64_after_hwframe+0x62/0xc7 12:15:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x3}]}}}}}}}, 0x0) 12:15:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0xff}]}}}}}}}, 0x0) [ 1897.318756] RIP: 0033:0x7f29466f0b19 [ 1897.318774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.318785] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1897.318806] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 12:15:21 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x6558, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 1897.318817] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1897.318829] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1897.318839] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1897.318851] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:15:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x731}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x8, 0x100a, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x65, 0x81, 0xb3, 0x81, 0x0, 0x0, 0x400, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x40, 0x0, 0x101, 0x4, 0x1, 0xaab, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1}, 0x1) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0xb147}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x443c) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r3, &(0x7f0000000380)=0x4, 0x3) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 12:15:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 61) 12:15:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x60}]}}}}}}}, 0x0) 12:15:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) 12:15:21 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x400000, 0x10c) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x140}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000002c0), 0x4a, 0x61bf, 0x2) flock(r2, 0x6) r3 = getpid() fcntl$lock(r2, 0x24, &(0x7f0000000100)={0x2, 0x4, 0xee84, 0xf9ab, r3}) fcntl$lock(r2, 0x26, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) socketpair(0x3ebf78ed8ccfe3cc, 0x800, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/rfkill', 0x40, 0x0) r6 = memfd_create(&(0x7f00000002c0)='\xd8\xe6|\x8cEr\xcdu\a_\"\xb5\xd0\xf4\x01\x8f\b\x1c\xe6\x89\xc3\x00\b\x00\x00\xa9\x1f\xc97\xa0u\x9c\x03[\x1e0\b\xcek\x06/H\'0\x977\x82\xb4a\xd0\xad@\xec\xc4n\xfc\xa8I\x03\x8e\xd6\xe7xx\x03\x84]\bX\tn\x1d\xba\xdd&h\x9as\t\xc2\x13\xdcz\xd8\x00', 0x5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001000380613bf8000018000000", @ANYRES32=r6, @ANYBLOB="02000000000000002e2f66696c653000"]) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) linkat(r7, &(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000180)='./file1\x00', 0x0) [ 1897.557317] FAULT_INJECTION: forcing a failure. [ 1897.557317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1897.559741] CPU: 1 PID: 11516 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1897.560913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.562317] Call Trace: [ 1897.562785] dump_stack+0x107/0x167 [ 1897.563421] should_fail.cold+0x5/0xa [ 1897.564089] _copy_from_user+0x2e/0x1b0 [ 1897.564783] __copy_msghdr_from_user+0x91/0x4b0 [ 1897.565589] ? __ia32_sys_shutdown+0x80/0x80 [ 1897.566347] ? udp_v6_push_pending_frames+0x360/0x360 [ 1897.567236] ? inet6_sendmsg+0xbd/0x140 [ 1897.567922] ? inet6_compat_ioctl+0x320/0x320 [ 1897.568690] ? __sock_sendmsg+0x55/0x190 [ 1897.569412] sendmsg_copy_msghdr+0xa1/0x160 [ 1897.570148] ? do_recvmmsg+0x6d0/0x6d0 [ 1897.570825] ? __lock_acquire+0x1657/0x5b00 [ 1897.571584] ___sys_sendmsg+0xc6/0x170 [ 1897.572258] ? sendmsg_copy_msghdr+0x160/0x160 [ 1897.573046] ? __lockdep_reset_lock+0x180/0x180 [ 1897.573870] ? lock_acquire+0x197/0x470 [ 1897.574554] ? find_held_lock+0x2c/0x110 [ 1897.575268] ? __might_fault+0xd3/0x180 [ 1897.575951] ? lock_downgrade+0x6d0/0x6d0 [ 1897.576665] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1897.577619] __sys_sendmmsg+0x195/0x470 [ 1897.578314] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1897.579052] ? lock_downgrade+0x6d0/0x6d0 [ 1897.579788] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1897.580620] ? wait_for_completion_io+0x270/0x270 [ 1897.581467] ? rcu_read_lock_any_held+0x75/0xa0 [ 1897.582261] ? vfs_write+0x354/0xa70 [ 1897.582907] ? fput_many+0x2f/0x1a0 [ 1897.583536] ? ksys_write+0x1a9/0x260 [ 1897.584191] ? __ia32_sys_read+0xb0/0xb0 [ 1897.584901] __x64_sys_sendmmsg+0x99/0x100 [ 1897.585644] do_syscall_64+0x33/0x40 [ 1897.586284] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1897.587157] RIP: 0033:0x7f29466f0b19 [ 1897.587804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.590895] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1897.592193] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1897.593408] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1897.594621] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1897.595829] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1897.597036] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 [ 1897.623549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:15:21 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8035, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:15:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0xff}]}}}}}}}, 0x0) 12:15:21 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x9, 0x6, "68bd09f35aa4a169347b894b3b77f236c83b9f65abe9212314cd8df1dc20aa2c433b24a6999fa09021e87118e9498f8e64a72dbdee1719beef82e3b6265651"}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1}}, 0x7fff) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000940)={0x3, 0x80, 0x5, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext, 0x9000, 0x3, 0x7, 0x4, 0x61, 0x0, 0x5, 0x0, 0x5f}, 0x0, 0x0, 0xffffffffffffffff, 0x9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index, 0x0, 0x0, 0x0, 0x2}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) accept$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 12:15:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) pwrite64(0xffffffffffffffff, &(0x7f0000000c80)="8584b3233fb9ba8777d648f1fa8234a459d2bd1598d52d35c51ec18f68c60fd83d40fc373712825d8ff275569b8b9a965f370c6497085270f2af70b2a870063a02f417f34e59c158ed3cd742edc8c1ebae57bde80c4264b3889a4e42cbe8102319e37fbbfd5bc9704b181be4a80c64f00c6db910ce2b5113e09909149d375893431266f7c37076e5a38cbb01b741b22a441133108721f22a0f36f6c77727f036c9e14d4ffd07e956d427bdb05a039a786f1830d0e503cd6eb06bcff450d6528b313603c7854e1a71e1d1e97ebe757336f36dafa607ba13bc706534897c83a827d5e1c9772fb77ca9a1", 0xe9, 0x8) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5327, &(0x7f0000000440)=@disckey={0x2, 0x2, "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"}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x2, '\x00', @d}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b33, &(0x7f0000000040)={0x2, {0x4}}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open_tree(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000700000a00000000000000ff010000000000000000f50000000009000000ed0000000000000000000000000000000000000000000000000000000040000000000706000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000006aab9c848249000000000000000000"], 0x110) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="0200008f1a0000000000007e", @ANYRES32=r0, @ANYBLOB="000000008e00"/28, @ANYRES32, @ANYBLOB="000000000200"/22, @ANYRES32=r4, @ANYBLOB="000000000f0200"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/27, @ANYRES32=r0, @ANYBLOB="00000000ff0100"/28]) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r5, 0x0) unshare(0x48020200) 12:15:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x2}]}}}}}}}, 0x0) 12:15:36 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8100, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 12:15:36 executing program 4: mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r3, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r3, 0xa) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x48810}, 0x800) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x81, 0x20, 0xfe, 0x0, 0x92e2, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0x406, 0x6, 0x7, 0x4, 0x8, 0x6, 0x2, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x3, 0x8, 0x7e44aad, 0x0, 0x5}) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) chown(0x0, 0xee00, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x2000000, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) setresuid(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000218000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 12:15:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) (fail_nth: 62) 12:15:36 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1f, 0x9, 0x4f, 0x8, 0x0, 0x8, 0x800, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x7, 0xfffffffffffffff9}, 0x6400, 0x7f, 0x1000, 0x4, 0x1f, 0x6, 0x6, 0x0, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x4, r0, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x9c20, 0x0, 0x0, 0x1ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x20, 0x3, 0x0, 0x0, 0x3c, 0x20050, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x1a200, 0x9ff, 0x4b, 0x6, 0x0, 0x6, 0x228d, 0x0, 0xffffffff, 0x0, 0x669}, 0xffffffffffffffff, 0xf, r0, 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:15:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) ftruncate(0xffffffffffffffff, 0xef) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) accept4(r2, &(0x7f0000000600)=@xdp, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={0x0, "19728eaf6e22add0a2ec6e80d76ae06c"}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r3, &(0x7f00000034c0)=""/4099, 0x1003, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x3, 0x20, 0x6, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x99}, 0x4000, 0x2, 0xe3, 0x4, 0x5, 0x9, 0x1000, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x8, r3, 0xa) write$P9_RLERROR(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00d30007017434ffee00040000946741c88444a893fc5c0bbe461d9867cfaf7129f73209c7ed1e4fc0ff4d336a69b28ec9c0244e543a6e51bf742efe4ae2a668e43906"], 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) sendfile(r0, r1, 0x0, 0x20d315) r5 = socket$inet(0xa, 0x3, 0xff) sendto(r5, 0x0, 0xfc, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0x80fe}, 0x80) 12:15:36 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x9, 0x6, "68bd09f35aa4a169347b894b3b77f236c83b9f65abe9212314cd8df1dc20aa2c433b24a6999fa09021e87118e9498f8e64a72dbdee1719beef82e3b6265651"}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1}}, 0x7fff) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000940)={0x3, 0x80, 0x5, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext, 0x9000, 0x3, 0x7, 0x4, 0x61, 0x0, 0x5, 0x0, 0x5f}, 0x0, 0x0, 0xffffffffffffffff, 0x9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index, 0x0, 0x0, 0x0, 0x2}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) accept$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 12:15:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x3}]}}}}}}}, 0x0) 12:15:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh]}}}}}}}, 0x0) [ 1912.383608] [ 1912.383946] ====================================================== [ 1912.384908] WARNING: possible circular locking dependency detected [ 1912.385870] 5.10.209 #1 Not tainted [ 1912.386409] ------------------------------------------------------ [ 1912.387338] syz-executor.6/11557 is trying to acquire lock: [ 1912.388174] ffff88800d3acb78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 1912.389733] [ 1912.389733] but task is already holding lock: [ 1912.390605] ffffffff85619668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1912.391934] [ 1912.391934] which lock already depends on the new lock. [ 1912.391934] [ 1912.393142] [ 1912.393142] the existing dependency chain (in reverse order) is: [ 1912.397911] [ 1912.397911] -> #5 (rfkill_global_mutex){+.+.}-{3:3}: [ 1912.398939] __mutex_lock+0x13d/0x10b0 [ 1912.399607] rfkill_register+0x36/0xa10 [ 1912.400291] hci_register_dev+0x42e/0xc00 [ 1912.401001] __vhci_create_device+0x2c8/0x5c0 [ 1912.401768] vhci_open_timeout+0x38/0x50 [ 1912.402462] process_one_work+0x9a9/0x14b0 [ 1912.403180] worker_thread+0x61d/0x1310 [ 1912.403857] kthread+0x38f/0x470 [ 1912.404445] ret_from_fork+0x22/0x30 [ 1912.405072] [ 1912.405072] -> #4 (&data->open_mutex){+.+.}-{3:3}: [ 1912.406075] __mutex_lock+0x13d/0x10b0 [ 1912.406745] vhci_send_frame+0x63/0xa0 [ 1912.407446] hci_send_frame+0x1b9/0x320 [ 1912.408188] hci_cmd_work+0x15e/0x2d0 [ 1912.408860] process_one_work+0x9a9/0x14b0 [ 1912.409591] worker_thread+0x61d/0x1310 [ 1912.410266] kthread+0x38f/0x470 [ 1912.410857] ret_from_fork+0x22/0x30 [ 1912.411486] [ 1912.411486] -> #3 ((work_completion)(&hdev->cmd_work)){+.+.}-{0:0}: [ 1912.412697] process_one_work+0x92d/0x14b0 [ 1912.413421] worker_thread+0x61d/0x1310 [ 1912.414102] kthread+0x38f/0x470 [ 1912.414694] ret_from_fork+0x22/0x30 [ 1912.415334] [ 1912.415334] -> #2 ((wq_completion)hci0#2){+.+.}-{0:0}: [ 1912.416378] flush_workqueue+0x105/0x1140 [ 1912.417172] drain_workqueue+0x1a5/0x3c0 [ 1912.417878] hci_dev_reset+0x255/0x6b0 [ 1912.418552] hci_sock_ioctl+0x3b2/0x980 [ 1912.419234] sock_do_ioctl+0xd3/0x300 [ 1912.419888] sock_ioctl+0x3ea/0x700 [ 1912.420521] __x64_sys_ioctl+0x19a/0x210 [ 1912.421228] do_syscall_64+0x33/0x40 [ 1912.421878] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1912.422730] [ 1912.422730] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1912.423697] __mutex_lock+0x13d/0x10b0 [ 1912.424367] bg_scan_update+0x82/0x500 [ 1912.425035] process_one_work+0x9a9/0x14b0 [ 1912.425765] worker_thread+0x61d/0x1310 12:15:36 executing program 5: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @local}}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000200)={@multicast1, @remote, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={r4, @rand_addr=0x64010103, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) lseek(r0, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) lseek(r6, 0x2, 0x1) r7 = openat(r5, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x100000001) [ 1912.426456] kthread+0x38f/0x470 [ 1912.427231] ret_from_fork+0x22/0x30 [ 1912.427875] [ 1912.427875] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1912.429175] __lock_acquire+0x29e7/0x5b00 [ 1912.429899] lock_acquire+0x197/0x470 [ 1912.430558] __flush_work+0x105/0xa90 [ 1912.431220] __cancel_work_timer+0x368/0x4c0 [ 1912.431967] hci_request_cancel_all+0x73/0x230 [ 1912.432743] hci_dev_do_close+0xd9/0x1240 [ 1912.433463] hci_rfkill_set_block+0x166/0x1a0 [ 1912.434228] rfkill_set_block+0x1fd/0x540 [ 1912.434942] rfkill_fop_write+0x253/0x4b0 [ 1912.435652] vfs_write+0x29a/0xa70 [ 1912.436254] ksys_write+0x1f6/0x260 [ 1912.436870] do_syscall_64+0x33/0x40 [ 1912.437504] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1912.438333] [ 1912.438333] other info that might help us debug this: [ 1912.438333] [ 1912.439525] Chain exists of: [ 1912.439525] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1912.439525] [ 1912.441555] Possible unsafe locking scenario: [ 1912.441555] [ 1912.442434] CPU0 CPU1 [ 1912.443140] ---- ---- [ 1912.443835] lock(rfkill_global_mutex); [ 1912.444461] lock(&data->open_mutex); [ 1912.445432] lock(rfkill_global_mutex); [ 1912.446430] lock((work_completion)(&hdev->bg_scan_update)); [ 1912.447333] [ 1912.447333] *** DEADLOCK *** [ 1912.447333] [ 1912.448236] 1 lock held by syz-executor.6/11557: [ 1912.448959] #0: ffffffff85619668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1912.450409] [ 1912.450409] stack backtrace: [ 1912.451102] CPU: 1 PID: 11557 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1912.452166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1912.453524] Call Trace: [ 1912.454066] dump_stack+0x107/0x167 [ 1912.454624] check_noncircular+0x263/0x2e0 [ 1912.455270] ? register_lock_class+0xbb/0x17b0 [ 1912.455967] ? print_circular_bug+0x470/0x470 [ 1912.456666] ? find_first_zero_bit+0x94/0xb0 [ 1912.457412] ? alloc_chain_hlocks+0x342/0x5a0 [ 1912.458225] __lock_acquire+0x29e7/0x5b00 [ 1912.458873] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1912.459763] ? SOFTIRQ_verbose+0x10/0x10 [ 1912.460390] ? __lockdep_reset_lock+0x180/0x180 12:15:36 executing program 1: msgsnd(0x0, 0x0, 0x3f9, 0x0) msgsnd(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r0 = msgget(0x0, 0xc) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000300)=""/178) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x1) msgrcv(r1, &(0x7f0000000140)={0x0, ""/109}, 0x75, 0x2, 0x800) getpgrp(0x0) pipe(&(0x7f00000002c0)) getpgrp(0x0) msgget$private(0x0, 0x202) msgctl$IPC_RMID(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x38b, 0x4}, 0x0, 0x6, 0x1022, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) msgsnd(r0, &(0x7f0000000640)={0x1, "1e75cc2117f5b3e7d08300ab8554d3341b0dff76cc708bf0eec7260918175b40c731aa63ea9b9d70e313c77043f7eaf13a6e6ea3f24827595a06943a6b3334b94b0e781b13c5ce1acbd3c0fa3a52f1a0a0ee145617a616e19d1d2049c67ca1caa4abd23edd7310c792468ef977a64e3e82c3dec44ef2b814607a599e4f8ef0794a859087b200fddaf051a8ab993a84644750952ded2771d3947ea7f3e8f6fa874ac968a6210ea4947468f628f8af5558216d35199a053d33"}, 0xc0, 0x0) msgsnd(r1, &(0x7f0000000040)={0x0, "481d1db5f1d5cbd84f3757c2b03ed94fae9fd5b3d46400f3bda2c231ff9a901743f08284c3338824fb561da6625ca7af0ca9f3723a7da98e993f1320d1daca879c7e069bc0b9176858c0688670f1a551a65a412ade80ca61b800e7"}, 0x63, 0x800) [ 1912.461101] ? mark_lock+0xf5/0x2df0 [ 1912.461810] lock_acquire+0x197/0x470 [ 1912.462426] ? __flush_work+0xdd/0xa90 [ 1912.463087] ? lock_release+0x680/0x680 [ 1912.463764] ? __flush_work+0x78c/0xa90 [ 1912.464450] ? lock_downgrade+0x6d0/0x6d0 [ 1912.465192] __flush_work+0x105/0xa90 [ 1912.465837] ? __flush_work+0xdd/0xa90 [ 1912.466525] ? lock_chain_count+0x20/0x20 [ 1912.467171] ? queue_delayed_work_on+0xe0/0xe0 [ 1912.467967] ? mark_lock+0xf5/0x2df0 [ 1912.468624] ? lock_acquire+0x197/0x470 [ 1912.469367] ? find_held_lock+0x2c/0x110 [ 1912.469999] ? __wake_up_common_lock+0xde/0x140 [ 1912.470807] ? mark_held_locks+0x9e/0xe0 [ 1912.471421] __cancel_work_timer+0x368/0x4c0 [ 1912.472148] ? cancel_delayed_work+0x20/0x20 [ 1912.472952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1912.473861] ? __cancel_work+0x1bb/0x2b0 [ 1912.474559] ? try_to_grab_pending+0xe0/0xe0 [ 1912.475388] hci_request_cancel_all+0x73/0x230 [ 1912.476173] hci_dev_do_close+0xd9/0x1240 [ 1912.476887] ? rfkill_set_block+0x18f/0x540 [ 1912.477673] ? hci_dev_open+0x350/0x350 [ 1912.478301] ? mark_held_locks+0x9e/0xe0 [ 1912.479024] hci_rfkill_set_block+0x166/0x1a0 [ 1912.479707] ? hci_power_off+0x20/0x20 [ 1912.480307] rfkill_set_block+0x1fd/0x540 [ 1912.481027] rfkill_fop_write+0x253/0x4b0 [ 1912.481773] ? rfkill_sync_work+0xa0/0xa0 [ 1912.482498] ? security_file_permission+0x24e/0x570 [ 1912.483347] ? rfkill_sync_work+0xa0/0xa0 [ 1912.484104] vfs_write+0x29a/0xa70 [ 1912.484658] ksys_write+0x1f6/0x260 [ 1912.485230] ? __ia32_sys_read+0xb0/0xb0 [ 1912.485944] do_syscall_64+0x33/0x40 [ 1912.486597] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1912.487455] RIP: 0033:0x7fec6084ab19 [ 1912.488108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1912.491030] RSP: 002b:00007fec5ddc0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1912.492322] RAX: ffffffffffffffda RBX: 00007fec6095df60 RCX: 00007fec6084ab19 [ 1912.493537] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1912.494707] RBP: 00007fec608a4f6d R08: 0000000000000000 R09: 0000000000000000 [ 1912.495853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1912.497088] R13: 00007ffe3453ceff R14: 00007fec5ddc0300 R15: 0000000000022000 [ 1912.517181] FAULT_INJECTION: forcing a failure. [ 1912.517181] name fail_usercopy, interval 1, probability 0, space 0, times 0 12:15:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x60}]}}}}}}}, 0x0) [ 1912.519276] CPU: 1 PID: 11562 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 1912.520616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1912.521948] Call Trace: [ 1912.522455] dump_stack+0x107/0x167 [ 1912.523098] should_fail.cold+0x5/0xa [ 1912.523698] _copy_from_user+0x2e/0x1b0 [ 1912.524322] __copy_msghdr_from_user+0x91/0x4b0 [ 1912.525064] ? __ia32_sys_shutdown+0x80/0x80 [ 1912.525894] ? udp_v6_push_pending_frames+0x360/0x360 [ 1912.526809] ? inet6_sendmsg+0xbd/0x140 [ 1912.527426] ? inet6_compat_ioctl+0x320/0x320 [ 1912.528242] ? __sock_sendmsg+0x55/0x190 [ 1912.528946] sendmsg_copy_msghdr+0xa1/0x160 [ 1912.529736] ? do_recvmmsg+0x6d0/0x6d0 [ 1912.530408] ? kfree+0x1ab/0x340 [ 1912.531074] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1912.531999] ? trace_hardirqs_on+0x5b/0x180 [ 1912.532674] ___sys_sendmsg+0xc6/0x170 [ 1912.533345] ? sendmsg_copy_msghdr+0x160/0x160 [ 1912.534187] ? __lockdep_reset_lock+0x180/0x180 [ 1912.534973] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1912.535721] ? lock_release+0x4d1/0x680 [ 1912.536411] ? __might_fault+0xd3/0x180 [ 1912.537013] ? lock_downgrade+0x6d0/0x6d0 [ 1912.537730] __sys_sendmmsg+0x195/0x470 [ 1912.538425] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1912.539171] ? lock_downgrade+0x6d0/0x6d0 [ 1912.539892] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1912.540737] ? wait_for_completion_io+0x270/0x270 [ 1912.541565] ? rcu_read_lock_any_held+0x75/0xa0 [ 1912.542353] ? vfs_write+0x354/0xa70 [ 1912.542989] ? fput_many+0x2f/0x1a0 [ 1912.543657] ? ksys_write+0x1a9/0x260 [ 1912.544280] ? __ia32_sys_read+0xb0/0xb0 [ 1912.544996] __x64_sys_sendmmsg+0x99/0x100 [ 1912.545774] do_syscall_64+0x33/0x40 [ 1912.546426] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1912.547314] RIP: 0033:0x7f29466f0b19 [ 1912.547899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1912.551153] RSP: 002b:00007f2943c66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1912.552443] RAX: ffffffffffffffda RBX: 00007f2946803f60 RCX: 00007f29466f0b19 [ 1912.553731] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1912.554922] RBP: 00007f2943c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1912.556237] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 1912.557419] R13: 00007ffeebbf0a2f R14: 00007f2943c66300 R15: 0000000000022000 12:15:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}}}}}}}, 0x0) 12:15:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "731501", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9778fb", 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}]}}}}}}}, 0x0) VM DIAGNOSIS: 12:15:36 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88804e6c7c58 RCX=1ffff11009cd8f01 RDX=1ffff11009cd8f8d RSI=ffffffff81748b20 RDI=ffff88804e6c7c68 RBP=ffff88804e6c7c28 RSP=ffff88804e6c7b80 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff11009cd8f61 R12=ffff88804e6c7c58 R13=0000000000000000 R14=ffff8880495e3480 R15=ffff88804d5fc400 RIP=ffffffff812ff152 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f344a7d68c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c033666be8 CR3=00000000492de000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=00000000dddd06aa EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=7269762f736563697665642f7379732f XMM01=006964622f6c6175747269762f736563 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=703e2d73004c414954494e495f544e45 XMM09=00000000000000000000000000000000 XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822cbe31 RDI=ffffffff879e8240 RBP=ffffffff879e8200 RSP=ffff8880519ef1c8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000020 R13=0000000000000020 R14=ffffffff879e8200 R15=dffffc0000000000 RIP=ffffffff822cbe88 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fec5ddc0700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020005038 CR3=000000004b36c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000