octl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth1_to_bridge\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1300000007000000018000040500000086cdde889fcff2fea0b23477607c89c857ffccaec44e491c0dd8bad17e6c91775dd09e92e5a557ecd6dd03c935130db332e66a4dcc65c4ca3148daec95b2bad8f0da506af0335b8e728ee229537a6e50583ebe0fd3747b5c023447e2234c32d0d76cf7d16563a9b965e4c44eec56351d3bd81ec5db130bc9cb62d799e9d5d5c95c2696529c36c49ad2e9aedb"]}) pidfd_getfd(r0, r1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400300001400010000000200040000000a00000008000000", @ANYBLOB="1d0001"], 0x340}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 1874.648343] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1874.649406] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1874.650119] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1874.650857] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 1874.651698] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1874.652920] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1874.679179] 9pnet: Insufficient options for proto=fd [ 1874.706173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1874.707055] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1874.708301] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1874.708320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1874.710455] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1874.711032] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1874.713730] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1874.713748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1874.715859] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1874.716446] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1874.716509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1874.718358] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1874.719109] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1874.720163] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 1874.721350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1874.723398] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1874.724271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1874.725252] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 1874.727650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1874.729638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1874.747280] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 1874.749108] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 1874.750867] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 1874.752617] Buffer I/O error on dev loop7, logical block 2096903, async page read 15:55:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:55:19 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0xb, 0x7) shutdown(r2, 0x1) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}]}, 0x18, 0x0) kcmp(0x0, 0x0, 0x1, r0, r0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x48042) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:55:19 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:55:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c1442, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7f, 0x2, 0x3f, 0x1, 0x0, 0xfff, 0x4800, 0x9dba0ef8bfee2058, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000040), 0x5}, 0x2030, 0x1, 0x80, 0x8, 0x493b, 0x101, 0xcf36, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x1, r1, 0x1) 15:55:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:55:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000001180)=""/4091, 0xffb) 15:55:19 executing program 5: add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000000)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae83abe4c1a4b44f564bc6d27048235269010f99ea715085731fa8ad0600", 0x3e, 0x0) 15:55:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x9, 0x0, @fd_index=0x5, 0x4, 0x9, 0xac17, 0x19, 0x0, {0x3, r2}}, 0xaa) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r3, 0x0, 0x80000001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {r8}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000940)={r7, r8, "6c1a29d5891f85195afb07416023eea1e6609b7c44b8df416d53741145eeccb9a33b517434b2f1982fec0d300131dc60f9719fb9ca9f466a5d77470e3987a6940b617ea947226283b4fa7ae241040bf1f072715ba6603b516e3b6bf33efea275ae1d6518539ec05aa501e4c0876ca1b9c961396005e4aa59a4313519e7b4ebd0147cca32660dae8e83895a8187879d7f3e6aca1c7fcf6511c1dfdcefe8d4d9429c49ee3390b69fd02ae3ca237c7b6673d6c874e0e65e0149317ab3b57767a5f0d15ae4ed7a85b27ccf60d91707c8087a672d1bbe43484ea97afc9d7a2eb658a2941eb2fce68e71833ce4c105ea144de10c534e2c2a1734e4d6aa52b5f7d33309", "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"}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) syz_io_uring_setup(0x1d, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1888.931801] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:55:19 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0xb, 0x7) shutdown(r2, 0x1) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}]}, 0x18, 0x0) kcmp(0x0, 0x0, 0x1, r0, r0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x48042) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:55:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed5"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:55:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) [ 1889.013951] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1889.015063] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1889.015844] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1889.016584] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 07 ff c0 00 00 02 00 [ 1889.017472] print_req_error: 8 callbacks suppressed [ 1889.017483] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1889.019187] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 15:55:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1444e2, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00'], 0x0, 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) syz_io_uring_setup(0x6c58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000140)) openat(r1, &(0x7f0000000040)='./file0\x00', 0x408000, 0x89) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000080)=0xfffffffffffffe70) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x2000, 0x3d2a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000001a00)="55b45f5d7b614b4e8a693667cb78eabd040dd48f947375d079fecd0dc482fe98fcda24339b38ede40ce52f4954d1a123809ad01fb9f05af733bdeae60847e6465e87d3", 0x43, 0x7fff) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1889.029907] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1889.072609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.073291] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1889.074520] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1889.075679] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1889.076666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.077303] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1889.078549] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1889.079716] Buffer I/O error on dev loop7, logical block 2096897, async page read 15:55:19 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f00000002c0)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x717e, 0x1c5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r4, r5, &(0x7f0000000140)=0x240000000, 0x3) sendfile(r0, r1, 0x0, 0x20d315) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0xfdef) getpgid(0x0) socket$packet(0x11, 0x0, 0x300) creat(&(0x7f00000000c0)='./file0\x00', 0x108) socket$inet_udplite(0x2, 0x2, 0x88) [ 1889.081796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.083003] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1889.084255] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1889.085438] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 1889.086421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.087023] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1889.088261] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1889.089433] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 1889.090435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.091105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.091848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.092568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.093270] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 1889.094111] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 1889.094958] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 1889.095815] Buffer I/O error on dev loop7, logical block 2096903, async page read 15:55:19 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0xb, 0x7) shutdown(r2, 0x1) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}]}, 0x18, 0x0) kcmp(0x0, 0x0, 0x1, r0, r0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x48042) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:55:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed5"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 1889.231914] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:55:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed5"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 1889.318110] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1889.368069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.369442] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1889.374954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.375607] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1889.376766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.378349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.379098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.379854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.380650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.381496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.464835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.466046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.466739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.467396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.468026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.468691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.469336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1889.469963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:55:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:55:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed5"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:55:20 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0xb, 0x7) shutdown(r2, 0x1) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}]}, 0x18, 0x0) kcmp(0x0, 0x0, 0x1, r0, r0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x48042) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:55:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:55:20 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r3 = perf_event_open(0x0, 0x0, 0x4, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x26) kcmp(0xffffffffffffffff, 0x0, 0x6, r0, 0xffffffffffffffff) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) pkey_alloc(0x0, 0x1) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x3, 0xfd, 0xe0, 0x7f, 0x0, 0x8fc, 0x10, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x64, 0x5}, 0x400, 0x7, 0x1000, 0x2, 0x1, 0x7f, 0xfff8, 0x0, 0x4566, 0x0, 0x7}, 0xffffffffffffffff, 0x8, r3, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x9bbb) 15:55:20 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x98}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x110, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe2(0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x65a8, 0x9f4a, 0x1, &(0x7f00000000c0)={[0xa0f]}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r5, 0x4, 0x7}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r6, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r7, 0x0) pread64(r7, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:55:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) [ 1889.829736] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:55:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) [ 1889.875043] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:55:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:55:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) [ 1890.015844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1890.016865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1890.017567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1890.018250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1890.018918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1890.019595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1890.020282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1890.020940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:55:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) 15:55:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:55:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='.\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f0000000300)="eb3c906d6b00f8016eec25547d6f072974d6f6e78e4ae9d471a813f8d449", 0x1e}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x2) utimensat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f0000000380), 0x1, 0x1, 0x0, {0x0, r3}}, 0x10000) fchown(r2, 0xee00, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x1}, 0xfffffe02}}, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="efffffffffffffffff052669ffffff08004500001c006ea10000029078ac1e0001ffffffff110890587f"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x40) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x179043, 0x0) 15:55:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:55:39 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000580)=@updsa={0xf0, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x6c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) syz_io_uring_setup(0x7081, &(0x7f0000000000)={0x0, 0xfa90, 0x0, 0x1, 0x28c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x10001, 0x2, &(0x7f0000000100)="e9dbcfe25c95ec25931c12fa8a38f2efe0403bb5bab0f2380c79ab4bee97d2d12917fbd2f0fe2a45cfe7754a30358b811175affda690c00aec2e7000070c457d997da527fa9db2506f4c", 0x0, 0x0, 0x1, {0x2}}, 0x1) 15:55:39 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r3 = perf_event_open(0x0, 0x0, 0x4, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x26) kcmp(0xffffffffffffffff, 0x0, 0x6, r0, 0xffffffffffffffff) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) pkey_alloc(0x0, 0x1) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x3, 0xfd, 0xe0, 0x7f, 0x0, 0x8fc, 0x10, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x64, 0x5}, 0x400, 0x7, 0x1000, 0x2, 0x1, 0x7f, 0xfff8, 0x0, 0x4566, 0x0, 0x7}, 0xffffffffffffffff, 0x8, r3, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x9bbb) 15:55:39 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x800, 0x3}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000002c0)={{0x77359400}, {r2, r3+60000000}}, &(0x7f0000000300)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000004) timer_gettime(0x0, 0x0) timer_gettime(0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:55:39 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 1908.857730] FAT-fs (loop5): invalid media value (0x4a) [ 1908.859142] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1908.920901] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1908.984025] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value [ 1909.318804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1909.320043] print_req_error: 56 callbacks suppressed [ 1909.320063] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1909.324000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1909.325139] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1909.327303] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1909.327324] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1909.327374] buffer_io_error: 22 callbacks suppressed [ 1909.327385] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1909.329518] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1909.336111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1909.337299] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1909.339446] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1909.339500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1909.341633] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 1909.342726] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1909.346406] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1909.346457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1909.348596] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 1909.349685] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1909.353392] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1909.353442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1909.355545] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 1909.356744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1909.358314] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 1909.359808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1909.360861] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 1909.363518] Buffer I/O error on dev loop7, logical block 2096903, async page read 15:55:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:55:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) fallocate(r0, 0x0, 0x2, 0x4) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x1c, r1, 0xc0b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x39}, @void, @val={0xc, 0x99, {0x6, 0x78}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x40400d0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) 15:55:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:55:56 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2104}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="118bb5d773e9f803086494f3695d89b85af816610400ab5375e34137c767ee5bec22d304762b556b2254e2577d6a1e62da15e95470e7b69bd305e092fda8a05b1211c92adeea1a3d9e6d04c74b6336eba425184d085879b98c9c8dea9580ca99dd8627369750bc3061a5d32bf2f0004185a53b58714b9277fe4bbf828fe13b7c1397e8aa552d517e7b528e12ef5c2d3c8eb0b8aff6992acebcb6cb7bb2ec7f3aa9db202ff414"]) 15:55:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) 15:55:56 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random="aeb581414a86", @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x1c}, @local}, @dest_unreach={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}}, 0x0) 15:55:56 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r0, 0x8, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000100)=0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/i2c_algo_bit', 0x100, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000400)={0x2, 0x5, 0xc1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0xfe}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x0, 0x1d24, 0x0, 0x100, 0x80000001, 0x2000040, r2}) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xa8b9, @loopback}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001840)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd, 0x51b, &(0x7f0000001e00)="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", 0x1000, 0x8}, 0x401) dup2(r1, r5) 15:55:56 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x3, 0x0, 0x81, 0xee, 0x0, 0x8, 0x8c010, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x8}, 0x8008, 0x1b858, 0x6, 0x3, 0xe1, 0x32, 0x6, 0x0, 0x200, 0x0, 0xd9}, 0x0, 0x6, r0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000100001000000000000000000ff020000000000000000000000000001fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r4], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r6, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) r7 = accept4(r4, &(0x7f0000000400)=@rc, &(0x7f0000000240)=0x80, 0x800) getsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000300)=""/220, &(0x7f00000001c0)=0xdc) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) copy_file_range(r8, 0x0, r8, &(0x7f00000000c0)=0x6, 0x6, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9286, 0x0, 0xc39, 0xa6219d3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) [ 1925.830018] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:55:56 executing program 5: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="200029bd7000ffdbdf2521000000080003", @ANYRES32=0x0, @ANYBLOB="0c0099001f0000004c000000080077000500000011002a0025030106c672060303"], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='limits\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r2 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) clock_gettime(0x0, &(0x7f0000001940)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="32a7f25db1cc960c2e2f66696c6530"]) dup2(r5, r6) 15:55:56 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8c) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x1, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x7, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x100) chmod(&(0x7f0000000280)='./file1\x00', 0x92) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x4) clone3(&(0x7f00000004c0)={0x200000000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), {0x10}, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/80, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, {r1}}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=\aone,\x00']) [ 1926.003732] EXT4-fs (loop1): Unrecognized mount option "‹µ×séød”ói]‰¸Zøa" or missing value 15:55:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) [ 1926.034944] 9p: Unknown Cache mode one 15:55:56 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x3, 0x0, 0x81, 0xee, 0x0, 0x8, 0x8c010, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x8}, 0x8008, 0x1b858, 0x6, 0x3, 0xe1, 0x32, 0x6, 0x0, 0x200, 0x0, 0xd9}, 0x0, 0x6, r0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000100001000000000000000000ff020000000000000000000000000001fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r4], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r6, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) r7 = accept4(r4, &(0x7f0000000400)=@rc, &(0x7f0000000240)=0x80, 0x800) getsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000300)=""/220, &(0x7f00000001c0)=0xdc) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) copy_file_range(r8, 0x0, r8, &(0x7f00000000c0)=0x6, 0x6, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9286, 0x0, 0xc39, 0xa6219d3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) 15:55:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c7"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:55:56 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x3, 0x0, 0x81, 0xee, 0x0, 0x8, 0x8c010, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x8}, 0x8008, 0x1b858, 0x6, 0x3, 0xe1, 0x32, 0x6, 0x0, 0x200, 0x0, 0xd9}, 0x0, 0x6, r0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000100001000000000000000000ff020000000000000000000000000001fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r4], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r6, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) r7 = accept4(r4, &(0x7f0000000400)=@rc, &(0x7f0000000240)=0x80, 0x800) getsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000300)=""/220, &(0x7f00000001c0)=0xdc) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) copy_file_range(r8, 0x0, r8, &(0x7f00000000c0)=0x6, 0x6, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9286, 0x0, 0xc39, 0xa6219d3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) 15:55:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0), 0x0, 0x102, 0x0) [ 1926.208024] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:55:56 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1cf}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff) r3 = syz_io_uring_setup(0x4d9d, &(0x7f0000000140)={0x0, 0xddff, 0x10, 0x2, 0x25c, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) ioctl$int_out(r3, 0x2, &(0x7f0000000380)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x9d, &(0x7f0000000240)=@l2={0x1f, 0x0, @none}, 0x0, 0x800, 0x0, {0x0, r2}}, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r0, 0x0) fallocate(r0, 0x30, 0x1, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000006000000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f01f9feff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x5}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f00000003c0)="ed843883599fa3abbda062865c5cde49de4fc6008bdc06084538137fd9a47ec3c5af33a37270", 0x26, 0x2100}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="64617405000000723d6e6f86656c616c6c6f432c0000000000020000"]) [ 1926.325988] device veth0_vlan entered promiscuous mode [ 1926.429063] EXT4-fs (loop6): Unrecognized mount option "dat" or missing value [ 1926.525998] device veth0_vlan entered promiscuous mode 15:55:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:55:56 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2104}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="118bb5d773e9f803086494f3695d89b85af816610400ab5375e34137c767ee5bec22d304762b556b2254e2577d6a1e62da15e95470e7b69bd305e092fda8a05b1211c92adeea1a3d9e6d04c74b6336eba425184d085879b98c9c8dea9580ca99dd8627369750bc3061a5d32bf2f0004185a53b58714b9277fe4bbf828fe13b7c1397e8aa552d517e7b528e12ef5c2d3c8eb0b8aff6992acebcb6cb7bb2ec7f3aa9db202ff414"]) 15:55:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0), 0x0, 0x102, 0x0) 15:55:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c7"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:55:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c7"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:55:56 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x3, 0x0, 0x81, 0xee, 0x0, 0x8, 0x8c010, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x8}, 0x8008, 0x1b858, 0x6, 0x3, 0xe1, 0x32, 0x6, 0x0, 0x200, 0x0, 0xd9}, 0x0, 0x6, r0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000100001000000000000000000ff020000000000000000000000000001fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e00000010000000000d0a9644b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000a000000000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040000000976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b383f1a101181d80bf6aa92f3c32986cf87eb5b05e560b99787e491be72f7aec248daa70757254e8f7dc6f5c5193c0345a596a157aef663559beea691b102dc245575d3d3f5a6cbc8b389c92dc44d3af81bcf127ca507a17be5851b9f9b593321b2aa46af147d4fe5abd83a311c02d2cfe4102a67545ecad3f46cafb4c2d17d5d3574dfdd9d8a6142dc344b6b4670b7ba2bd468804b6de51072d99080fff888d65084f107ccda4521e1b4dfd523587c1fd2064038d05b"], 0x160}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r4], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r6, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) r7 = accept4(r4, &(0x7f0000000400)=@rc, &(0x7f0000000240)=0x80, 0x800) getsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000300)=""/220, &(0x7f00000001c0)=0xdc) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) copy_file_range(r8, 0x0, r8, &(0x7f00000000c0)=0x6, 0x6, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9286, 0x0, 0xc39, 0xa6219d3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) 15:55:56 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1cf}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff) r3 = syz_io_uring_setup(0x4d9d, &(0x7f0000000140)={0x0, 0xddff, 0x10, 0x2, 0x25c, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) ioctl$int_out(r3, 0x2, &(0x7f0000000380)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x9d, &(0x7f0000000240)=@l2={0x1f, 0x0, @none}, 0x0, 0x800, 0x0, {0x0, r2}}, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r0, 0x0) fallocate(r0, 0x30, 0x1, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000006000000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f01f9feff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x5}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f00000003c0)="ed843883599fa3abbda062865c5cde49de4fc6008bdc06084538137fd9a47ec3c5af33a37270", 0x26, 0x2100}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="64617405000000723d6e6f86656c616c6c6f432c0000000000020000"]) [ 1926.705078] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1926.741090] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1926.771345] device veth0_vlan entered promiscuous mode [ 1926.785868] EXT4-fs (loop1): Unrecognized mount option "‹µ×séød”ói]‰¸Zøa" or missing value 15:55:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0), 0x0, 0x102, 0x0) [ 1926.884748] EXT4-fs (loop6): Unrecognized mount option "dat" or missing value [ 1927.254510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.255760] print_req_error: 6 callbacks suppressed [ 1927.255777] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1927.258992] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1927.259032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.261566] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1927.262628] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1927.266559] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1927.266692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.269106] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1927.272317] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1927.274436] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1927.274484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.276973] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 1927.278025] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1927.282057] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1927.282315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.284594] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 1927.285614] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1927.289467] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1927.289515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.291986] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 1927.293149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.294891] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 1927.295975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.297684] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 1927.300554] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 1927.361272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.362730] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1927.364532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.365999] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1927.367776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.369311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.370784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.372179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.373572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.374768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.436481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.437407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.438171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.439343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.440120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.441180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.442052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1927.443027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:56:19 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) [ 1949.662174] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:56:19 executing program 5: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="200029bd7000ffdbdf2521000000080003", @ANYRES32=0x0, @ANYBLOB="0c0099001f0000004c000000080077000500000011002a0025030106c672060303"], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='limits\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r2 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) clock_gettime(0x0, &(0x7f0000001940)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="32a7f25db1cc960c2e2f66696c6530"]) dup2(r5, r6) 15:56:19 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x1) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80000, 0xe6) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="b20e2bcf258b27585880a8de9b0ea35584de68b8b581f958cd8bbadd1a8a64ae9c486b30fdd2f8730722b1fed70fb329f062943b92a91052802852f7c86404db2aebefed0d5fff1c218934a82146dc20533f5f21cd926247603b99d564d2ef669b85f3f5c8b47c9a56b7f81479a71815db9e660b90b51a473d55b78a4ccf4cbaee7446ed91ae58a7f3d5f34b58da", 0x8e}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="c1b3ce8f2f0116ab0b4e4c2a6fedb229634d2a59cbc169feb2b410b17a6f984b281899dadebed8d4f515dad18866ce48780905c02cc0cbd8273040b46ce985d811246c8e4ec68495ec53ac130cbc3540038cfe44c39c1d8d5d4de28e5913fd48a7ac1563384c8aa6139a1098cfc11d04659d84758cfc1d8b46fb973cbd6f21ae47e497260e123f1f3ee08379d0cba56cf6d59ebfa6aa5ab245eccf365912f27889fc4db202a2943ff433c1bdff24904f442c796a0a26604c4b8e39193b16928bf072e63af1b62103d281fb80cc110d92a72aef", 0xd3}, {&(0x7f00000002c0)="1420fdc7cfb5d2894bef077a20b5ce29cd6b9e49a857225e7a6c14d5ce2dc616fa354d117e955b690908e1d4d8db0dc03f5107d927768213b5f1e771d91f2830bef22cd08251b63ee013cd524524c88b007d84f1ee3fc0", 0x57}, {&(0x7f0000000340)="4ac09f6a4e47ac252f4153172e8cbb49ef51d2c25ae86ce8dc977481263e804afad23e346d5f31dfd609ed3d006136e10be05a48989e739d982a0863bcab67056f0d22a893273c1d41f74bd75626eb8b98587b495053404b42511e60238c1a2cd282979d028e5657637d287669", 0x6d}, {&(0x7f00000003c0)="03bcdf6cbac12e2e265288d486f354f1d11bff4afdaaf7a32aa09d658e31b56fbe71054bb93a3f679b961dec2766e6b81618ca3eba9a94bd1276d6805f35cac313a083bdcc4b342faa62756cfe3eb949c100ed27d77f28a5", 0x58}, {&(0x7f0000000440)="98bab69a0c1625274f55190dc29a52eda8814a561767e1f1f96441686198e4fa7bb5e23483844ab83a5bc20523c41c361dd7a933a8c749ed9cdbc09f7a249c07cadd26ab06236408dcbf05d2f9f47bfc418c757a4df747f8c6984e33c5c38e4f750d9b1241fec9626d35830a3d2e23345c2bb3", 0x73}, {&(0x7f00000004c0)="363a2509029d2551a8db82d354f7901e09e701676bfc32321cc8d43e256e64959d18a80a1b2b687c83068b4aa964", 0x2e}, {&(0x7f0000000500)="10e564872443ab109134329e84bbe40100a309d84e8b7c09e1e2e7843bfc9de67e389687510b3d3b386d26ac351a0c43e79247d7c6856333d2da5c49152d", 0x3e}, {&(0x7f0000000540)="d951f9b9d29d96efa64b04a1c099b25f296727fe7a1c7a99ce7ef1b742450fb2f0c96cbe1dd83d0e72bc4a06df38908f3275b5665851d46b28bf13d64789", 0x3e}], 0xa) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c40), 0x280000, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) getresuid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=0x0) r9 = accept$inet6(r2, &(0x7f0000001180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000011c0)=0x1c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001440)={0x0}, &(0x7f0000001480)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0}, &(0x7f0000001500)=0xc) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001540), 0xcb00, 0x0) r14 = dup2(r2, r0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) r16 = syz_mount_image$vfat(&(0x7f00000027c0), &(0x7f0000002800)='./file0\x00', 0x101, 0x1, &(0x7f0000002880)=[{&(0x7f0000002840)="d589b8ae446a50bdc800739b5e6d72194b545b973b249f7d360ba493c8a13ecf5953176d51e97841", 0x28, 0x8}], 0x100000, &(0x7f00000028c0)={[{@shortname_win95}, {@utf8no}, {@rodir}], [{@obj_user}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@measure}, {@fsname={'fsname', 0x3d, '!'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x14}}, {@subj_role}, {@subj_type={'subj_type', 0x3d, ')-\\@'}}]}) r17 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) sendmmsg$unix(r4, &(0x7f000000a7c0)=[{{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000700)="a82c3ec4ccf429285793bfdbf292cff3b93b200b721058ab957d5c22d0230687d8a03b9eea05d188c28cfab2d7e98b9ef476370db074ea9a0bc657ec745a02b10a7f211640e79c2149c24151bd74364814912b748533f761fa6e5eb56760739076040800f0042ccacaf35fff8f727e449666fb4c984e91956980909c3f4a99417c76e7b6846c9e8d4f8aab09bf8e115fd2a5920289138f931237cd72888c37e5882308d78294f5667776e7b0344c4168a8511d50c50c58ea035da47c781f1aeb955625cca5", 0xc5}, {&(0x7f0000000800)="d3e2885e4559b09ac10fe9bd76a29da472b9c4503edb486cb41d01ee6ec0938ea5cbed60548cd57d444358b1b913c3fb5686887c31305894c69f8d656000d047606c5a3b100fd63bed4ea78f3765aee0c364aae40341e7e8017cd572f81a91a302ade53d13c98848ef39381f9866bab4bd4610446b12444ea4173b5344ce4b94cdb48ea1d91035c25085a4bd1d0ac4c3cc4fe6a6599a333b1a0d85a671c7bf6cdc4766a5ad2ef8c1c43bc7964f6512c8dc0bf12962fda8014ed3951e80f479452003", 0xc2}, {&(0x7f0000000900)="64539bdea2c78f92073ff284dfa8b4f0c1f57d5b05d7aeca5e51b40276cd6b8b30965310f09f8cde0dde9ecba3c726c019b1c88cebfd2ee1fa3ff76fbf41a67d1b28f33921d22eae8735a4fdcf806edc7df038ebcc4d25f5e3c949d98dc60838d02320333a8134c1481cdca3d3689c9f2ddecf3717e1eea05f5fc89d171f3bdc5b97809240bc08ff2f7fc2fea3b269ed01d943fa0a26e59eaa21f9e6a29c3a7435b69d4f59cda9de21d9a5794a363458f77a0e8d2a1ccb835ef27d2899f483d0b4a3b431a702cf254d756e2d08d776a095d6deee8e49", 0xd6}, {&(0x7f0000000a00)="331c578c2bd838288ded773b19f7b7c97255ea386936c9b4b5d061ffd9b29b21eed554d6bec912ed9b9c7885e145936b8f840c77f02220d8165e1bffb808772f2889b5c6316628", 0x47}, {&(0x7f0000000a80)="0e86795ce2c1c04b2260", 0xa}, {&(0x7f0000000ac0)="fec10c5718f190910ad7a8922ba356993e5d472f8838957c7390a977ff5b80f0175da56920d7579a4c15842fa8d840fdeeddc3dd7eced6388577dc81a7ff4e946fb5ab433c1203c8b6af93528b839ce9e09586215567a6faf94a62254193975bf7462dd6b70d61561ff152a58701f7c39d9c9b52e4c89c873b4e93b2abf2db15bda26bbb50483b6972af7f7167aa8bc12e74be52e5dbd5df475a4904b11526b429486954bf0d62cff694d6da8844e88677d1c32c961e80d66127f68001702f1920118e6a4cad1112496c74", 0xcb}], 0x6, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r3, r5, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r2, r3]}}, @rights={{0x34, 0x1, 0x1, [r1, r6, r1, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, 0xee00}}}], 0xe0, 0x1004}}, {{&(0x7f0000000e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000ec0)="e98cc4ef2225f5de75b3d68767a009bd805184272078b32bab38ddd6a53c850984864e5352da0349b89ffeacd633d37c353e10f76023edf2814ca9daa910c70c924eb993798cf231e960baccce537bbc2bf75a0d981d3be465d0be60e837f68c32eceee5be3903cf747a6089cf2664a2d00ad4fe440fe9ebde7f0b6de7b682ff728a4d2c660f11b960093589f62d30701d475849810474a5b38f4ad95f308be4b396f718d5fdbfcf8e1995208422d04b61e478278b734e67f3efdd", 0xbb}, {&(0x7f0000000f80)="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", 0xfc}, {&(0x7f0000001080)="a394e8a13790938ca69d29be2f2e916c0b221e182477b25f41677c3ca562868df9d64d648b7c3c91cc2040e3522f150eed2b35b1899268e5df59e7a249c680388dce69fccd9c046cfce0c48cc3bffd9e51633ef676e3918e80afcd1cdb4c708551905f5a479876cbf5c567e6388b3e6833d0accc7c708254e2ab47725e268004daa74ff516b051bb91192c87d371973d86877c09653ac39d21066fccd447c72878725ba9f072c3841159fa69a60d63adba5470547ca1ab856db7", 0xba}], 0x3, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r9, r3, r10, r1]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r0]}}], 0x80, 0x81}}, {{&(0x7f00000012c0)=@abs={0x5a1e865a7a1589b, 0x0, 0x4e23}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001340)="69f494bdd5fd410672d3cf2e2c8f4599d1decba8a26765a5afe800376a4aa208d8304e74f52777ba64d3b36a7cf1faa88b8858713b0b2ed766b9c9bfa98870c07a29e7be3cf80b0a7cb572e4b34b8079422ba1a2d94a01d8c03587aa78040e7734a23845fe572b2cdc9c4069ac1b41f18744aeedcef44085f92f7ff528e8ed29f97a59bbe30abfea04264ce059139a24fc9768838270cc4db552046ea0f099f584fc2c00ef1593b13ddccc891b994dc0129cb123305ba9b7e5367e623f", 0xbd}], 0x1, &(0x7f0000001580)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r0, r13]}}], 0x40, 0x2000000}}, {{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000001640)="ede2539d8837fffed6a28ab2e066d072bfd624ed37f17a67de0882cd15e42202e2fbe8fd1dc7a3acd0239a4d9654a35e2c453681470ddeb563facec52c4a5f08a2f9c138abaef3b5330bbf2a5bbf627e4d2ab092dce13070d4496b540bf0696000674a6da5307eba917e5c75f052150acc65ae3a7e8854c2f231af008451eb5fd81fc1466ad1c914d905d752789428b02aefa5cb41457a", 0x97}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="48baaa66321301eec016b2b818bbc18806c875eaf3faad56cb967eab54f32993196a0928770026ccc5f53154e7a158965d916375a34c044b4e3372d66f410a769ba20b29d60097b9a0c3ec403c4de308028dc775c1d793f66eaaa0b037e6b827738993fda01f60fa4d668ac343b5e60c534abf4617e1f4ba2f8a", 0x7a}], 0x3, &(0x7f0000002b80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r14, r15, r16, r17, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r0]}}], 0x38, 0x44000}}, {{&(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002c40)="ce523c34b5ba3f403c24d42205b4e8b4c982e28d041fd890bbe6074ba11ea5559a56bc2641fd3e12c5f63ec5ac399c1d2561d523dd2e63de2894f55aab2c9c9f41793cf991655bfd9aa944c76c9f03a918ccd49a1989e8d0d7ef3942e3e5fea77ffa23956acf1d53311cc6a93e377b62aa808cfa65863a91e8b0a67b9ee7172e8adcf976c768f7544f4a779339242c7e7011f495", 0x94}, {&(0x7f0000002d00)="28299c6e38ce2e21b89de113c7026c9ad9add53548ea3bd981d14753f66fbb7c09df810149b5ecca88b5926076baac3e28564f31d6671d48733e78be0abc0b5f9165b36db2f729fbcc6593edc41fbe0b27f53a7ebc6211b514ff751acdd422aa96f66942241897b4e38357ef2b2f803e985b53d818bc18ca8058ba92788198c242ce03", 0x83}, {&(0x7f0000002dc0)="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", 0xfa}, {&(0x7f0000002ec0)="a8f4726f408f874abbdc4f0c3500c58d00163bfb67c098ce96c891824778a25fb0cf91b90c5cbaa057e314148d115fdd51cfbe3bf1d8e46477b95d52f3f7e5f5a82506376950f4627eb74db0f694ed379a02482317e9b0bcd04e7a33e015abfa12ecb8110d080d12e9a671914494862e5537725fa7b238cf09825adb79ba72190afd10e7977ca8d7d557d61392b56d07c3b01a3eba5801351f6ce9f632c65b451862fbe918f3ee086693559ccac5af3602638fce226e66ac7173fdccc70a7c882aa58587dcf534b996ad575408095f9ea099567e6a63a3a9205e60027aba2051f9a5815ba6615257119022812334f21ee509f3e2dac6754ee122c4a78c5418", 0xff}, {&(0x7f0000002fc0)="e8cba4abf1aaf1f58c2d38743395d50f11bbe27f07455477e8ae9d9ab3333ff83f36c8cd538592b5879daa3db2211c12e146ce0cd2d46e2c05beaa837aa2016966721e7530d48fa73a9ceb4f4bbd0d643dd0b8c20b87dbff5010f2c49787cd949af37b7653e3d6440bc17ffa648fa27deed104c82d2712c5ce7b23a119c484fbd9652a4f3b7b655dbe08112da7170f62d39389bdc6aa6a470d2edcf42d6a9bfe133a6c", 0xa3}], 0x5, &(0x7f0000007b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0xd0, 0x800}}, {{&(0x7f0000007c80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000008fc0)=[{&(0x7f0000007d00)="3553d3533007d38d65f96429735efb2342aeb3bfdbcd08459cea17d8a8a2413ccf6eb76a0c86ce2909c412e2623fabefcbb4e52402c33ab6fd6785613d4cd8a91fc4ec", 0x43}, {&(0x7f0000007d80)="3f57cf0799d79f32057291ec437528407a05080093d7b110e584df07257fd4fbb555406fe3425a6e5f9b014ab530b47ae653ffef06fb43b2c7ebc95a51f95c06d69da0760027b0a7cd2c96bdf5c01d826999f1a0d69466c7696eacd1776ca64a4750e40a5951ba4d3bd6b7f13515289f10e6f10208baee5e303fc955ef6ec8676f85f88a0191811e35e017a370aa2d1dcd6e9d9e8f1153d5565a8cd1fd38566822ac09793c7f970653ea0badbf62a3626ac4a61a5449b0c863bc7f564518fdd6b3583150e64a59f43e45c9c6f33b3746fc231a987441ba7b160fb7d0c5", 0xdd}, {&(0x7f0000007e80)="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", 0x1000}, {&(0x7f0000008e80)}, {&(0x7f0000008ec0)="b43328d11bbfd73d7f2b4a8dc9626bee183ada782d80c7670fa57cfe0bc6f5a16d66370dd6dbfcc45bfdbd35936560f20136c14004d2cc3872074951acffb3cd4ba25baea470a0439414ed0d62653f48", 0x50}, {&(0x7f0000008f40)}, {&(0x7f0000008f80)="31f0f060bb12a368888a43c153ada034e7f4588dd3c1ea5cb26adecd00b73b3358db0a47ec78ac2f130941ad2130", 0x2e}], 0x7, &(0x7f000000a700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1]}}], 0x88, 0x8840}}], 0x6, 0x8000) 15:56:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c7"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:56:19 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x3, 0x0, 0x81, 0xee, 0x0, 0x8, 0x8c010, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x8}, 0x8008, 0x1b858, 0x6, 0x3, 0xe1, 0x32, 0x6, 0x0, 0x200, 0x0, 0xd9}, 0x0, 0x6, r0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000100001000000000000000000ff020000000000000000000000000001fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r4], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r6, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) r7 = accept4(r4, &(0x7f0000000400)=@rc, &(0x7f0000000240)=0x80, 0x800) getsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000300)=""/220, &(0x7f00000001c0)=0xdc) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) copy_file_range(r8, 0x0, r8, &(0x7f00000000c0)=0x6, 0x6, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9286, 0x0, 0xc39, 0xa6219d3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) 15:56:19 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2104}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="118bb5d773e9f803086494f3695d89b85af816610400ab5375e34137c767ee5bec22d304762b556b2254e2577d6a1e62da15e95470e7b69bd305e092fda8a05b1211c92adeea1a3d9e6d04c74b6336eba425184d085879b98c9c8dea9580ca99dd8627369750bc3061a5d32bf2f0004185a53b58714b9277fe4bbf828fe13b7c1397e8aa552d517e7b528e12ef5c2d3c8eb0b8aff6992acebcb6cb7bb2ec7f3aa9db202ff414"]) 15:56:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 15:56:19 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = eventfd2(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 15:56:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) [ 1949.839730] EXT4-fs (loop1): Unrecognized mount option "‹µ×séød”ói]‰¸Zøa" or missing value 15:56:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:56:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) syz_io_uring_setup(0x6c58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000140)) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000140)="17eae9c8553704af28d061fc103c0110bd754c9601f03a20e755e8c784fb3bfc9b7abe17108250367910c396d7622045c00c5d576e09e69a92333486f3e1ba2a1c5730199050e84a848099727d981690141c759733cb012aa083440186d4ee3bd6a3dfc9d2a4775f15a4b549dd8084fb1656804281f8bbf5bbcaccc6c824865f03a3fff1117b7d582c2ed344ef8cbb521b9a4102855504710896c6ecdcef8f25435c3c696dc103402aae4b28") ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) r1 = gettid() pidfd_open(r1, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/softnet_stat\x00') timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) r4 = accept4$inet6(r3, &(0x7f0000001d40)={0xa, 0x0, 0x0, @remote}, &(0x7f0000003f00)=0x1c, 0x800) dup2(r4, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="5746b72a976d2f0314d1", 0xa, r2}, 0x68) 15:56:20 executing program 7: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x80000001, 0x9}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x81, 0x6, 0xff, 0x2, 0x0, 0x289, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff7}, 0x1040, 0xb6, 0x80000000, 0x8, 0x80, 0x4, 0x1, 0x0, 0x105, 0x0, 0x2bc}, 0x0, 0xf, r0, 0x9) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) [ 1949.922902] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:56:20 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05000000000000000068dda1a31a53a3b97fe47ee7291500020000000800030098583eee5bd1bcc0c305c874b0b69064baf5980e335b263ee10452ea44b1c13604df798c6f5f95a050ef6d889652091e96301dd96a3d7eebb07b299a8dde916c8155d5eebd631e41f63f27cfb51147b220ff2880a06a050db8672840a6b3fb3ba02857065f23f0255bf48ae4f1468ff16181f4363e478d6c0a0a32c6528f3b40ca56441723c5b835cbaa1920ff66aef9808984f82bd6c9572cd228648a70655ae8eda6980d0040c77273e97e03264fed92f167c21f05e0869842d6fbb78efcb4701ba74742ae99ddcc7138c4eb745d9e52555ecef428cc64d2eaf2a53e5afe361d1dc66591ac9bf9d81ef5e1a704a6ead99a3ff04590d8043bb1e6ba5f161b5c561d", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2104}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="118bb5d773e9f803086494f3695d89b85af816610400ab5375e34137c767ee5bec22d304762b556b2254e2577d6a1e62da15e95470e7b69bd305e092fda8a05b1211c92adeea1a3d9e6d04c74b6336eba425184d085879b98c9c8dea9580ca99dd8627369750bc3061a5d32bf2f0004185a53b58714b9277fe4bbf828fe13b7c1397e8aa552d517e7b528e12ef5c2d3c8eb0b8aff6992acebcb6cb7bb2ec7f3aa9db202ff414"]) 15:56:20 executing program 7: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x80000001, 0x9}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x81, 0x6, 0xff, 0x2, 0x0, 0x289, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff7}, 0x1040, 0xb6, 0x80000000, 0x8, 0x80, 0x4, 0x1, 0x0, 0x105, 0x0, 0x2bc}, 0x0, 0xf, r0, 0x9) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 15:56:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 1950.204109] EXT4-fs (loop1): Unrecognized mount option "‹µ×séød”ói]‰¸Zøa" or missing value 15:56:20 executing program 6: r0 = creat(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x80, 0x8}) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2) syz_io_uring_complete(r2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x30, 0x200, 0x70bd2c, 0x25dfdbfd, {0x13}, [@typed={0x8, 0x45, 0x0, 0x0, @u32=0x2}, @generic="d52bf8c4127181c9d59edbc2ca3a5e7ac988103b457f3df5c510512f83e25f"]}, 0x3c}, 0x1, 0x0, 0x0, 0x2044000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) sendmsg$nl_generic(r5, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000000)={0x0, 0x0, 0x8946}) read$hidraw(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 1950.276094] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1950.297029] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1950.299590] CPU: 0 PID: 13025 Comm: syz-executor.7 Not tainted 5.10.199 #1 [ 1950.300993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1950.302647] Call Trace: [ 1950.303181] dump_stack+0x107/0x167 [ 1950.303919] sysfs_warn_dup.cold+0x1c/0x29 [ 1950.304773] sysfs_do_create_link_sd+0x122/0x140 [ 1950.305738] sysfs_create_link+0x5f/0xc0 [ 1950.306566] device_add+0x703/0x1bc0 [ 1950.307322] ? devlink_add_symlinks+0x970/0x970 [ 1950.308262] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1950.309346] wiphy_register+0x1da6/0x2850 [ 1950.310185] ? wiphy_unregister+0xb90/0xb90 [ 1950.311065] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1950.312155] ieee80211_register_hw+0x23c5/0x38b0 [ 1950.313123] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1950.314080] ? net_generic+0xdb/0x2b0 [ 1950.314850] ? lockdep_init_map_type+0x2c7/0x780 [ 1950.315803] ? memset+0x20/0x50 [ 1950.316467] ? __hrtimer_init+0x12c/0x270 [ 1950.317324] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 1950.318354] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1950.319284] ? hwsim_new_radio_nl+0x967/0x1080 [ 1950.320208] ? memcpy+0x39/0x60 [ 1950.320874] hwsim_new_radio_nl+0x991/0x1080 [ 1950.321761] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1950.322808] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1950.324118] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1950.325431] genl_family_rcv_msg_doit+0x22d/0x330 [ 1950.326403] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1950.327723] ? cap_capable+0x1d6/0x240 [ 1950.328524] ? ns_capable+0xe2/0x110 [ 1950.329288] genl_rcv_msg+0x33c/0x5a0 [ 1950.330058] ? genl_get_cmd+0x480/0x480 [ 1950.330853] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1950.331897] ? lock_release+0x680/0x680 [ 1950.332690] ? netlink_deliver_tap+0xf4/0xcd0 [ 1950.333618] netlink_rcv_skb+0x14b/0x430 [ 1950.334429] ? genl_get_cmd+0x480/0x480 [ 1950.335229] ? netlink_ack+0xab0/0xab0 [ 1950.336021] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1950.336939] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 1950.337900] genl_rcv+0x24/0x40 [ 1950.338558] netlink_unicast+0x549/0x7f0 [ 1950.339375] ? netlink_attachskb+0x870/0x870 [ 1950.340261] ? __virt_addr_valid+0x128/0x350 [ 1950.341176] netlink_sendmsg+0x90f/0xdf0 [ 1950.342000] ? netlink_unicast+0x7f0/0x7f0 [ 1950.342866] ? netlink_unicast+0x7f0/0x7f0 [ 1950.343723] __sock_sendmsg+0x154/0x190 [ 1950.344525] ____sys_sendmsg+0x70d/0x870 [ 1950.345351] ? sock_write_iter+0x3d0/0x3d0 [ 1950.346188] ? do_recvmmsg+0x6d0/0x6d0 [ 1950.346964] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1950.348024] ___sys_sendmsg+0xf3/0x170 [ 1950.348804] ? sendmsg_copy_msghdr+0x160/0x160 [ 1950.349733] ? lock_downgrade+0x6d0/0x6d0 [ 1950.350487] ? find_held_lock+0x2c/0x110 [ 1950.351348] ? clockevents_program_event+0x14b/0x360 [ 1950.352377] ? __fget_files+0x296/0x4c0 [ 1950.353199] ? __fget_light+0xea/0x290 [ 1950.353993] __sys_sendmsg+0xe5/0x1b0 [ 1950.354754] ? __sys_sendmsg_sock+0x40/0x40 [ 1950.355614] ? trace_hardirqs_on+0x5b/0x180 [ 1950.356473] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1950.357561] ? __x64_sys_sendmsg+0xd/0xb0 [ 1950.358384] ? __sanitizer_cov_trace_pc+0x3c/0x60 [ 1950.359358] do_syscall_64+0x33/0x40 [ 1950.360102] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1950.361144] RIP: 0033:0x7f78cec41b19 [ 1950.361895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1950.365571] RSP: 002b:00007f78cc1b7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1950.367081] RAX: ffffffffffffffda RBX: 00007f78ced54f60 RCX: 00007f78cec41b19 [ 1950.368515] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 1950.369938] RBP: 00007f78cec9bf6d R08: 0000000000000000 R09: 0000000000000000 [ 1950.371358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1950.372781] R13: 00007ffe0ecd5ebf R14: 00007f78cc1b7300 R15: 0000000000022000 [ 1951.111848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.113269] print_req_error: 38 callbacks suppressed [ 1951.113288] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1951.116476] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1951.116525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.118712] buffer_io_error: 14 callbacks suppressed [ 1951.118723] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1951.119793] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1951.124446] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1951.124520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.126629] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1951.127699] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1951.131319] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1951.131367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.133466] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 1951.134546] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1951.138182] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1951.138283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.140345] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 1951.141407] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1951.145123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.146252] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1951.148287] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 1951.149913] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 1951.149965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.152623] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 1951.152695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.155433] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 1951.186877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.188099] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1951.194500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.195697] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1951.197404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.199840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.201145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.202458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.204162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1951.205491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:56:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:56:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:56:37 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:56:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 15:56:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xf}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)={0x2}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x80000001, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) unshare(0x48020200) 15:56:37 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:56:37 executing program 5: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="200029bd7000ffdbdf2521000000080003", @ANYRES32=0x0, @ANYBLOB="0c0099001f0000004c000000080077000500000011002a0025030106c672060303"], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='limits\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r2 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) clock_gettime(0x0, &(0x7f0000001940)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="32a7f25db1cc960c2e2f66696c6530"]) dup2(r5, r6) 15:56:37 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2}, 0x10088, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000001c0)={0x0, 0x0, 0x27f}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@xfs={0x1c, 0x81, {0x1, 0x1, 0x1, 0x7}}, 0x200400) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1a) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xa01d, 0x0, 0x1, 0x3df}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e6023600410008004b33fec0cefcedcc64456dc3026fc7270300a28ce2d10d69c19cc92a89e0e8006ce9"], 0x54, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, r4) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) fcntl$setpipe(r2, 0x407, 0xffff) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) [ 1967.419081] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:56:37 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:56:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:56:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:56:37 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) [ 1967.699133] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:56:38 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 15:56:38 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 15:56:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:56:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 1968.085955] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1968.459816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.460511] print_req_error: 22 callbacks suppressed [ 1968.460522] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1968.462372] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1968.463603] buffer_io_error: 6 callbacks suppressed [ 1968.463610] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1968.471406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.472043] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1968.473300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.473897] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1968.475103] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1968.475111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.475132] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1968.477366] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 1968.477953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.480081] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1968.480827] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1968.480896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.481924] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 1968.483052] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1968.483120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.486998] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1968.487850] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1968.488915] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 1968.490831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.491646] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 1968.491676] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 1968.495538] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 1968.596392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.597715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.598937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.600142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.601377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.602579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.603805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.605016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1968.606184] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1968.607754] Buffer I/O error on dev loop7, logical block 2096897, async page read 15:56:53 executing program 5: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="200029bd7000ffdbdf2521000000080003", @ANYRES32=0x0, @ANYBLOB="0c0099001f0000004c000000080077000500000011002a0025030106c672060303"], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='limits\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r2 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@hci, 0x80, 0x0}}, 0x0) clock_gettime(0x0, &(0x7f0000001940)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="32a7f25db1cc960c2e2f66696c6530"]) dup2(r5, r6) 15:56:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:56:53 executing program 6: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="be7bd83c293f29b8dfbc77e04d8a88dd809eec64029d2a81f46a8eca08041d4dcd9b4f4b68bc7af9cd82f4038fe97bf6151513ff2c50bb58276c57951ee2b0306e00a4fc36b7ef6085d7295eb2cc490dacba872b0868b78ad9dbd09bbaa90e4b301c8075975c44b2511b9b555abf668f970de3c4dbe13cdff7ec177c9e5c81c1d2a7e8001215a862bd82d1d466fab9be140c4e", 0x93, 0x12d}], 0x1004, &(0x7f0000000240)={[{'@.^\\\xfa%][,]-@'}, {'\xd7'}, {'\\'}, {'\xe0:(%(-)\xcb%'}, {'.-]'}, {'^#'}, {'@'}, {'[&+\\\n[+\']}#)'}, {}], [{@audit}, {@obj_role={'obj_role', 0x3d, '\\'}}, {@fsname}, {@appraise}, {@subj_type={'subj_type', 0x3d, '!]#%!!\xee-#(/[(-}+&)/'}}, {@permit_directio}, {@dont_measure}]}) execveat(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000340)='\x7f,\x00', &(0x7f0000000380)='$\x00', &(0x7f00000003c0)='$//$.#\x00', &(0x7f0000000400)=']&+\x00'], &(0x7f00000004c0)=[&(0x7f0000000480)='%+&{@\x00'], 0x800) 15:56:53 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:56:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 15:56:53 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 15:56:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:56:53 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 1983.081184] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:56:53 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:56:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:56:53 executing program 6: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 1983.341878] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:56:53 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:56:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:56:53 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:56:53 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 1983.617067] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:56:53 executing program 6: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) syz_open_procfs(0x0, 0x0) [ 1984.321177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.322354] print_req_error: 22 callbacks suppressed [ 1984.322371] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.325418] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.327444] buffer_io_error: 6 callbacks suppressed [ 1984.327454] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1984.347462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.348379] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.350149] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.351829] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1984.353677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.354569] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.356378] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.358179] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 1984.360735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.361705] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.363544] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.365335] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 1984.367328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.368277] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.372251] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1984.374081] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 1984.375829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.377370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.378460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.382270] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 1984.383606] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 1984.384938] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 1984.512413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.513500] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1984.513528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.516038] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1984.516071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.518562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.519545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.520549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.521559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1984.522583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:57:09 executing program 5: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x800}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, r3, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r4 = syz_io_uring_setup(0x3e01, &(0x7f0000000280)={0x0, 0x18d7, 0x4, 0x1, 0x375, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000380)) fcntl$setlease(r4, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="836accc0310b663812dd992171560dfe7a9df56bff00f01323aa8451763956f499e5250b7c045581c53ab5a8a967b80400eaf600000000000000005bf7bd009a68ff0000000000", @ANYRES32=r2], 0x10}}], 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(r1, &(0x7f0000002e00)=""/4102) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 15:57:09 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000080026006c09000008002700000000000800a1003f000000"], 0x40}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:57:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:57:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:57:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 15:57:09 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:57:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x105142, 0x0) fallocate(r4, 0x3, 0x0, 0x8000) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES16]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 15:57:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 1) 15:57:09 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 1999.299046] FAULT_INJECTION: forcing a failure. [ 1999.299046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1999.302629] CPU: 0 PID: 13168 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 1999.304199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1999.306088] Call Trace: [ 1999.306692] dump_stack+0x107/0x167 [ 1999.307527] should_fail.cold+0x5/0xa [ 1999.308402] _copy_from_user+0x2e/0x1b0 [ 1999.309309] __copy_msghdr_from_user+0x91/0x4b0 [ 1999.310377] ? __ia32_sys_shutdown+0x80/0x80 [ 1999.311364] ? SOFTIRQ_verbose+0x10/0x10 [ 1999.312288] ? __lockdep_reset_lock+0x180/0x180 [ 1999.313359] ? perf_trace_lock+0xac/0x490 [ 1999.314300] ___sys_recvmsg+0xd5/0x200 [ 1999.315169] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1999.316256] ? lock_downgrade+0x6d0/0x6d0 [ 1999.317205] ? __fget_files+0x296/0x4c0 [ 1999.318104] ? __fget_light+0xea/0x290 [ 1999.318973] do_recvmmsg+0x24c/0x6d0 [ 1999.319797] ? ___sys_recvmsg+0x200/0x200 [ 1999.320707] ? lock_downgrade+0x6d0/0x6d0 [ 1999.321647] ? ksys_write+0x12d/0x260 [ 1999.322497] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1999.323560] ? wait_for_completion_io+0x270/0x270 [ 1999.324620] ? rcu_read_lock_any_held+0x75/0xa0 [ 1999.325645] ? vfs_write+0x354/0xa70 [ 1999.326469] __x64_sys_recvmmsg+0x20f/0x260 [ 1999.327412] ? ksys_write+0x1a9/0x260 [ 1999.328248] ? __do_sys_socketcall+0x600/0x600 [ 1999.329253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1999.330418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1999.331555] do_syscall_64+0x33/0x40 [ 1999.332374] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1999.333494] RIP: 0033:0x7f08503ffb19 [ 1999.334315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1999.338328] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1999.339992] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 1999.341566] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 1999.343123] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1999.344668] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 1999.346221] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 1999.365073] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:57:09 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:57:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 2) [ 1999.489817] cgroup: fork rejected by pids controller in /syz7 [ 1999.497052] FAULT_INJECTION: forcing a failure. [ 1999.497052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1999.498667] CPU: 1 PID: 13201 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 1999.499486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1999.500458] Call Trace: [ 1999.500783] dump_stack+0x107/0x167 [ 1999.501214] should_fail.cold+0x5/0xa [ 1999.501682] _copy_from_user+0x2e/0x1b0 [ 1999.502162] __copy_msghdr_from_user+0x91/0x4b0 [ 1999.502702] ? __ia32_sys_shutdown+0x80/0x80 [ 1999.503223] ? __lock_acquire+0x1657/0x5b00 [ 1999.503735] ___sys_recvmsg+0xd5/0x200 [ 1999.504197] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 1999.504778] ? __lockdep_reset_lock+0x180/0x180 [ 1999.505317] ? lock_downgrade+0x6d0/0x6d0 [ 1999.505826] ? lock_acquire+0x197/0x470 [ 1999.506292] ? find_held_lock+0x2c/0x110 [ 1999.506779] ? __might_fault+0xd3/0x180 [ 1999.507237] ? lock_downgrade+0x6d0/0x6d0 [ 1999.507733] do_recvmmsg+0x24c/0x6d0 [ 1999.508173] ? ___sys_recvmsg+0x200/0x200 [ 1999.508661] ? lock_downgrade+0x6d0/0x6d0 [ 1999.509166] ? ksys_write+0x12d/0x260 [ 1999.509630] ? wait_for_completion_io+0x270/0x270 [ 1999.510189] ? rcu_read_lock_any_held+0x75/0xa0 [ 1999.510737] ? vfs_write+0x354/0xa70 [ 1999.511174] __x64_sys_recvmmsg+0x20f/0x260 [ 1999.511677] ? ksys_write+0x1a9/0x260 [ 1999.512115] ? __do_sys_socketcall+0x600/0x600 [ 1999.512652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1999.513252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1999.513853] do_syscall_64+0x33/0x40 [ 1999.514283] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1999.514878] RIP: 0033:0x7f08503ffb19 [ 1999.515315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1999.517427] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1999.518326] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 1999.519155] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 1999.519987] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1999.520826] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 1999.521675] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 1999.743952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.744639] print_req_error: 22 callbacks suppressed [ 1999.744652] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1999.746492] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1999.747644] buffer_io_error: 6 callbacks suppressed [ 1999.747651] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1999.754451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.755073] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1999.756509] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1999.757665] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1999.762216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.762804] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1999.764014] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1999.765172] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 1999.766984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.767651] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1999.768843] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1999.770009] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 1999.771282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.771904] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1999.773101] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1999.774257] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 1999.775657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.776366] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 1999.777320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.778019] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 1999.779517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.780201] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 1999.833076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.833748] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 1999.833777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.835971] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 1999.835991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.838201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.838875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.839529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.840174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.840834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.859407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.860453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.861882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.862799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.863906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.865029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.866152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.867390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:57:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r1, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfdef) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r7}, {0xffffffffffffffff, 0x4}, {r6, 0x408}, {r6, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r6, 0x8, 0x0, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) 15:57:25 executing program 5: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x800}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, r3, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r4 = syz_io_uring_setup(0x3e01, &(0x7f0000000280)={0x0, 0x18d7, 0x4, 0x1, 0x375, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000380)) fcntl$setlease(r4, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="836accc0310b663812dd992171560dfe7a9df56bff00f01323aa8451763956f499e5250b7c045581c53ab5a8a967b80400eaf600000000000000005bf7bd009a68ff0000000000", @ANYRES32=r2], 0x10}}], 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(r1, &(0x7f0000002e00)=""/4102) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 15:57:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:57:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:57:25 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:57:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0xe5, 0x5, 0xd0, 0x4, 0x0, 0x10001, 0xa2050, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) syz_io_uring_setup(0x6c58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000140)) write$P9_RREADDIR(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="a6000000290100a9f00000000400000007000000000000000400000000c800000707002e2f66696c65300100000000000002000000000000007f07002e2f66696c653004010000000800000000000000460b000000000000b907002e2f66696c653040030000000000008007002e2f66696c65304001000000030000000000000000000000000000060107002e2f66696c6530"], 0xa6) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0) 15:57:25 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:57:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 3) [ 2015.606169] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2015.613171] FAULT_INJECTION: forcing a failure. [ 2015.613171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2015.616207] CPU: 1 PID: 13312 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2015.617577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2015.619278] Call Trace: [ 2015.619805] dump_stack+0x107/0x167 [ 2015.620539] should_fail.cold+0x5/0xa [ 2015.621323] _copy_from_user+0x2e/0x1b0 [ 2015.622133] __copy_msghdr_from_user+0x91/0x4b0 [ 2015.623089] ? __ia32_sys_shutdown+0x80/0x80 [ 2015.623967] ? __lock_acquire+0x1657/0x5b00 [ 2015.624844] ___sys_recvmsg+0xd5/0x200 [ 2015.625646] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2015.626634] ? __lockdep_reset_lock+0x180/0x180 [ 2015.627552] ? lock_downgrade+0x6d0/0x6d0 [ 2015.628402] ? lock_acquire+0x197/0x470 [ 2015.629183] ? find_held_lock+0x2c/0x110 [ 2015.630024] ? __might_fault+0xd3/0x180 [ 2015.630812] ? lock_downgrade+0x6d0/0x6d0 [ 2015.631677] do_recvmmsg+0x24c/0x6d0 [ 2015.632423] ? ___sys_recvmsg+0x200/0x200 [ 2015.633263] ? lock_downgrade+0x6d0/0x6d0 [ 2015.634121] ? ksys_write+0x12d/0x260 [ 2015.634918] ? wait_for_completion_io+0x270/0x270 [ 2015.635873] ? rcu_read_lock_any_held+0x75/0xa0 [ 2015.636790] ? vfs_write+0x354/0xa70 [ 2015.637551] __x64_sys_recvmmsg+0x20f/0x260 [ 2015.638407] ? ksys_write+0x1a9/0x260 [ 2015.639174] ? __do_sys_socketcall+0x600/0x600 [ 2015.640072] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2015.641132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2015.642167] do_syscall_64+0x33/0x40 [ 2015.642927] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2015.643929] RIP: 0033:0x7f08503ffb19 [ 2015.644675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2015.648271] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2015.649840] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2015.651286] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2015.652730] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2015.654427] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2015.656142] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 15:57:26 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:57:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:57:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 4) 15:57:26 executing program 5: ftruncate(0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x20044000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$invalidate(0x15, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:57:26 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2015.954113] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2016.038807] FAULT_INJECTION: forcing a failure. [ 2016.038807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2016.041800] CPU: 1 PID: 13442 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2016.043284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2016.044975] Call Trace: [ 2016.045526] dump_stack+0x107/0x167 [ 2016.046292] should_fail.cold+0x5/0xa [ 2016.047087] _copy_from_user+0x2e/0x1b0 [ 2016.047915] __copy_msghdr_from_user+0x91/0x4b0 [ 2016.048865] ? __ia32_sys_shutdown+0x80/0x80 [ 2016.049793] ? __lock_acquire+0x1657/0x5b00 [ 2016.050690] ___sys_recvmsg+0xd5/0x200 [ 2016.051484] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2016.052480] ? __lockdep_reset_lock+0x180/0x180 [ 2016.053435] ? _raw_spin_unlock_irq+0x27/0x30 [ 2016.054365] ? lock_acquire+0x197/0x470 [ 2016.055175] ? find_held_lock+0x2c/0x110 [ 2016.056007] ? __might_fault+0xd3/0x180 [ 2016.056822] ? lock_downgrade+0x6d0/0x6d0 [ 2016.057667] ? io_schedule_timeout+0x140/0x140 [ 2016.058642] do_recvmmsg+0x24c/0x6d0 [ 2016.059407] ? ___sys_recvmsg+0x200/0x200 [ 2016.060268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2016.061343] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2016.062458] ? trace_hardirqs_on+0x5b/0x180 [ 2016.063367] __x64_sys_recvmmsg+0x20f/0x260 [ 2016.064255] ? __do_sys_socketcall+0x600/0x600 [ 2016.065189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2016.066262] do_syscall_64+0x33/0x40 [ 2016.067015] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2016.068059] RIP: 0033:0x7f08503ffb19 [ 2016.068819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2016.072609] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2016.074162] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2016.075611] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2016.077060] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2016.078511] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2016.079955] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2016.402683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2016.403901] print_req_error: 38 callbacks suppressed [ 2016.403919] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2016.407174] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2016.409340] buffer_io_error: 14 callbacks suppressed [ 2016.409350] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2016.425400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2016.426558] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2016.428758] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2016.430958] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2016.432817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2016.433999] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2016.436192] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2016.438396] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2016.440281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2016.441392] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2016.444432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2016.445566] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2016.447729] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2016.449894] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2016.451458] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2016.453588] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2016.455488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2016.456757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2016.458145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2016.462267] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2016.463844] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2016.465416] Buffer I/O error on dev loop7, logical block 2096903, async page read 15:57:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:57:42 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000000000000105) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7) write$binfmt_elf64(r1, &(0x7f0000000d00)=ANY=[], 0xa9f) open(&(0x7f0000000040)='./file0\x00', 0x3, 0x5) 15:57:42 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0) dup2(r0, r1) fallocate(0xffffffffffffffff, 0x8, 0xfffffffffffffffd, 0x20000000000000) 15:57:42 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:57:42 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:57:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r1, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfdef) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r7}, {0xffffffffffffffff, 0x4}, {r6, 0x408}, {r6, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r6, 0x8, 0x0, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) 15:57:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:57:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 5) [ 2032.403698] udc-core: couldn't find an available UDC or it's busy [ 2032.405064] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2032.460002] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2032.483025] FAULT_INJECTION: forcing a failure. [ 2032.483025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2032.485906] CPU: 0 PID: 13470 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2032.487310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2032.488991] Call Trace: [ 2032.489532] dump_stack+0x107/0x167 [ 2032.490307] should_fail.cold+0x5/0xa [ 2032.491083] _copy_from_user+0x2e/0x1b0 [ 2032.491887] __copy_msghdr_from_user+0x91/0x4b0 [ 2032.492823] ? __ia32_sys_shutdown+0x80/0x80 [ 2032.493712] ? __lock_acquire+0x1657/0x5b00 [ 2032.494615] ___sys_recvmsg+0xd5/0x200 [ 2032.495416] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2032.496413] ? __lockdep_reset_lock+0x180/0x180 [ 2032.497357] ? lock_downgrade+0x6d0/0x6d0 [ 2032.498225] ? lock_acquire+0x197/0x470 [ 2032.499034] ? find_held_lock+0x2c/0x110 [ 2032.499873] ? __might_fault+0xd3/0x180 [ 2032.500684] ? lock_downgrade+0x6d0/0x6d0 [ 2032.501559] do_recvmmsg+0x24c/0x6d0 [ 2032.502333] ? ___sys_recvmsg+0x200/0x200 [ 2032.503173] ? lock_downgrade+0x6d0/0x6d0 [ 2032.504038] ? ksys_write+0x12d/0x260 [ 2032.504835] ? wait_for_completion_io+0x270/0x270 [ 2032.505824] ? rcu_read_lock_any_held+0x75/0xa0 [ 2032.506781] ? vfs_write+0x354/0xa70 [ 2032.507565] __x64_sys_recvmmsg+0x20f/0x260 [ 2032.508448] ? ksys_write+0x1a9/0x260 [ 2032.509241] ? __do_sys_socketcall+0x600/0x600 [ 2032.510181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2032.511257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2032.512312] do_syscall_64+0x33/0x40 [ 2032.513073] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2032.514131] RIP: 0033:0x7f08503ffb19 [ 2032.514900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2032.518660] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2032.520220] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2032.521668] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2032.523133] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2032.524583] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2032.526029] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 15:57:42 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000000000000105) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7) write$binfmt_elf64(r1, &(0x7f0000000d00)=ANY=[], 0xa9f) open(&(0x7f0000000040)='./file0\x00', 0x3, 0x5) 15:57:42 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:57:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2032.748044] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2032.932151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2032.933372] print_req_error: 6 callbacks suppressed [ 2032.933389] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.937772] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.939972] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2032.943557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2032.945065] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.947285] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.949460] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2032.951630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2032.952912] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.955634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2032.956796] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.960380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2032.961516] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.963710] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.965874] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2032.967462] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.969624] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2032.971257] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2032.973404] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2032.975860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2032.977148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2032.978436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2032.984274] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2032.985890] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2032.987506] Buffer I/O error on dev loop7, logical block 2096903, async page read 15:57:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r4, 0x1, 0x0, 0x0, {0x15}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x1018, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x3c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x20, 0xc, 0x0, 0x0, @str='/proc/sys/net/ipv4/tcp_rmem\x00'}]}, 0x3c}}, 0x0) [ 2047.855113] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2047.857984] FAULT_INJECTION: forcing a failure. [ 2047.857984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2047.859279] CPU: 0 PID: 13595 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2047.860038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2047.860931] Call Trace: [ 2047.861221] dump_stack+0x107/0x167 [ 2047.861617] should_fail.cold+0x5/0xa [ 2047.862032] _copy_from_user+0x2e/0x1b0 [ 2047.862479] __copy_msghdr_from_user+0x91/0x4b0 [ 2047.862977] ? __ia32_sys_shutdown+0x80/0x80 [ 2047.863451] ? __lock_acquire+0x1657/0x5b00 [ 2047.863930] ___sys_recvmsg+0xd5/0x200 [ 2047.864348] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2047.864866] ? __lockdep_reset_lock+0x180/0x180 [ 2047.865364] ? lock_downgrade+0x6d0/0x6d0 [ 2047.865809] ? lock_acquire+0x197/0x470 [ 2047.866260] ? find_held_lock+0x2c/0x110 [ 2047.866713] ? __might_fault+0xd3/0x180 [ 2047.867134] ? lock_downgrade+0x6d0/0x6d0 [ 2047.867611] do_recvmmsg+0x24c/0x6d0 [ 2047.868028] ? ___sys_recvmsg+0x200/0x200 [ 2047.868488] ? lock_downgrade+0x6d0/0x6d0 [ 2047.868937] ? ksys_write+0x12d/0x260 [ 2047.869372] ? wait_for_completion_io+0x270/0x270 [ 2047.869890] ? rcu_read_lock_any_held+0x75/0xa0 [ 2047.870420] ? vfs_write+0x354/0xa70 [ 2047.870837] __x64_sys_recvmmsg+0x20f/0x260 [ 2047.871312] ? ksys_write+0x1a9/0x260 [ 2047.871738] ? __do_sys_socketcall+0x600/0x600 [ 2047.872246] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2047.872830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2047.873405] do_syscall_64+0x33/0x40 [ 2047.873818] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2047.874414] RIP: 0033:0x7f08503ffb19 [ 2047.874826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2047.876863] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2047.877709] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2047.878506] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2047.879524] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2047.880324] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2047.881113] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 15:57:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:57:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4389, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000040) creat(&(0x7f00000000c0)='./file0\x00', 0x4c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) r2 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x43) inotify_rm_watch(r1, r2) dup3(r1, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80) 15:57:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:57:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:57:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 6) 15:57:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b17f2ae8dfe7daae4433b9c52788cb564c5127467341e4376c1319a3cb91e35718c602f3acaab637ceb785afdf71f385cfa97aa0b4888a849ea763a6372e3668ad38b4998b12b7f74f557998f5ab174f08a200f201c027330a3767dd814b12a84bc000"/197], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x8) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000480)='\x00', &(0x7f0000000280)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x15) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 15:57:58 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2047.881613] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 2047.896896] audit: type=1400 audit(1698595078.210:117): avc: denied { watch_reads } for pid=13586 comm="syz-executor.5" path="/syzkaller-testdir760881795/syzkaller.5i90ul/219/file0" dev="sda" ino=16065 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 [ 2047.917650] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 15:57:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4389, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000040) creat(&(0x7f00000000c0)='./file0\x00', 0x4c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0xfff, 0x0) r2 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x43) inotify_rm_watch(r1, r2) dup3(r1, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80) 15:57:58 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:57:58 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) io_uring_enter(r0, 0x627d, 0x0, 0x0, &(0x7f0000000040)={[0x7]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x88) lseek(r2, 0x800, 0x4) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(r4, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0xc3) sendfile(r2, r5, 0x0, 0x100000001) 15:57:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:57:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 7) [ 2048.020061] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2048.075954] FAULT_INJECTION: forcing a failure. [ 2048.075954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2048.077275] CPU: 0 PID: 13717 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2048.078055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2048.079001] Call Trace: [ 2048.079298] dump_stack+0x107/0x167 [ 2048.079699] should_fail.cold+0x5/0xa [ 2048.080112] _copy_from_user+0x2e/0x1b0 [ 2048.080554] __copy_msghdr_from_user+0x91/0x4b0 [ 2048.081060] ? __ia32_sys_shutdown+0x80/0x80 [ 2048.081538] ? __lock_acquire+0x1657/0x5b00 [ 2048.082016] ___sys_recvmsg+0xd5/0x200 [ 2048.082453] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2048.082986] ? __lockdep_reset_lock+0x180/0x180 [ 2048.083489] ? lock_downgrade+0x6d0/0x6d0 [ 2048.083938] ? lock_acquire+0x197/0x470 [ 2048.084374] ? find_held_lock+0x2c/0x110 [ 2048.084847] ? __might_fault+0xd3/0x180 [ 2048.085294] ? lock_downgrade+0x6d0/0x6d0 [ 2048.085786] do_recvmmsg+0x24c/0x6d0 [ 2048.086220] ? ___sys_recvmsg+0x200/0x200 [ 2048.086685] ? lock_downgrade+0x6d0/0x6d0 [ 2048.087160] ? ksys_write+0x12d/0x260 [ 2048.087600] ? wait_for_completion_io+0x270/0x270 [ 2048.088142] ? rcu_read_lock_any_held+0x75/0xa0 [ 2048.088669] ? vfs_write+0x354/0xa70 [ 2048.089089] __x64_sys_recvmmsg+0x20f/0x260 [ 2048.089570] ? ksys_write+0x1a9/0x260 [ 2048.090006] ? __do_sys_socketcall+0x600/0x600 [ 2048.090531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2048.091111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2048.091687] do_syscall_64+0x33/0x40 [ 2048.092105] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2048.092680] RIP: 0033:0x7f08503ffb19 [ 2048.093095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2048.095162] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2048.096016] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 15:57:58 executing program 6: keyctl$assume_authority(0x10, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/keycreate\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f80000200040000300000000000000010000000000000002", 0x3, 0x9}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a31a278e964fb9fe9a07d9f997a341f201c8c54197db7edc15d047bfa811eba145c21ec19be05cdf80ea9d426ce8440b840cac90e72f1f1500"/86]) getsockname(0xffffffffffffffff, &(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @initdev}, 0x0) [ 2048.096023] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 15:57:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() fork() r2 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) getpgrp(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2048.096029] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2048.096034] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2048.096040] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2048.111799] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:57:58 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:57:58 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r1 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r0, &(0x7f0000000040)={0x2000, 0x100, 0x8}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x0) syz_io_uring_setup(0xab, &(0x7f0000000240)={0x0, 0x1b3f, 0x4, 0x0, 0x3d4, 0x0, r4}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180), &(0x7f0000000340)) [ 2048.226798] FAT-fs (loop6): Unrecognized mount option "£'Ž–O¹þšÙù—£AòÈÅA—Û~ÜÐG¿¨ë¡EÂÁ›à\߀êBlèD „ ¬ç/" or missing value [ 2048.289455] FAT-fs (loop5): bogus number of FAT sectors [ 2048.290199] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2048.366099] FAT-fs (loop6): Unrecognized mount option "£'Ž–O¹þšÙù—£AòÈÅA—Û~ÜÐG¿¨ë¡EÂÁ›à\߀êBlèD „ ¬ç/" or missing value [ 2048.376795] FAT-fs (loop5): bogus number of FAT sectors [ 2048.378052] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2049.033406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.034608] print_req_error: 6 callbacks suppressed [ 2049.034626] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2049.037917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.039041] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2049.041239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.042357] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2049.044573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.045677] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2049.047881] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2049.050024] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2049.051599] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2049.053734] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2049.055287] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2049.057408] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2049.058970] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2049.061076] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2049.062754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.063878] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2049.066072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.067203] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2049.069425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.070644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.079321] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2049.080918] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2049.082496] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2049.084066] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2049.191952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.193318] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2049.198453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.199816] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2049.201750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.203727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.205333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.206933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.208591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2049.210070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:58:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:58:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:58:14 executing program 6: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000180)={[0x1e]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0xa, 0x24, 0x5, 0x4, 0x2, 0xfe2d, 0x20, 0x121, 0x1}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = syz_io_uring_setup(0x3a77, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:crontab_exec_t:s0\x00', 0x24, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x6}, 0x1000000, 0x2, 0x3, 0xc, 0x5e9e}, 0x20) unshare(0x48020200) 15:58:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 8) 15:58:14 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:58:14 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() fork() r2 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) getpgrp(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:58:14 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000240)=""/113, 0x71}], 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x9, 0x40, 0x0, 0xfffffffe}, {0x200, 0x2, 0xc, 0xfffffffa}, {0x7ff, 0x25, 0x9, 0x7}, {0x3f, 0x0, 0x1}, {0x4, 0xc8, 0x3f, 0x40}]}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000000)=""/99, 0x63}) 15:58:14 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r1 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r0, &(0x7f0000000040)={0x2000, 0x100, 0x8}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x0) syz_io_uring_setup(0xab, &(0x7f0000000240)={0x0, 0x1b3f, 0x4, 0x0, 0x3d4, 0x0, r4}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180), &(0x7f0000000340)) [ 2063.893018] FAULT_INJECTION: forcing a failure. [ 2063.893018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2063.894997] CPU: 0 PID: 13852 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2063.895838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2063.896819] Call Trace: [ 2063.897139] dump_stack+0x107/0x167 [ 2063.897580] should_fail.cold+0x5/0xa [ 2063.898035] _copy_from_user+0x2e/0x1b0 [ 2063.898520] __copy_msghdr_from_user+0x91/0x4b0 [ 2063.899081] ? __ia32_sys_shutdown+0x80/0x80 [ 2063.899606] ? __lock_acquire+0x1657/0x5b00 [ 2063.900126] ___sys_recvmsg+0xd5/0x200 [ 2063.900590] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2063.901164] ? __lockdep_reset_lock+0x180/0x180 [ 2063.901720] ? lock_downgrade+0x6d0/0x6d0 [ 2063.902218] ? lock_acquire+0x197/0x470 [ 2063.902703] ? find_held_lock+0x2c/0x110 [ 2063.903185] ? __might_fault+0xd3/0x180 [ 2063.903656] ? lock_downgrade+0x6d0/0x6d0 [ 2063.904157] do_recvmmsg+0x24c/0x6d0 [ 2063.904599] ? ___sys_recvmsg+0x200/0x200 [ 2063.905111] ? lock_downgrade+0x6d0/0x6d0 [ 2063.905641] ? ksys_write+0x12d/0x260 [ 2063.906125] ? wait_for_completion_io+0x270/0x270 [ 2063.906735] ? rcu_read_lock_any_held+0x75/0xa0 [ 2063.907302] ? vfs_write+0x354/0xa70 [ 2063.907761] __x64_sys_recvmmsg+0x20f/0x260 [ 2063.908305] ? ksys_write+0x1a9/0x260 [ 2063.908777] ? __do_sys_socketcall+0x600/0x600 [ 2063.909346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2063.909991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2063.910647] do_syscall_64+0x33/0x40 [ 2063.911127] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2063.911786] RIP: 0033:0x7f08503ffb19 [ 2063.912227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2063.914553] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2063.915502] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2063.916387] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2063.917280] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2063.918191] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2063.919090] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2063.977336] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:58:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 9) [ 2063.982728] FAT-fs (loop5): bogus number of FAT sectors [ 2063.984097] FAT-fs (loop5): Can't find a valid FAT filesystem 15:58:14 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x290400, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000040)={{r1}, 0xa44d, 0x101, 0x44da1ea0}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x40, 0x4, 0xcb, 0x0, 0x4, 0x813, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f0000000180), 0x7}, 0x4808, 0x2, 0x594, 0x9, 0x80000001, 0x9, 0x13, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, r2, 0x3) unshare(0x48020200) [ 2064.023620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 15:58:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:58:14 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2064.110895] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2064.118788] FAULT_INJECTION: forcing a failure. [ 2064.118788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2064.121723] CPU: 1 PID: 13944 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2064.123164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2064.124832] Call Trace: [ 2064.125372] dump_stack+0x107/0x167 [ 2064.126118] should_fail.cold+0x5/0xa [ 2064.126909] _copy_from_user+0x2e/0x1b0 [ 2064.127721] __copy_msghdr_from_user+0x91/0x4b0 [ 2064.128663] ? __ia32_sys_shutdown+0x80/0x80 [ 2064.129552] ? __lock_acquire+0x1657/0x5b00 [ 2064.130453] ___sys_recvmsg+0xd5/0x200 [ 2064.131244] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2064.132231] ? __lockdep_reset_lock+0x180/0x180 [ 2064.133189] ? _raw_spin_unlock_irq+0x27/0x30 [ 2064.134106] ? lock_acquire+0x197/0x470 [ 2064.134928] ? find_held_lock+0x2c/0x110 [ 2064.135510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2064.135762] ? __might_fault+0xd3/0x180 [ 2064.135783] ? lock_downgrade+0x6d0/0x6d0 [ 2064.138341] ? io_schedule_timeout+0x140/0x140 [ 2064.139291] do_recvmmsg+0x24c/0x6d0 [ 2064.140056] ? ___sys_recvmsg+0x200/0x200 [ 2064.140893] ? lock_downgrade+0x6d0/0x6d0 [ 2064.141740] ? ksys_write+0x12d/0x260 [ 2064.142552] ? wait_for_completion_io+0x270/0x270 [ 2064.143526] ? rcu_read_lock_any_held+0x75/0xa0 [ 2064.144464] ? vfs_write+0x354/0xa70 [ 2064.145221] __x64_sys_recvmmsg+0x20f/0x260 [ 2064.146098] ? ksys_write+0x1a9/0x260 [ 2064.146888] ? __do_sys_socketcall+0x600/0x600 [ 2064.147816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2064.148869] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2064.149915] do_syscall_64+0x33/0x40 [ 2064.150676] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2064.151710] RIP: 0033:0x7f08503ffb19 [ 2064.152467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2064.156190] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2064.157727] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 15:58:14 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2064.159176] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2064.160825] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2064.162276] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2064.163742] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 15:58:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 10) 15:58:14 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r1 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r0, &(0x7f0000000040)={0x2000, 0x100, 0x8}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x0) syz_io_uring_setup(0xab, &(0x7f0000000240)={0x0, 0x1b3f, 0x4, 0x0, 0x3d4, 0x0, r4}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180), &(0x7f0000000340)) 15:58:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2064.256780] FAULT_INJECTION: forcing a failure. [ 2064.256780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2064.258641] CPU: 0 PID: 13988 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2064.259371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2064.260268] Call Trace: [ 2064.260556] dump_stack+0x107/0x167 [ 2064.260952] should_fail.cold+0x5/0xa [ 2064.261378] _copy_from_user+0x2e/0x1b0 [ 2064.261807] __copy_msghdr_from_user+0x91/0x4b0 [ 2064.262300] ? __ia32_sys_shutdown+0x80/0x80 [ 2064.262785] ? __lock_acquire+0x1657/0x5b00 [ 2064.263253] ___sys_recvmsg+0xd5/0x200 [ 2064.263669] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2064.264188] ? __lockdep_reset_lock+0x180/0x180 [ 2064.264721] ? lock_downgrade+0x6d0/0x6d0 [ 2064.265183] ? lock_acquire+0x197/0x470 [ 2064.265611] ? find_held_lock+0x2c/0x110 [ 2064.266056] ? __might_fault+0xd3/0x180 [ 2064.266496] ? lock_downgrade+0x6d0/0x6d0 [ 2064.266955] do_recvmmsg+0x24c/0x6d0 [ 2064.267365] ? ___sys_recvmsg+0x200/0x200 [ 2064.267816] ? lock_downgrade+0x6d0/0x6d0 [ 2064.268264] ? ksys_write+0x12d/0x260 [ 2064.268685] ? wait_for_completion_io+0x270/0x270 [ 2064.269211] ? rcu_read_lock_any_held+0x75/0xa0 [ 2064.269705] ? vfs_write+0x354/0xa70 [ 2064.270114] __x64_sys_recvmmsg+0x20f/0x260 [ 2064.270600] ? ksys_write+0x1a9/0x260 [ 2064.271008] ? __do_sys_socketcall+0x600/0x600 [ 2064.271510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2064.272083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2064.272636] do_syscall_64+0x33/0x40 [ 2064.273027] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2064.273573] RIP: 0033:0x7f08503ffb19 [ 2064.273976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2064.275970] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2064.276797] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2064.277571] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2064.278325] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2064.279103] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2064.279868] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 15:58:14 executing program 6: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) sendfile(r1, r3, &(0x7f00000000c0)=0x1ff, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2064.318803] FAT-fs (loop5): bogus number of FAT sectors [ 2064.319432] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2064.323164] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2064.377090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2064.633896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2064.635109] print_req_error: 22 callbacks suppressed [ 2064.635127] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.638520] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.638572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2064.640812] buffer_io_error: 6 callbacks suppressed [ 2064.640824] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2064.646653] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.648861] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.648948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2064.651045] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2064.652183] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.656897] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.656958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2064.659083] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2064.661884] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.664067] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.664125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2064.666257] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2064.667426] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.671444] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2064.671531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2064.673682] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2064.675043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2064.676566] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2064.677923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2064.679261] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2064.681894] Buffer I/O error on dev loop7, logical block 2096903, async page read 15:58:29 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() fork() r2 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) getpgrp(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:58:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:58:29 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:58:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 11) 15:58:29 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r1 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r0, &(0x7f0000000040)={0x2000, 0x100, 0x8}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x0) syz_io_uring_setup(0xab, &(0x7f0000000240)={0x0, 0x1b3f, 0x4, 0x0, 0x3d4, 0x0, r4}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000180), &(0x7f0000000340)) 15:58:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f5e12d9daf3b10656d7472616e73cb", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=none,smackfsfloor=:,seclabel,\x00']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$getown(r0, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400300001400010000000200040000000a00000008000000", @ANYBLOB="11d2c78da976cf9c54b1ccda8931292b54a802eb8b1be03b43664b2ade52220a4349797f4bea9eb897483d6aae7e21cd259b2c0edcaf249fa1a6a2b2d7150d346b9a73c2373362c8"], 0x340}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 15:58:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\b\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:58:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2079.159012] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:58:29 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2079.181880] FAULT_INJECTION: forcing a failure. [ 2079.181880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2079.183892] CPU: 1 PID: 14016 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2079.184742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2079.185763] Call Trace: [ 2079.186101] dump_stack+0x107/0x167 [ 2079.186548] should_fail.cold+0x5/0xa [ 2079.187028] _copy_from_user+0x2e/0x1b0 [ 2079.187517] __copy_msghdr_from_user+0x91/0x4b0 [ 2079.188074] ? __ia32_sys_shutdown+0x80/0x80 [ 2079.188600] ? __lock_acquire+0x1657/0x5b00 [ 2079.189124] ___sys_recvmsg+0xd5/0x200 [ 2079.189587] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2079.190174] ? __lockdep_reset_lock+0x180/0x180 [ 2079.190762] ? lock_downgrade+0x6d0/0x6d0 [ 2079.191262] ? lock_acquire+0x197/0x470 [ 2079.191737] ? find_held_lock+0x2c/0x110 [ 2079.192224] ? __might_fault+0xd3/0x180 [ 2079.192694] ? lock_downgrade+0x6d0/0x6d0 [ 2079.193202] do_recvmmsg+0x24c/0x6d0 [ 2079.193675] ? ___sys_recvmsg+0x200/0x200 [ 2079.194172] ? lock_downgrade+0x6d0/0x6d0 [ 2079.194710] ? ksys_write+0x12d/0x260 [ 2079.195185] ? wait_for_completion_io+0x270/0x270 [ 2079.195806] ? rcu_read_lock_any_held+0x75/0xa0 [ 2079.196400] ? vfs_write+0x354/0xa70 [ 2079.196873] __x64_sys_recvmmsg+0x20f/0x260 [ 2079.197417] ? ksys_write+0x1a9/0x260 [ 2079.197904] ? __do_sys_socketcall+0x600/0x600 [ 2079.198490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2079.199158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2079.199816] do_syscall_64+0x33/0x40 [ 2079.200278] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2079.200917] RIP: 0033:0x7f08503ffb19 [ 2079.201377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2079.203668] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2079.204610] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2079.205494] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2079.206373] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2079.207256] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2079.208174] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2079.224851] FAT-fs (loop5): bogus number of FAT sectors [ 2079.226067] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2079.232056] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:58:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) [ 2079.285717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 15:58:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 12) 15:58:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:58:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\b\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:58:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\b\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:58:29 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r1 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r0, &(0x7f0000000040)={0x2000, 0x100, 0x8}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x0) 15:58:29 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2079.442849] FAULT_INJECTION: forcing a failure. [ 2079.442849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2079.445820] CPU: 0 PID: 14136 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2079.447239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2079.448909] Call Trace: [ 2079.449446] dump_stack+0x107/0x167 [ 2079.450192] should_fail.cold+0x5/0xa [ 2079.450983] _copy_from_user+0x2e/0x1b0 [ 2079.451795] __copy_msghdr_from_user+0x91/0x4b0 [ 2079.452740] ? __ia32_sys_shutdown+0x80/0x80 [ 2079.453648] ? __lock_acquire+0x1657/0x5b00 [ 2079.454582] ___sys_recvmsg+0xd5/0x200 [ 2079.455375] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2079.456364] ? __lockdep_reset_lock+0x180/0x180 [ 2079.457305] ? lock_downgrade+0x6d0/0x6d0 [ 2079.458154] ? lock_acquire+0x197/0x470 [ 2079.458969] ? find_held_lock+0x2c/0x110 [ 2079.459796] ? __might_fault+0xd3/0x180 [ 2079.460605] ? lock_downgrade+0x6d0/0x6d0 [ 2079.461479] do_recvmmsg+0x24c/0x6d0 [ 2079.462242] ? ___sys_recvmsg+0x200/0x200 [ 2079.463086] ? lock_downgrade+0x6d0/0x6d0 [ 2079.463931] ? ksys_write+0x12d/0x260 [ 2079.464722] ? wait_for_completion_io+0x270/0x270 [ 2079.465695] ? rcu_read_lock_any_held+0x75/0xa0 [ 2079.466646] ? vfs_write+0x354/0xa70 [ 2079.467410] __x64_sys_recvmmsg+0x20f/0x260 [ 2079.468291] ? ksys_write+0x1a9/0x260 [ 2079.469071] ? __do_sys_socketcall+0x600/0x600 [ 2079.470006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2079.471074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2079.472124] do_syscall_64+0x33/0x40 [ 2079.472883] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2079.473929] RIP: 0033:0x7f08503ffb19 [ 2079.474703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2079.478454] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2079.480000] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2079.481448] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2079.482898] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2079.484360] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2079.485813] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2079.487927] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2079.492418] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2079.506128] FAT-fs (loop5): bogus number of FAT sectors [ 2079.506797] FAT-fs (loop5): Can't find a valid FAT filesystem 15:58:29 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:58:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:58:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 15:58:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 13) 15:58:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 15:58:29 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:58:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='\v\f\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\b\x00', @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2079.673983] FAT-fs (loop5): bogus number of FAT sectors [ 2079.674658] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2079.707162] FAULT_INJECTION: forcing a failure. [ 2079.707162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2079.708530] CPU: 1 PID: 14163 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2079.709276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2079.710162] Call Trace: [ 2079.710466] dump_stack+0x107/0x167 [ 2079.710872] should_fail.cold+0x5/0xa [ 2079.711294] _copy_from_user+0x2e/0x1b0 [ 2079.711742] __copy_msghdr_from_user+0x91/0x4b0 [ 2079.712249] ? __ia32_sys_shutdown+0x80/0x80 [ 2079.712736] ? __lock_acquire+0x1657/0x5b00 [ 2079.713219] ___sys_recvmsg+0xd5/0x200 [ 2079.713635] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2079.714169] ? __lockdep_reset_lock+0x180/0x180 [ 2079.714690] ? lock_downgrade+0x6d0/0x6d0 [ 2079.715142] ? lock_acquire+0x197/0x470 [ 2079.715580] ? find_held_lock+0x2c/0x110 [ 2079.716019] ? __might_fault+0xd3/0x180 [ 2079.716445] ? lock_downgrade+0x6d0/0x6d0 [ 2079.716917] do_recvmmsg+0x24c/0x6d0 [ 2079.717331] ? ___sys_recvmsg+0x200/0x200 [ 2079.717800] ? lock_downgrade+0x6d0/0x6d0 [ 2079.718265] ? ksys_write+0x12d/0x260 [ 2079.718703] ? wait_for_completion_io+0x270/0x270 [ 2079.719245] ? rcu_read_lock_any_held+0x75/0xa0 [ 2079.719769] ? vfs_write+0x354/0xa70 [ 2079.720192] __x64_sys_recvmmsg+0x20f/0x260 [ 2079.720678] ? ksys_write+0x1a9/0x260 [ 2079.721104] ? __do_sys_socketcall+0x600/0x600 [ 2079.721627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2079.722218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2079.722804] do_syscall_64+0x33/0x40 [ 2079.723216] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2079.723785] RIP: 0033:0x7f08503ffb19 [ 2079.724205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2079.726267] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2079.727136] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2079.727939] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2079.728747] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2079.729548] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2079.730357] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 15:58:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) [ 2079.750178] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:58:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2079.791321] FAT-fs (loop5): bogus number of FAT sectors [ 2079.791928] FAT-fs (loop5): Can't find a valid FAT filesystem 15:58:30 executing program 6: chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x5]}, 0x8, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x4000, 0xc212b8022482faa6) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x4800, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000400)) sendfile(r1, r2, 0x0, 0x100000001) 15:58:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2079.863857] FAT-fs (loop5): bogus number of FAT sectors [ 2079.864539] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2080.499093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.501022] print_req_error: 6 callbacks suppressed [ 2080.501039] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.504083] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.504133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.505311] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2080.507804] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.509772] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.509829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.510973] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2080.513387] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.515373] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.516557] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2080.518412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.519473] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.521429] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.521486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.522634] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2080.525095] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.527107] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2080.527163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.528266] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2080.530765] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2080.530841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.532697] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2080.532755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.534611] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2080.554845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.556574] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2080.559155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.561096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.562133] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2080.562188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.564078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.565162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.566284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2080.567382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:58:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 14) 15:58:44 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4f}}}}, [@NL80211_ATTR_IE={0x5f, 0x2a, [@perr={0x84, 0x42, {0x8, 0x4, [@ext={{}, @broadcast, 0x1000, @device_b, 0x5}, @not_ext={{}, @device_a, 0x6, "", 0x2a}, @ext={{}, @device_a, 0x80, @device_b, 0x38}, @not_ext={{}, @device_b, 0x40, "", 0x32}]}}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x3f, 0x9, @broadcast, 0xe8, 0x4, 0x1}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x5, 0x34, @random='>'}, @NL80211_ATTR_MAC={0xa, 0x6, @random="efd47cd87638"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xb8}, 0x1, 0x0, 0x0, 0x880}, 0x805) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x4, 0x7, 0x81, 0x6, 0x2, 0x1f, 0x5, 0x0, 0xbd2, 0x0, 0x6}, r3, 0x8, r2, 0x3) r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="fec16210336d9f15c3f8400da3694e40385168dc10f8961e29124019f32e47787236a0e855ee8464b55fe708ef42b431889a61e2e1fac8c5d0ed57ccd35f1bedc03e0129cf02acb9595142c9c51b62a981907b0a776e02fd43307e22511a07d327d39ba89f", 0x65}], 0x1) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xbb, 0x81, 0x9, 0x3, 0x0, 0xffff, 0x444, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x1, 0x2, 0x3, 0x8, 0x0, 0x2, 0x1, 0x0, 0x101, 0x0, 0x8}, 0x0, 0x2, r1, 0x2) 15:58:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) 15:58:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f000000080003", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:58:44 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) r2 = gettid() pidfd_open(r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1368, 0x2b, 0x200, 0x70bd29, 0x25dfdbfd, {0x1e}, [@nested={0x117e, 0x0, 0x0, 0x1, [@generic="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", @typed={0x8, 0x61, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x4e, 0x0, 0x0, @u32=0x56}, @generic="43c1f5b23f1a90cc81cc86671079a1ae3185984eaf2a87fedcb0687f7e6d7b509c200e6502a33db16da0a7f1fcc5fb5856e9c4eb5e9a5e032a85432fc5eb283eb13f407cd29e1e4cedad17c3736e2ffdb487c7a5a9e3c292ccf1def1a27b59230fece736cfe0dbdd93f07a877c78d67e48c4ffff3d933f1e7e8c949cd774f8c8404e21c85ac92f8d5237d31226bb1913f619cc5b1054f0184fec6abb5738e047a7219216f0790481719626355b4cb2b3f897b887b18f3e5d2e52b29d4f8f6c0e4bac106a6e8d346fbf872a941a5f33b080c1e408852c75043e8982b4e9d626f4d8c1e0322c", @generic="4de96965148878d24d3f87eaf6f52b3619cc7e197b5599561997fd079829835dd38b45f6c92ef33a7ad225db78055b00c2807963627125193ae9e33958c7b15626e018179c8d6a906ed1fb103c46cd94e9a576943baeba0082d102cefb46e2a4921ad33127a2845c15e2553365ef637f9c1701c5fd147cc12063f08236", @typed={0x8, 0x31, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x83, 0x0, 0x0, @pid}, @typed={0x4, 0x73}, @nested={0x1c5, 0xe, 0x0, 0x1, [@generic="3cbde131a07c4fe722b1afc7293f8c12316e7bd400ff16c978f5d00e6b325fb654371f2320b438ff376a75089ac3e8ca2b1226e13eb5919338f85bb3f4612c378dc6e62cc4df1cb0b8ce4165cebb1af4f111b732f8ec7b57e6b46cffb4147d4cde882f3560f16fd1ff2e", @generic="e3324f657024a207744fb34327f035fb15e9508867986d9b7a6aabcc9f1f8d2c2e240b1128290992371996bba8718533c704ca569f2486be9690d0034ab37ed99f82f20b065a8896bf4888c71d0a94944ef6bbe44c237f123e9fc3ae47b8b29fadbef7e5a44508d1c440cb912a92a751a4f9def931a5b53d39aeaee9e48c37b57c203ace2d7864001f6a88c0a8f72b9ad17b95ef96300c701366d0bca0916c3bdbbe65372d9bd2d41bd673f70f99e697091a69a622e9025078d594123df4cf4bff717e34e0cbbbfb94ad013f858c3d6264f2751d62e53808f9cfa58952c5b7c3485145877930a184fcbf63", @generic="585548c09b668838ed8d449f2e4f7d6cf4b14453db7a303bcc85f05d7e1dac3eefdd7918a10eed9ab8bc67a7ff33050bf9bb288bed8e12ea4c5771a15f848e8052b913c8a158fa918e1e1aafece4fa2f5b7b29f23ae3231d3e021330e6ea9b48", @typed={0xc, 0x2a, 0x0, 0x0, @str='ip6tnl0\x00'}]}]}, 0x1368}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'ip6tnl0\x00'}) 15:58:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 15:58:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:58:44 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2094.060724] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2094.079807] FAULT_INJECTION: forcing a failure. [ 2094.079807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2094.082448] CPU: 1 PID: 14296 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2094.083871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2094.085565] Call Trace: [ 2094.086118] dump_stack+0x107/0x167 [ 2094.086890] should_fail.cold+0x5/0xa [ 2094.087683] _copy_from_user+0x2e/0x1b0 [ 2094.088506] __copy_msghdr_from_user+0x91/0x4b0 [ 2094.089460] ? __ia32_sys_shutdown+0x80/0x80 15:58:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) [ 2094.090382] ? __lock_acquire+0x1657/0x5b00 [ 2094.091417] ___sys_recvmsg+0xd5/0x200 [ 2094.092216] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2094.093219] ? __lockdep_reset_lock+0x180/0x180 [ 2094.094170] ? lock_downgrade+0x6d0/0x6d0 [ 2094.095036] ? lock_acquire+0x197/0x470 [ 2094.095853] ? find_held_lock+0x2c/0x110 [ 2094.096700] ? __might_fault+0xd3/0x180 [ 2094.097517] ? lock_downgrade+0x6d0/0x6d0 [ 2094.098392] do_recvmmsg+0x24c/0x6d0 [ 2094.099183] ? ___sys_recvmsg+0x200/0x200 [ 2094.100036] ? lock_downgrade+0x6d0/0x6d0 [ 2094.100901] ? ksys_write+0x12d/0x260 [ 2094.101705] ? wait_for_completion_io+0x270/0x270 [ 2094.102695] ? rcu_read_lock_any_held+0x75/0xa0 [ 2094.103651] ? vfs_write+0x354/0xa70 [ 2094.104416] __x64_sys_recvmmsg+0x20f/0x260 [ 2094.105296] ? ksys_write+0x1a9/0x260 [ 2094.106076] ? __do_sys_socketcall+0x600/0x600 [ 2094.107029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2094.108093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2094.109141] do_syscall_64+0x33/0x40 [ 2094.109897] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2094.110956] RIP: 0033:0x7f08503ffb19 [ 2094.111714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2094.115419] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2094.116977] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2094.118426] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2094.119893] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2094.121342] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2094.122795] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2094.140724] FAT-fs (loop5): bogus number of FAT sectors [ 2094.141913] FAT-fs (loop5): Can't find a valid FAT filesystem 15:58:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f000000080003", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:58:44 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r2, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000004c0)={{r0}, 0x0, 0x1e, @unused=[0x7, 0x200, 0xfff, 0x101], @subvolid=0x7}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:58:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0), 0x0, 0x102, 0x0) [ 2094.252754] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:58:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2094.308064] FAT-fs (loop5): bogus number of FAT sectors 15:58:44 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r0, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2094.309624] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2094.328355] 9pnet: Insufficient options for proto=fd 15:58:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2094.407390] FAT-fs (loop5): bogus number of FAT sectors [ 2094.408043] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2094.421901] 9pnet: Insufficient options for proto=fd [ 2094.651329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2094.651951] print_req_error: 22 callbacks suppressed [ 2094.651962] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2094.653688] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2094.654811] buffer_io_error: 6 callbacks suppressed [ 2094.654818] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2094.660043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2094.660642] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2094.661767] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2094.662893] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2094.665324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2094.665897] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2094.667077] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2094.668193] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2094.669092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2094.669688] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2094.670819] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2094.671939] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2094.672835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2094.673428] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2094.674556] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2094.675690] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2094.676588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2094.677181] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2094.678113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2094.678797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2094.681245] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2094.682060] Buffer I/O error on dev loop7, logical block 2096903, async page read 15:59:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 15:59:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 15) 15:59:00 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r0, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:59:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:59:00 executing program 6: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x2d) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="a6996d5eb7dd5ee47f000000ac0042ebfdb9ce1ac8c1130c45ab"]) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000100)="a2e498718dc79fa839f1ecf4af31bae65b33fb5ec4cde901a98ba3a3c69da3fe2b918934fb", 0x25, 0x8}, {&(0x7f0000000140)="27f1209014a234e3b242c080f3964f10e0f6395f9aa1c495ab6769635db6a60cd05c5e94d69182a319b36a1cfffe45a316b8ee4dbf9bac65dc8f665f8a6fdb02e86f51e3bdb396b38d0268abd01ed3e3e21508a18a97e15bf10ae15c39eca30d17231f8bd72611faa81399545b81beef94e892b4d8b2c54343b335ced96e4efae0f88fb8ff5ae85f19b3743fae2c73", 0x8f, 0xa7a}, {&(0x7f0000000200)="b2102c897a9a7195a051fae470f975d0c313597d2f72e52f146f0a339f48518850ea3853c4a178f6a9f3cf3dfbf6ea335e16d162014c3030581d2556202e72703d47cf4e94bef5eb78abe75969e963c82cec2566cf81bcf8f9e538c0fab5ed69ca27719868d32c6be3a8379379874519485585ab34aa483d6ea9d330c1612bc85688c951b8d61aa10a89e1b13e9aa38edd0c1fa1976555f5b5e9954953b1bd71472bce1c1f68cd64bfaf19e79016425573bf73d09ed5acbe89", 0xb9, 0xd942}], 0x10, &(0x7f0000000340)={[{@check_relaxed}], [{@fsname={'fsname', 0x3d, '@^,,'}}, {@hash}, {@audit}, {@hash}, {@dont_hash}]}) 15:59:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0), 0x0, 0x102, 0x0) 15:59:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f000000080003", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:59:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x7, 0x0, 0xecc0, 0x4, 0x3, 0x1}, {0x9, 0x7fffffff, 0x10001, 0x2, 0x1, 0x10001}], ['\x00', '\x00']}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r2, r1) [ 2110.129073] FAT-fs (loop5): bogus number of FAT sectors [ 2110.130275] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2110.162780] 9pnet: Insufficient options for proto=fd 15:59:00 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) signalfd4(r0, &(0x7f00000014c0)={[0x3]}, 0x8, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2110.221943] FAULT_INJECTION: forcing a failure. [ 2110.221943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2110.225782] CPU: 0 PID: 14451 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2110.227190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2110.228854] Call Trace: [ 2110.229393] dump_stack+0x107/0x167 [ 2110.230132] should_fail.cold+0x5/0xa [ 2110.230915] _copy_from_user+0x2e/0x1b0 [ 2110.231777] __copy_msghdr_from_user+0x91/0x4b0 [ 2110.232713] ? __ia32_sys_shutdown+0x80/0x80 [ 2110.233595] ? __lock_acquire+0x1657/0x5b00 [ 2110.234483] ___sys_recvmsg+0xd5/0x200 [ 2110.235276] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2110.236262] ? __lockdep_reset_lock+0x180/0x180 [ 2110.237197] ? lock_downgrade+0x6d0/0x6d0 [ 2110.238035] ? lock_acquire+0x197/0x470 [ 2110.238828] ? find_held_lock+0x2c/0x110 [ 2110.239662] ? __might_fault+0xd3/0x180 [ 2110.240456] ? lock_downgrade+0x6d0/0x6d0 [ 2110.241307] do_recvmmsg+0x24c/0x6d0 [ 2110.242067] ? ___sys_recvmsg+0x200/0x200 [ 2110.242899] ? lock_downgrade+0x6d0/0x6d0 [ 2110.243036] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2110.243757] ? ksys_write+0x12d/0x260 [ 2110.243796] ? wait_for_completion_io+0x270/0x270 [ 2110.247549] ? rcu_read_lock_any_held+0x75/0xa0 [ 2110.248500] ? vfs_write+0x354/0xa70 [ 2110.249262] __x64_sys_recvmmsg+0x20f/0x260 [ 2110.250127] ? ksys_write+0x1a9/0x260 [ 2110.250893] ? __do_sys_socketcall+0x600/0x600 [ 2110.251830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2110.252883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2110.253931] do_syscall_64+0x33/0x40 [ 2110.254685] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2110.255730] RIP: 0033:0x7f08503ffb19 15:59:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 15:59:00 executing program 0: rename(&(0x7f00000006c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) fcntl$getflags(r1, 0x40a) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0xfffffffe}, {{@in6=@private1, 0x0, 0x6c}}}, 0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x40081, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="bb0ab816f26824d22b0800ddaef3bc087c62d31485a57974478d1f44f50c3e45b4ac8e5978e745000000a864328715016450acbf1898d697d67b0a0d495fc8a919aae9034ce630a308578c85c5a6719ca6ddc9339f9e9e18c0314e", @ANYRES64, @ANYRESOCT=r0, @ANYRES16=r0], 0xfdef) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000380)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x17) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000600)={0x2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) unshare(0x48020200) [ 2110.256488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2110.260464] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2110.261992] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2110.263432] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2110.264855] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2110.266280] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2110.267712] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 15:59:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0), 0x0, 0x102, 0x0) 15:59:00 executing program 6: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1002) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) 15:59:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2110.382394] FAT-fs (loop5): bogus number of FAT sectors [ 2110.383688] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2110.425649] 9pnet: Insufficient options for proto=fd 15:59:00 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2110.497934] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:59:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 15:59:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2111.160637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.161474] print_req_error: 6 callbacks suppressed [ 2111.161487] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.163844] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.163865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.166050] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2111.166772] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.166853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.168429] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.169769] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.169848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.170864] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2111.172313] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.174439] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.175333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.176648] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2111.178066] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.184303] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.185133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.187170] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2111.187861] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.193053] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2111.193130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.194678] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2111.195420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.199271] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2111.200869] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2111.280434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.281187] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2111.282334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.283046] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2111.284794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.285620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.286470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.287271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.288052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.288903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 15:59:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 16) 15:59:16 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:59:16 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x30b}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = signalfd(r0, &(0x7f0000000040)={[0x8]}, 0x8) getdents64(r5, &(0x7f0000000300)=""/213, 0xd5) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r5, 0x0, &(0x7f0000000500)="171f8489d09e2726047b7f4df0d61a10885db9d499d0768a4fb6c4c8eaa6c96592f2c1263eb35bb0fa98b34043b6824be48d13144fe62e380a73ae5d4257b4fd032014434e5b843efcada94dc91375c7663d55eea0c1a91e8156a1203f28b2b27b0f4af23bfb0d1cd402af377c8000ab182a46d1aa13650c0c813d510b80fd70db7d3ce891fac3a395d27a300cc26597d8dc23745b1c016708f3c59a03161696cb488dd6d580d05890c35b99dbd69810be275e7e4b2ec643f87cc6f3e71dcade484f1cf40df8a17a9f9724d5c196f4470a70fdbb5ac08494eec7ca01c692add461dc77f4b9dd92d5f9c592d958dd31fe4fe493d512103d23a763", 0xfa, 0x8848, 0x1, {0x0, r7}}, 0x101) syz_io_uring_setup(0x4d7f, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x31c, 0x0, r5}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x511001, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r10}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) syz_io_uring_submit(r8, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0xa, 0x4, 0x0, 0x9, 0x2, 0x1, {0x0, r7}}, 0x1000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:59:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 15:59:16 executing program 6: ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'lo\x00', {0x4}, 0x9}) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000640}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) 15:59:16 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:59:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:59:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2126.107732] FAT-fs (loop5): bogus number of FAT sectors [ 2126.108588] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2126.118065] FAULT_INJECTION: forcing a failure. [ 2126.118065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2126.120663] CPU: 0 PID: 14699 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2126.121642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.122806] Call Trace: [ 2126.123228] dump_stack+0x107/0x167 [ 2126.123750] should_fail.cold+0x5/0xa [ 2126.124302] _copy_from_user+0x2e/0x1b0 [ 2126.124876] __copy_msghdr_from_user+0x91/0x4b0 [ 2126.125557] ? __ia32_sys_shutdown+0x80/0x80 [ 2126.126200] ? __lock_acquire+0x1657/0x5b00 [ 2126.126847] ___sys_recvmsg+0xd5/0x200 [ 2126.127441] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2126.128163] ? __lockdep_reset_lock+0x180/0x180 [ 2126.128827] ? lock_downgrade+0x6d0/0x6d0 [ 2126.129447] ? lock_acquire+0x197/0x470 [ 2126.130029] ? find_held_lock+0x2c/0x110 [ 2126.130633] ? __might_fault+0xd3/0x180 [ 2126.131245] ? lock_downgrade+0x6d0/0x6d0 [ 2126.131867] do_recvmmsg+0x24c/0x6d0 [ 2126.132419] ? ___sys_recvmsg+0x200/0x200 [ 2126.133023] ? lock_downgrade+0x6d0/0x6d0 [ 2126.133635] ? ksys_write+0x12d/0x260 [ 2126.134207] ? wait_for_completion_io+0x270/0x270 [ 2126.134916] ? rcu_read_lock_any_held+0x75/0xa0 [ 2126.135597] ? vfs_write+0x354/0xa70 [ 2126.136149] __x64_sys_recvmmsg+0x20f/0x260 [ 2126.136783] ? ksys_write+0x1a9/0x260 [ 2126.137338] ? __do_sys_socketcall+0x600/0x600 [ 2126.138014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.138776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.139552] do_syscall_64+0x33/0x40 [ 2126.140093] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2126.140840] RIP: 0033:0x7f08503ffb19 [ 2126.141386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.144076] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2126.145179] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2126.146225] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2126.147275] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2126.148308] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2126.149349] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2126.169783] 9pnet: Insufficient options for proto=fd [ 2126.174949] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:59:16 executing program 6: msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x3f9, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/89}, 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) r1 = pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) waitid$P_PIDFD(0x3, r1, &(0x7f0000000480), 0x80000000, &(0x7f0000000500)) 15:59:16 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:59:16 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2126.419948] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2126.424132] ext4 filesystem being mounted at /syzkaller-testdir532514822/syzkaller.GQraMp/289/file0 supports timestamps until 2038 (0x7fffffff) [ 2126.687235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2126.687896] print_req_error: 22 callbacks suppressed [ 2126.687907] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.689715] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.689725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2126.689747] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.691931] buffer_io_error: 6 callbacks suppressed [ 2126.691943] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2126.692562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2126.694658] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.696229] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.696611] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2126.697253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2126.700975] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.701407] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.702482] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2126.703954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2126.706258] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.706798] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.707682] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2126.708935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2126.711208] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2126.711880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2126.712867] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2126.714107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2126.717300] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2126.718866] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2126.720429] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2143.282077] 9pnet: Insufficient options for proto=fd [ 2143.286314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14845 comm=syz-executor.6 15:59:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 15:59:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 17) 15:59:33 executing program 0: timer_create(0x7, &(0x7f0000000000)={0x0, 0xa174, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) timer_gettime(r0, &(0x7f0000000100)) timer_create(0x6, &(0x7f0000000140)={0x0, 0xa}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {r2, r3+60000000}}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000002c0)={{r4, r5+60000000}, {0x77359400}}, &(0x7f0000000300)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x0, @fd_index=0x1, 0xffffffffffff8001, 0x0, 0x0, 0x8, 0x0, {0x1}}, 0x8) timer_gettime(r1, &(0x7f0000000380)) timer_settime(r1, 0x0, &(0x7f00000003c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000400)) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe, 0x810, 0xffffffffffffffff, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000009, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x9, 0x5, 0x10, 0x0, {0x1}}, 0x7ff) syz_io_uring_setup(0x7b8b, &(0x7f0000000480)={0x0, 0xdec8, 0x0, 0x4, 0x14e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r8, r7, &(0x7f00000005c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000580)='./file0\x00', 0x27, 0x200, 0x23456}, 0x68) timer_create(0x2, &(0x7f00000006c0)={0x0, 0x1e, 0x2, @thr={&(0x7f0000000600)="1b507687f968f171538077000fbc0881a7ed9a27c2d19e984f286fcc7e3ef3a9ab9168d4ef5df0edbe", &(0x7f0000000640)="eda5174ab0837f16dc4c4b10cdfcb42f9b7f4af080a1bcfbe4963559960c6c38f2bba3d1582f6f9b497ed9d2f536b3ab62e90774a3f72fde9b48421d2bf7630994fc33e34ee633dae69436"}}, &(0x7f0000000700)=0x0) timer_settime(r9, 0x1, &(0x7f0000000740)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000007c0)={{r10, r11+60000000}}, 0x0) 15:59:33 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:59:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:59:33 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 15:59:33 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() r3 = fork() ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:59:33 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r2 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cjche=mmap,cache=none,smackfsf|oor=:,seclabel,\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x34240, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0xf1, 0x0, 0x8, 0x80, 0x0, 0x1, 0x80100, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbed0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x8, 0x0, 0x1ff, 0x8, 0x5, 0x4, 0xc4db, 0x0, 0x81, 0x0, 0x8000}, r2, 0x1, r4, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4003000014000008000000", @ANYBLOB="1d0001"], 0x340}}, 0x0) fgetxattr(r0, &(0x7f0000000540)=@known='trusted.overlay.opaque\x00', &(0x7f0000000580)=""/238, 0xee) r5 = gettid() pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x14, 0x1f, 0x1, 0xda, 0x0, 0x9, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x1}, 0x4080, 0x100000001, 0x9, 0x6, 0xfffffffffffffffb, 0x0, 0xf12, 0x0, 0x6, 0x0, 0x5a}, r5, 0xffffffffffffffff, r4, 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x128, 0x0, 0x92654c97fa14cb2, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000002) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2}, 0x0) [ 2143.322077] 9pnet: Insufficient options for proto=fd [ 2143.338589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14855 comm=syz-executor.6 [ 2143.344054] FAULT_INJECTION: forcing a failure. [ 2143.344054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2143.347510] CPU: 1 PID: 14859 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2143.349162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2143.351152] Call Trace: [ 2143.351799] dump_stack+0x107/0x167 [ 2143.352680] should_fail.cold+0x5/0xa [ 2143.353605] _copy_from_user+0x2e/0x1b0 [ 2143.354566] __copy_msghdr_from_user+0x91/0x4b0 [ 2143.355700] ? __ia32_sys_shutdown+0x80/0x80 [ 2143.356798] ? __lock_acquire+0x1657/0x5b00 [ 2143.357856] ___sys_recvmsg+0xd5/0x200 [ 2143.358789] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2143.359978] ? __lockdep_reset_lock+0x180/0x180 [ 2143.361094] ? _raw_spin_unlock_irq+0x27/0x30 [ 2143.362028] ? lock_acquire+0x197/0x470 [ 2143.362985] ? find_held_lock+0x2c/0x110 [ 2143.363986] ? __might_fault+0xd3/0x180 [ 2143.364938] ? lock_downgrade+0x6d0/0x6d0 [ 2143.365933] ? io_schedule_timeout+0x140/0x140 [ 2143.367045] do_recvmmsg+0x24c/0x6d0 [ 2143.367956] ? ___sys_recvmsg+0x200/0x200 [ 2143.368991] ? lock_downgrade+0x6d0/0x6d0 [ 2143.369990] ? ksys_write+0x12d/0x260 [ 2143.370920] ? wait_for_completion_io+0x270/0x270 [ 2143.372088] ? rcu_read_lock_any_held+0x75/0xa0 [ 2143.373200] ? vfs_write+0x354/0xa70 [ 2143.374097] __x64_sys_recvmmsg+0x20f/0x260 [ 2143.375126] ? ksys_write+0x1a9/0x260 [ 2143.376058] ? __do_sys_socketcall+0x600/0x600 [ 2143.377152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2143.378415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2143.379702] do_syscall_64+0x33/0x40 [ 2143.380520] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2143.381604] RIP: 0033:0x7f08503ffb19 [ 2143.382392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2143.386271] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2143.387885] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2143.389397] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2143.390891] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2143.392394] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2143.393885] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2143.573166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2143.574094] print_req_error: 6 callbacks suppressed [ 2143.574108] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.576577] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.576607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2143.578863] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2143.579680] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.582504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2143.582530] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.583110] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.585325] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2143.586604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2143.588275] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.588290] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2143.590831] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.593147] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.593165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2143.595407] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2143.595983] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.598804] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2143.598822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2143.601049] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2143.602692] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2143.602712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2143.604943] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2143.604959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2143.607352] Buffer I/O error on dev loop7, logical block 2096903, async page read 15:59:48 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:59:48 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 15:59:48 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 15:59:48 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:59:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 15:59:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 18) 15:59:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x7) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001540)={0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r4 = syz_open_procfs$namespace(r2, &(0x7f00000014c0)='ns/user\x00') r5 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x212e2) dup3(r4, r5, 0x0) readv(r3, &(0x7f0000001600)=[{&(0x7f0000002e40)=""/4102, 0x1006}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r6, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 15:59:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') r1 = getpid() syz_open_procfs(r1, &(0x7f0000000180)='map_files\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r2, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x208c00, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = dup(r3) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) pidfd_send_signal(r4, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) syz_io_uring_setup(0x15c, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r4}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100", @ANYRES32=r2, @ANYBLOB="b2f00000040000002e2f050000003000"]) io_submit(0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x14, 0x80800) ftruncate(0xffffffffffffffff, 0x0) unshare(0x48020200) [ 2157.804021] FAULT_INJECTION: forcing a failure. [ 2157.804021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2157.806908] CPU: 0 PID: 14970 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2157.808312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2157.810011] Call Trace: [ 2157.810558] dump_stack+0x107/0x167 [ 2157.811319] should_fail.cold+0x5/0xa [ 2157.812130] _copy_from_user+0x2e/0x1b0 [ 2157.812951] __copy_msghdr_from_user+0x91/0x4b0 [ 2157.813905] ? __ia32_sys_shutdown+0x80/0x80 [ 2157.814796] ? __lock_acquire+0x1657/0x5b00 [ 2157.815700] ___sys_recvmsg+0xd5/0x200 [ 2157.816489] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2157.817479] ? __lockdep_reset_lock+0x180/0x180 [ 2157.818435] ? lock_downgrade+0x6d0/0x6d0 [ 2157.819281] ? lock_acquire+0x197/0x470 [ 2157.820102] ? find_held_lock+0x2c/0x110 [ 2157.820937] ? __might_fault+0xd3/0x180 [ 2157.821761] ? lock_downgrade+0x6d0/0x6d0 [ 2157.822625] do_recvmmsg+0x24c/0x6d0 [ 2157.823399] ? ___sys_recvmsg+0x200/0x200 [ 2157.824252] ? lock_downgrade+0x6d0/0x6d0 [ 2157.825101] ? ksys_write+0x12d/0x260 [ 2157.825894] ? wait_for_completion_io+0x270/0x270 [ 2157.826872] ? rcu_read_lock_any_held+0x75/0xa0 [ 2157.827816] ? vfs_write+0x354/0xa70 [ 2157.828574] __x64_sys_recvmmsg+0x20f/0x260 [ 2157.829448] ? ksys_write+0x1a9/0x260 [ 2157.830225] ? __do_sys_socketcall+0x600/0x600 [ 2157.831172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2157.832251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2157.833307] do_syscall_64+0x33/0x40 [ 2157.834067] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2157.835106] RIP: 0033:0x7f08503ffb19 [ 2157.835874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2157.839615] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2157.841144] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2157.842582] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2157.844048] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2157.845486] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2157.846919] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 15:59:48 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2157.864409] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:59:48 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 15:59:48 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:59:48 executing program 6: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) lseek(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x20) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1a340, 0x100) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x4840, 0x2d) sendfile(r0, r3, 0x0, 0x100000001) 15:59:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 19) [ 2158.024718] FAULT_INJECTION: forcing a failure. [ 2158.024718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2158.026132] CPU: 1 PID: 15098 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2158.026926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2158.027879] Call Trace: [ 2158.028192] dump_stack+0x107/0x167 [ 2158.028623] should_fail.cold+0x5/0xa [ 2158.029066] _copy_from_user+0x2e/0x1b0 [ 2158.029535] __copy_msghdr_from_user+0x91/0x4b0 [ 2158.030065] ? __ia32_sys_shutdown+0x80/0x80 [ 2158.030570] ? __lock_acquire+0x1657/0x5b00 [ 2158.031074] ___sys_recvmsg+0xd5/0x200 [ 2158.031521] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2158.032094] ? __lockdep_reset_lock+0x180/0x180 [ 2158.032706] ? lock_downgrade+0x6d0/0x6d0 [ 2158.033320] ? lock_acquire+0x197/0x470 [ 2158.033797] ? find_held_lock+0x2c/0x110 [ 2158.034288] ? __might_fault+0xd3/0x180 [ 2158.034760] ? lock_downgrade+0x6d0/0x6d0 [ 2158.035274] do_recvmmsg+0x24c/0x6d0 [ 2158.035716] ? ___sys_recvmsg+0x200/0x200 [ 2158.036210] ? lock_downgrade+0x6d0/0x6d0 [ 2158.036709] ? ksys_write+0x12d/0x260 [ 2158.037170] ? wait_for_completion_io+0x270/0x270 [ 2158.037740] ? rcu_read_lock_any_held+0x75/0xa0 [ 2158.038290] ? vfs_write+0x354/0xa70 [ 2158.038732] __x64_sys_recvmmsg+0x20f/0x260 [ 2158.039238] ? ksys_write+0x1a9/0x260 [ 2158.039701] ? __do_sys_socketcall+0x600/0x600 [ 2158.040242] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2158.040864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.041478] do_syscall_64+0x33/0x40 [ 2158.041923] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2158.042533] RIP: 0033:0x7f08503ffb19 [ 2158.042979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.045161] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2158.046055] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2158.046896] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2158.047739] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2158.048563] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2158.049401] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 15:59:48 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 15:59:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 20) 15:59:48 executing program 1: write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 15:59:48 executing program 0: pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r0 = creat(&(0x7f0000000000)='\x00', 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, &(0x7f0000000340)) 15:59:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2158.176912] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2158.222984] FAULT_INJECTION: forcing a failure. [ 2158.222984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2158.224843] CPU: 1 PID: 15113 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2158.225595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2158.226489] Call Trace: [ 2158.226785] dump_stack+0x107/0x167 [ 2158.227183] should_fail.cold+0x5/0xa [ 2158.227619] _copy_from_user+0x2e/0x1b0 [ 2158.228078] __copy_msghdr_from_user+0x91/0x4b0 [ 2158.228590] ? __ia32_sys_shutdown+0x80/0x80 [ 2158.229473] ? __lock_acquire+0x1657/0x5b00 [ 2158.230722] ___sys_recvmsg+0xd5/0x200 [ 2158.231787] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2158.233051] ? __lockdep_reset_lock+0x180/0x180 [ 2158.234293] ? lock_downgrade+0x6d0/0x6d0 [ 2158.235308] ? lock_acquire+0x197/0x470 [ 2158.236315] ? find_held_lock+0x2c/0x110 [ 2158.237504] ? __might_fault+0xd3/0x180 [ 2158.238546] ? lock_downgrade+0x6d0/0x6d0 [ 2158.239558] do_recvmmsg+0x24c/0x6d0 [ 2158.240486] ? ___sys_recvmsg+0x200/0x200 [ 2158.241387] ? lock_downgrade+0x6d0/0x6d0 [ 2158.242289] ? ksys_write+0x12d/0x260 [ 2158.243232] ? wait_for_completion_io+0x270/0x270 [ 2158.244311] ? rcu_read_lock_any_held+0x75/0xa0 [ 2158.245340] ? vfs_write+0x354/0xa70 [ 2158.246280] __x64_sys_recvmmsg+0x20f/0x260 [ 2158.247403] ? ksys_write+0x1a9/0x260 [ 2158.248330] ? __do_sys_socketcall+0x600/0x600 [ 2158.249414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2158.250584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2158.251759] do_syscall_64+0x33/0x40 [ 2158.252546] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2158.253781] RIP: 0033:0x7f08503ffb19 [ 2158.254599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2158.259108] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2158.260887] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2158.262733] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2158.264424] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2158.266085] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2158.267691] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2158.701213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2158.702424] print_req_error: 6 callbacks suppressed [ 2158.702442] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2158.705715] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2158.707887] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2158.713433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2158.714577] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2158.716747] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2158.718890] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2158.720643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2158.721785] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2158.723992] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2158.726172] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2158.727916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2158.729043] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2158.731322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2158.732465] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2158.734718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2158.735847] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2158.738105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2158.739258] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2158.741557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2158.745279] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2158.746861] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2158.748439] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2158.750000] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2158.751561] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2159.011743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2159.015279] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2159.023436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2159.024575] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2159.028413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2159.029677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2159.031462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2159.032746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2159.034506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2159.035752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:00:04 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:00:04 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:00:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 21) 16:00:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:00:04 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4f4f, &(0x7f00000005c0)={0x0, 0x8043}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x103}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000500), 0x1) syz_io_uring_setup(0x5140, &(0x7f0000000540), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r6, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) io_uring_enter(r6, 0x8, 0xbb86, 0x0, &(0x7f0000000080)={[0x3]}, 0x8) timerfd_create(0x9, 0x80400) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000000180), &(0x7f00000006c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000300)}, 0x0) 16:00:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 1) 16:00:04 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) creat(&(0x7f0000000100)='./file2\x00', 0x100) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) close(r0) 16:00:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2173.741907] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 16:00:04 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2173.794844] FAULT_INJECTION: forcing a failure. [ 2173.794844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2173.797718] CPU: 0 PID: 15235 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2173.799113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2173.800801] Call Trace: [ 2173.801340] dump_stack+0x107/0x167 [ 2173.802080] should_fail.cold+0x5/0xa [ 2173.802858] _copy_from_user+0x2e/0x1b0 [ 2173.803668] __copy_msghdr_from_user+0x91/0x4b0 [ 2173.804624] ? __ia32_sys_shutdown+0x80/0x80 [ 2173.805513] ? SOFTIRQ_verbose+0x10/0x10 [ 2173.806340] ? __lockdep_reset_lock+0x180/0x180 [ 2173.807278] ? perf_trace_lock+0xac/0x490 [ 2173.808139] ___sys_recvmsg+0xd5/0x200 [ 2173.808927] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2173.809920] ? lock_downgrade+0x6d0/0x6d0 [ 2173.810790] ? __fget_files+0x296/0x4c0 16:00:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2173.811614] ? __fget_light+0xea/0x290 [ 2173.812529] do_recvmmsg+0x24c/0x6d0 [ 2173.813299] ? ___sys_recvmsg+0x200/0x200 [ 2173.814140] ? lock_downgrade+0x6d0/0x6d0 [ 2173.814988] ? ksys_write+0x12d/0x260 [ 2173.815766] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2173.816779] ? wait_for_completion_io+0x270/0x270 [ 2173.817756] ? rcu_read_lock_any_held+0x75/0xa0 [ 2173.818696] ? vfs_write+0x354/0xa70 [ 2173.819455] __x64_sys_recvmmsg+0x20f/0x260 [ 2173.820344] ? ksys_write+0x1a9/0x260 [ 2173.821125] ? __do_sys_socketcall+0x600/0x600 [ 2173.822076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2173.823141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2173.823751] FAULT_INJECTION: forcing a failure. [ 2173.823751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2173.824206] do_syscall_64+0x33/0x40 [ 2173.824231] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2173.827452] RIP: 0033:0x7f3f9ef17b19 [ 2173.828230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2173.832031] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2173.833592] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2173.835048] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2173.836529] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2173.837989] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2173.839458] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2173.840968] CPU: 1 PID: 15239 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2173.841871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2173.842946] Call Trace: [ 2173.843299] dump_stack+0x107/0x167 [ 2173.843776] should_fail.cold+0x5/0xa [ 2173.844270] _copy_from_user+0x2e/0x1b0 [ 2173.844798] __copy_msghdr_from_user+0x91/0x4b0 [ 2173.845432] ? __ia32_sys_shutdown+0x80/0x80 [ 2173.845978] ? __lock_acquire+0x1657/0x5b00 [ 2173.846524] ___sys_recvmsg+0xd5/0x200 [ 2173.847017] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2173.847657] ? __lockdep_reset_lock+0x180/0x180 [ 2173.848221] ? lock_downgrade+0x6d0/0x6d0 [ 2173.848742] ? lock_acquire+0x197/0x470 [ 2173.849232] ? find_held_lock+0x2c/0x110 [ 2173.849745] ? __might_fault+0xd3/0x180 [ 2173.850236] ? lock_downgrade+0x6d0/0x6d0 [ 2173.850772] do_recvmmsg+0x24c/0x6d0 [ 2173.851257] ? ___sys_recvmsg+0x200/0x200 [ 2173.851791] ? lock_downgrade+0x6d0/0x6d0 [ 2173.852335] ? ksys_write+0x12d/0x260 [ 2173.852829] ? wait_for_completion_io+0x270/0x270 [ 2173.853439] ? rcu_read_lock_any_held+0x75/0xa0 [ 2173.853993] ? vfs_write+0x354/0xa70 [ 2173.854461] __x64_sys_recvmmsg+0x20f/0x260 [ 2173.854979] ? ksys_write+0x1a9/0x260 [ 2173.855452] ? __do_sys_socketcall+0x600/0x600 [ 2173.856019] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2173.856665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2173.857291] do_syscall_64+0x33/0x40 [ 2173.857758] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2173.858368] RIP: 0033:0x7f08503ffb19 [ 2173.858837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2173.861059] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2173.862011] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2173.862907] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2173.863812] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2173.864706] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2173.865583] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 16:00:04 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x80, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) get_robust_list(0x0, &(0x7f0000000100)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000180)=0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001d00210ccde40000000000000400020014001180c09801a7b0c7dba09475f251c743092f0800310043e6cf345f13be", @ANYRES32, @ANYBLOB="92001a800400060011fd4b89fa85"], 0xc4}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) 16:00:04 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:00:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 2) 16:00:04 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x2}}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x124d63) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r2, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) dup2(r1, r2) close(r0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xf8, 0x80, 0x8, 0x78, 0x0, 0x5, 0x801, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x1800, 0x1000, 0x1, 0x1, 0xe7a, 0x0, 0x7fff, 0x0, 0x10000000}, 0x0, 0x4, 0xffffffffffffffff, 0x1) [ 2173.944506] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2173.953179] debugfs: Directory 'À˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! 16:00:04 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:00:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 22) [ 2173.997896] FAULT_INJECTION: forcing a failure. [ 2173.997896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2174.000862] CPU: 0 PID: 15324 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2174.002270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.003950] Call Trace: [ 2174.004490] dump_stack+0x107/0x167 [ 2174.005241] should_fail.cold+0x5/0xa [ 2174.006022] _copy_from_user+0x2e/0x1b0 [ 2174.006533] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2174.006828] __copy_msghdr_from_user+0x91/0x4b0 [ 2174.006850] ? __ia32_sys_shutdown+0x80/0x80 [ 2174.009647] ? __lock_acquire+0x1657/0x5b00 [ 2174.010541] ___sys_recvmsg+0xd5/0x200 [ 2174.011328] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2174.011839] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2174.012330] ? __lockdep_reset_lock+0x180/0x180 [ 2174.012353] ? lock_downgrade+0x6d0/0x6d0 [ 2174.015215] ? lock_acquire+0x197/0x470 [ 2174.016045] ? find_held_lock+0x2c/0x110 [ 2174.016878] ? __might_fault+0xd3/0x180 [ 2174.017688] ? lock_downgrade+0x6d0/0x6d0 [ 2174.018574] do_recvmmsg+0x24c/0x6d0 [ 2174.019343] ? ___sys_recvmsg+0x200/0x200 [ 2174.020205] ? lock_downgrade+0x6d0/0x6d0 [ 2174.021049] ? ksys_write+0x12d/0x260 [ 2174.021088] ? wait_for_completion_io+0x270/0x270 [ 2174.022481] ? rcu_read_lock_any_held+0x75/0xa0 [ 2174.023414] ? vfs_write+0x354/0xa70 [ 2174.024185] __x64_sys_recvmmsg+0x20f/0x260 [ 2174.025055] ? ksys_write+0x1a9/0x260 [ 2174.025486] sysfs: cannot create duplicate filename '/class/ieee80211/À˜§°ÇÛ ”uòQÇC !' [ 2174.025828] ? __do_sys_socketcall+0x600/0x600 [ 2174.027664] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.028754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.029824] do_syscall_64+0x33/0x40 [ 2174.030590] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2174.031625] RIP: 0033:0x7f3f9ef17b19 [ 2174.032400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.036191] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2174.037733] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2174.039173] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2174.040632] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2174.042071] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2174.043511] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2174.045019] CPU: 1 PID: 15362 Comm: syz-executor.0 Not tainted 5.10.199 #1 [ 2174.045797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.046732] Call Trace: [ 2174.047033] dump_stack+0x107/0x167 [ 2174.047452] sysfs_warn_dup.cold+0x1c/0x29 [ 2174.047947] sysfs_do_create_link_sd+0x122/0x140 [ 2174.048495] sysfs_create_link+0x5f/0xc0 [ 2174.048962] device_add+0x703/0x1bc0 [ 2174.049382] ? devlink_add_symlinks+0x970/0x970 [ 2174.049905] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2174.050496] wiphy_register+0x1da6/0x2850 [ 2174.050974] ? wiphy_unregister+0xb90/0xb90 [ 2174.051471] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2174.052064] ieee80211_register_hw+0x23c5/0x38b0 [ 2174.052614] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2174.053156] ? net_generic+0xdb/0x2b0 [ 2174.053591] ? lockdep_init_map_type+0x2c7/0x780 [ 2174.054128] ? memset+0x20/0x50 [ 2174.054501] ? __hrtimer_init+0x12c/0x270 [ 2174.054967] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 2174.055540] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2174.056050] ? hwsim_new_radio_nl+0x967/0x1080 [ 2174.056564] ? memcpy+0x39/0x60 [ 2174.056939] hwsim_new_radio_nl+0x991/0x1080 [ 2174.057433] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2174.058016] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2174.058737] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2174.059471] genl_family_rcv_msg_doit+0x22d/0x330 [ 2174.060013] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2174.060754] ? cap_capable+0x1d6/0x240 [ 2174.061198] ? ns_capable+0xe2/0x110 [ 2174.061618] genl_rcv_msg+0x33c/0x5a0 [ 2174.062040] ? genl_get_cmd+0x480/0x480 [ 2174.062481] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2174.063060] ? lock_release+0x680/0x680 [ 2174.063496] ? __lockdep_reset_lock+0x180/0x180 [ 2174.064003] netlink_rcv_skb+0x14b/0x430 [ 2174.064466] ? genl_get_cmd+0x480/0x480 [ 2174.064913] ? netlink_ack+0xab0/0xab0 [ 2174.065349] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2174.065850] ? is_vmalloc_addr+0x7b/0xb0 [ 2174.066299] genl_rcv+0x24/0x40 [ 2174.066662] netlink_unicast+0x549/0x7f0 [ 2174.067120] ? netlink_attachskb+0x870/0x870 [ 2174.067613] ? __virt_addr_valid+0x128/0x350 [ 2174.068102] netlink_sendmsg+0x90f/0xdf0 [ 2174.068570] ? netlink_unicast+0x7f0/0x7f0 [ 2174.069032] ? netlink_unicast+0x7f0/0x7f0 [ 2174.069500] __sock_sendmsg+0x154/0x190 [ 2174.069933] ____sys_sendmsg+0x70d/0x870 [ 2174.070390] ? sock_write_iter+0x3d0/0x3d0 [ 2174.070836] ? do_recvmmsg+0x6d0/0x6d0 [ 2174.071265] ? perf_trace_lock+0xac/0x490 [ 2174.071721] ? __lockdep_reset_lock+0x180/0x180 [ 2174.072255] ? perf_trace_lock+0xac/0x490 [ 2174.072724] ___sys_sendmsg+0xf3/0x170 [ 2174.073145] ? sendmsg_copy_msghdr+0x160/0x160 [ 2174.073659] ? lock_downgrade+0x6d0/0x6d0 [ 2174.074112] ? finish_task_switch+0x126/0x5d0 [ 2174.074615] ? lock_downgrade+0x6d0/0x6d0 [ 2174.075063] ? __fget_files+0x296/0x4c0 [ 2174.075512] ? __fget_light+0xea/0x290 [ 2174.075949] __sys_sendmsg+0xe5/0x1b0 [ 2174.076382] ? __sys_sendmsg_sock+0x40/0x40 [ 2174.076862] ? io_schedule_timeout+0x140/0x140 [ 2174.077381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.077935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.078505] ? trace_hardirqs_on+0x5b/0x180 [ 2174.078974] do_syscall_64+0x33/0x40 [ 2174.079392] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2174.079961] RIP: 0033:0x7f036abe1b19 [ 2174.080377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.082348] RSP: 002b:00007f0368136188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2174.083208] RAX: ffffffffffffffda RBX: 00007f036acf5020 RCX: 00007f036abe1b19 [ 2174.084003] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2174.084796] RBP: 00007f036ac3bf6d R08: 0000000000000000 R09: 0000000000000000 [ 2174.085581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2174.086356] R13: 00007ffdf8ee604f R14: 00007f0368136300 R15: 0000000000022000 16:00:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 3) [ 2174.172859] FAULT_INJECTION: forcing a failure. [ 2174.172859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2174.174197] CPU: 1 PID: 15372 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2174.174930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.175832] Call Trace: [ 2174.176118] dump_stack+0x107/0x167 [ 2174.176508] should_fail.cold+0x5/0xa [ 2174.176923] _copy_from_user+0x2e/0x1b0 [ 2174.177358] __copy_msghdr_from_user+0x91/0x4b0 [ 2174.177861] ? __ia32_sys_shutdown+0x80/0x80 [ 2174.178331] ? __lock_acquire+0x1657/0x5b00 [ 2174.178805] ___sys_recvmsg+0xd5/0x200 [ 2174.179231] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2174.179753] ? __lockdep_reset_lock+0x180/0x180 [ 2174.180276] ? lock_downgrade+0x6d0/0x6d0 [ 2174.180722] ? lock_acquire+0x197/0x470 [ 2174.181149] ? find_held_lock+0x2c/0x110 [ 2174.181587] ? __might_fault+0xd3/0x180 [ 2174.182010] ? lock_downgrade+0x6d0/0x6d0 [ 2174.182470] do_recvmmsg+0x24c/0x6d0 [ 2174.182890] ? ___sys_recvmsg+0x200/0x200 [ 2174.183355] ? lock_downgrade+0x6d0/0x6d0 [ 2174.183839] ? ksys_write+0x12d/0x260 [ 2174.183988] FAULT_INJECTION: forcing a failure. [ 2174.183988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2174.184279] ? wait_for_completion_io+0x270/0x270 [ 2174.184294] ? rcu_read_lock_any_held+0x75/0xa0 [ 2174.184303] ? vfs_write+0x354/0xa70 [ 2174.184317] __x64_sys_recvmmsg+0x20f/0x260 [ 2174.184327] ? ksys_write+0x1a9/0x260 [ 2174.184337] ? __do_sys_socketcall+0x600/0x600 [ 2174.184351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.184361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.184377] do_syscall_64+0x33/0x40 [ 2174.184391] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2174.184398] RIP: 0033:0x7f3f9ef17b19 [ 2174.184408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.184414] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2174.184426] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2174.184432] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2174.184438] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2174.184444] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2174.184450] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2174.211798] CPU: 0 PID: 15369 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2174.213219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.214908] Call Trace: [ 2174.215451] dump_stack+0x107/0x167 [ 2174.216223] should_fail.cold+0x5/0xa [ 2174.217004] _copy_from_user+0x2e/0x1b0 [ 2174.217815] __copy_msghdr_from_user+0x91/0x4b0 [ 2174.218759] ? __ia32_sys_shutdown+0x80/0x80 [ 2174.219652] ? __lock_acquire+0x1657/0x5b00 [ 2174.220550] ___sys_recvmsg+0xd5/0x200 [ 2174.221345] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2174.222331] ? __lockdep_reset_lock+0x180/0x180 [ 2174.223266] ? lock_downgrade+0x6d0/0x6d0 [ 2174.224114] ? lock_acquire+0x197/0x470 [ 2174.224921] ? find_held_lock+0x2c/0x110 [ 2174.225756] ? __might_fault+0xd3/0x180 [ 2174.226572] ? lock_downgrade+0x6d0/0x6d0 [ 2174.227440] do_recvmmsg+0x24c/0x6d0 [ 2174.228225] ? ___sys_recvmsg+0x200/0x200 [ 2174.229068] ? lock_downgrade+0x6d0/0x6d0 [ 2174.229925] ? ksys_write+0x12d/0x260 [ 2174.230730] ? wait_for_completion_io+0x270/0x270 [ 2174.231718] ? rcu_read_lock_any_held+0x75/0xa0 [ 2174.232672] ? vfs_write+0x354/0xa70 [ 2174.233438] __x64_sys_recvmmsg+0x20f/0x260 [ 2174.234324] ? ksys_write+0x1a9/0x260 [ 2174.235102] ? __do_sys_socketcall+0x600/0x600 [ 2174.236065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.237133] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.238192] do_syscall_64+0x33/0x40 [ 2174.238954] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2174.240003] RIP: 0033:0x7f08503ffb19 [ 2174.240765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.244525] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2174.246061] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2174.247498] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2174.248936] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2174.250376] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2174.251833] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2174.781436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2174.782639] print_req_error: 22 callbacks suppressed [ 2174.782657] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.785948] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.788120] buffer_io_error: 6 callbacks suppressed [ 2174.788132] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2174.796409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2174.797550] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.799748] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.801922] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2174.804079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2174.805524] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.807758] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.809941] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2174.812165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2174.813313] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.815506] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.817689] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2174.819886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2174.821034] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.823418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2174.824591] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2174.826735] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2174.826791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2174.828773] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2174.828838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2174.830757] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2174.831538] Buffer I/O error on dev loop7, logical block 2096900, async page read 16:00:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 23) 16:00:20 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:00:20 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010000000000000000000000000001000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff01000000000000000000000000000100"/202], 0x110) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x2, 0x7e84fffe, 0x5, 0x0, 0x0, [{{r0}, 0x8e}, {{}, 0x2}, {{r2}, 0x20f}, {{r3}, 0x800}, {{r0}, 0x1ff}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r1, r5, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000140)) r6 = syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x101001) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000000c0)=0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000400)={0x0, 0x6}, 0x8) unshare(0x48020200) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x43}) unshare(0x58040280) 16:00:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000300)='./file2\x00') r0 = creat(&(0x7f0000000200)='./file1\x00', 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file2\x00', 0x840, 0x180) chroot(&(0x7f0000000280)='./file2\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) openat(r2, &(0x7f0000000340)='./file3\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000400)) sendfile(r1, r3, 0x0, 0x100000001) 16:00:20 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:00:20 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:00:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 4) 16:00:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2190.092037] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2190.104782] FAULT_INJECTION: forcing a failure. [ 2190.104782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.107539] CPU: 1 PID: 15395 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2190.108972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.110656] Call Trace: [ 2190.111204] dump_stack+0x107/0x167 [ 2190.111950] should_fail.cold+0x5/0xa [ 2190.112757] _copy_from_user+0x2e/0x1b0 [ 2190.113569] __copy_msghdr_from_user+0x91/0x4b0 [ 2190.114512] ? __ia32_sys_shutdown+0x80/0x80 [ 2190.115428] ? __lock_acquire+0x1657/0x5b00 [ 2190.115468] ___sys_recvmsg+0xd5/0x200 16:00:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011300)) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2190.115489] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2190.115508] ? __lockdep_reset_lock+0x180/0x180 [ 2190.115527] ? _raw_spin_unlock_irq+0x27/0x30 [ 2190.115554] ? lock_acquire+0x197/0x470 16:00:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2190.115570] ? find_held_lock+0x2c/0x110 [ 2190.115596] ? __might_fault+0xd3/0x180 [ 2190.115614] ? lock_downgrade+0x6d0/0x6d0 [ 2190.115635] ? io_schedule_timeout+0x140/0x140 [ 2190.115671] do_recvmmsg+0x24c/0x6d0 [ 2190.115697] ? ___sys_recvmsg+0x200/0x200 [ 2190.115716] ? lock_downgrade+0x6d0/0x6d0 [ 2190.115744] ? ksys_write+0x12d/0x260 [ 2190.115779] ? wait_for_completion_io+0x270/0x270 [ 2190.115802] ? rcu_read_lock_any_held+0x75/0xa0 [ 2190.115818] ? vfs_write+0x354/0xa70 [ 2190.115842] __x64_sys_recvmmsg+0x20f/0x260 [ 2190.115860] ? ksys_write+0x1a9/0x260 [ 2190.115879] ? __do_sys_socketcall+0x600/0x600 [ 2190.115903] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.115920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.115945] do_syscall_64+0x33/0x40 [ 2190.115966] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2190.116001] RIP: 0033:0x7f08503ffb19 [ 2190.116020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.116030] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2190.116051] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2190.116061] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2190.116072] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.116082] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2190.116093] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2190.151032] FAULT_INJECTION: forcing a failure. [ 2190.151032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.151052] CPU: 1 PID: 15400 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2190.151063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.151075] Call Trace: [ 2190.179535] dump_stack+0x107/0x167 [ 2190.180313] should_fail.cold+0x5/0xa [ 2190.181110] _copy_from_user+0x2e/0x1b0 [ 2190.181943] __copy_msghdr_from_user+0x91/0x4b0 [ 2190.182908] ? __ia32_sys_shutdown+0x80/0x80 [ 2190.183825] ? __lock_acquire+0x1657/0x5b00 [ 2190.184736] ___sys_recvmsg+0xd5/0x200 [ 2190.185526] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2190.186516] ? __lockdep_reset_lock+0x180/0x180 [ 2190.187452] ? lock_downgrade+0x6d0/0x6d0 [ 2190.188309] ? lock_acquire+0x197/0x470 [ 2190.189106] ? find_held_lock+0x2c/0x110 [ 2190.189932] ? __might_fault+0xd3/0x180 [ 2190.190732] ? lock_downgrade+0x6d0/0x6d0 [ 2190.191592] do_recvmmsg+0x24c/0x6d0 [ 2190.192369] ? ___sys_recvmsg+0x200/0x200 [ 2190.193199] ? lock_downgrade+0x6d0/0x6d0 [ 2190.194036] ? ksys_write+0x12d/0x260 [ 2190.194815] ? wait_for_completion_io+0x270/0x270 [ 2190.195776] ? rcu_read_lock_any_held+0x75/0xa0 [ 2190.196710] ? vfs_write+0x354/0xa70 [ 2190.197462] __x64_sys_recvmmsg+0x20f/0x260 [ 2190.198322] ? ksys_write+0x1a9/0x260 [ 2190.199081] ? __do_sys_socketcall+0x600/0x600 [ 2190.200016] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.201061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.202119] do_syscall_64+0x33/0x40 [ 2190.202868] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2190.203906] RIP: 0033:0x7f3f9ef17b19 [ 2190.204659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.208369] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2190.209899] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2190.211350] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2190.212808] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.214257] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2190.215697] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 16:00:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 24) 16:00:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:00:20 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:00:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:00:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2190.409217] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2190.413714] FAULT_INJECTION: forcing a failure. [ 2190.413714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.417076] CPU: 0 PID: 15511 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2190.418468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.420162] Call Trace: [ 2190.420705] dump_stack+0x107/0x167 [ 2190.421456] should_fail.cold+0x5/0xa [ 2190.422240] _copy_from_user+0x2e/0x1b0 [ 2190.423059] __copy_msghdr_from_user+0x91/0x4b0 [ 2190.424010] ? __ia32_sys_shutdown+0x80/0x80 [ 2190.424916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.425978] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2190.427060] ? trace_hardirqs_on+0x5b/0x180 [ 2190.427925] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2190.429031] ___sys_recvmsg+0xd5/0x200 [ 2190.429815] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2190.430805] ? _raw_spin_unlock_irq+0x27/0x30 [ 2190.431712] ? finish_task_switch+0x126/0x5d0 [ 2190.432614] ? finish_task_switch+0xef/0x5d0 [ 2190.433492] ? __switch_to+0x572/0xf70 [ 2190.434300] ? __switch_to_asm+0x3a/0x60 [ 2190.435129] ? __switch_to_asm+0x34/0x60 [ 2190.435972] ? __schedule+0x82c/0x1ea0 [ 2190.436802] ? io_schedule_timeout+0x140/0x140 [ 2190.437763] do_recvmmsg+0x24c/0x6d0 [ 2190.438539] ? ___sys_recvmsg+0x200/0x200 [ 2190.439377] ? lock_downgrade+0x6d0/0x6d0 [ 2190.440244] ? ksys_write+0x12d/0x260 [ 2190.441051] ? wait_for_completion_io+0x270/0x270 [ 2190.442032] ? rcu_read_lock_any_held+0x75/0xa0 [ 2190.442962] ? vfs_write+0x354/0xa70 [ 2190.443757] __x64_sys_recvmmsg+0x20f/0x260 [ 2190.444648] ? ksys_write+0x1a9/0x260 [ 2190.445440] ? __do_sys_socketcall+0x600/0x600 [ 2190.446426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.447501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.448575] do_syscall_64+0x33/0x40 [ 2190.449350] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2190.450388] RIP: 0033:0x7f08503ffb19 [ 2190.451164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.454939] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2190.456497] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2190.457953] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2190.459388] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.460859] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2190.462340] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 16:00:20 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0xc0000, 0x6, 0x3, 0x9, 0x15, "991af074efbfac27172acfe121367849ddccdc"}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x124d63) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000001c0)) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x14, &(0x7f0000000140)={0x0}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x39, 0x3, 0x0, 0x5, 0x81880, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x62b5, 0x2, @perf_config_ext={0x79, 0xffffffffffffe466}, 0x2000, 0xfffffffffffffff8, 0xffe, 0x0, 0x1, 0x100, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x8, 0xffffffffffffffff, 0x2) 16:00:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x2000000000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f00000004c0)='./file2\x00', 0x0, 0x0) 16:00:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:00:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 5) 16:00:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2190.647541] 9pnet: Insufficient options for proto=fd 16:00:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2190.776873] FAULT_INJECTION: forcing a failure. [ 2190.776873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.779556] CPU: 0 PID: 15637 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2190.781009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.782745] Call Trace: [ 2190.783296] dump_stack+0x107/0x167 [ 2190.784078] should_fail.cold+0x5/0xa [ 2190.784870] _copy_from_user+0x2e/0x1b0 [ 2190.785688] __copy_msghdr_from_user+0x91/0x4b0 [ 2190.786636] ? __ia32_sys_shutdown+0x80/0x80 [ 2190.787531] ? __lock_acquire+0x1657/0x5b00 [ 2190.788441] ___sys_recvmsg+0xd5/0x200 [ 2190.789237] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2190.790233] ? __lockdep_reset_lock+0x180/0x180 [ 2190.791180] ? lock_downgrade+0x6d0/0x6d0 [ 2190.792036] ? lock_acquire+0x197/0x470 [ 2190.792851] ? find_held_lock+0x2c/0x110 [ 2190.793688] ? __might_fault+0xd3/0x180 [ 2190.794506] ? lock_downgrade+0x6d0/0x6d0 [ 2190.795376] do_recvmmsg+0x24c/0x6d0 [ 2190.796170] ? ___sys_recvmsg+0x200/0x200 [ 2190.797015] ? lock_downgrade+0x6d0/0x6d0 [ 2190.797885] ? ksys_write+0x12d/0x260 [ 2190.798683] ? wait_for_completion_io+0x270/0x270 [ 2190.799667] ? rcu_read_lock_any_held+0x75/0xa0 [ 2190.800622] ? vfs_write+0x354/0xa70 [ 2190.801389] __x64_sys_recvmmsg+0x20f/0x260 [ 2190.802276] ? ksys_write+0x1a9/0x260 [ 2190.803050] ? __do_sys_socketcall+0x600/0x600 [ 2190.804009] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.805075] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.806128] do_syscall_64+0x33/0x40 [ 2190.806888] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2190.807927] RIP: 0033:0x7f3f9ef17b19 [ 2190.808693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.812433] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2190.813993] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2190.815441] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2190.816915] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.818370] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2190.819819] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2191.291868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.293083] print_req_error: 6 callbacks suppressed [ 2191.293102] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2191.296498] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2191.298685] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2191.301594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.302830] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2191.305341] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2191.307549] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2191.310067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.311266] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2191.313704] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2191.315932] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2191.336946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.338128] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2191.340316] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2191.340360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.342534] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2191.343621] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2191.347308] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2191.347355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.349491] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2191.350882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.352183] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2191.353359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.354893] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2191.357480] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2191.418721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.420307] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2191.420364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.423077] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2191.423134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.425856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.427517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.428761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.430002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2191.431274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:00:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 25) 16:00:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:00:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:00:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x1280400, &(0x7f0000000180)={'trans=unix,', {[{@access_client}], [{@fsmagic}, {@dont_appraise}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x1a5542, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r4, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) r5 = openat(r3, &(0x7f00000013c0)='./file1\x00', 0x200000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r6, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) io_submit(0x0, 0x4, &(0x7f0000001600)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r4, &(0x7f0000000300)="7fb54979363237877b0c3ab316a7f8e34c2f17acb7613d8d995191be36bde5afa9068ab56688218a0f3914b03e634e913103c464044a246da32acdba096ddb3f136208ac8a6b1552c68b5ad5f6101fa7410745d66273b0e22e2fe7e887f5b5289b23f8d94b6886e441ccec2e6209c65efd1e04186c7843045c8ea9c275aa2af3af670521da57cf7868ec", 0x8a, 0x3, 0x0, 0x2, r1}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f00000003c0)="0323b0dbfa482844561d4303c7adf84059635abd8f54065790d98b9584d9c9f5623ca0ecff06f8c3ba9c0b3f7caf711727e14c7be70b395cdc3741b837d5556b7d4b7e9fee503e8af3a305e330ff7826b6d68f4e86a0832a12da66a1212a377e958181ff27394308fe7f6abf572f89d977485bdcea689f37e4926056fbc92dbe7fcc147962ebc42fa880e91309975adec98f1b0e44eb2447c795052135feda99df42c120560537e948763f177aff9c8d4a301776e407ac0d0fdc6a81ca301b40194a9f2ac40aa3a168e328b5aac51db794a74a74f317b231f4e697f442219b665ad277d6085115d71007c804cff46a97775fbdb701d68faa2f3fff3059d9d568fb87de8156fb05496ced552298db5b889f9da3c1461f5ac3acf2729f51333d039097bca3b4ec32610bc3b6fcf842957d4d89f0671962f2afea988b0ecd3081e3ac3357ef111c24566b9e9c814f7df578ac36790733192e1692fad82ad4eab29123898f1c856e6e52abb37d7f0b51b6ce10f4eb4dadc5997b531581c2b8948eafbd40af6ed4549a4db370de40c26b4b5dad6a32861c4cde9b526ea23ca2f23aec2bb8677286cf6ad99041cb3859bc79e6d39259691839526600f52da1540798ee1e0967d55b93b1b398c543f2a3553f5454c9880379553ca765cce873d9176848854eb0b850332a143aa070020994e726c130c988f6b0921c1ce7693bb4b123997f60e6b36d2a71b2a2088a68b63e1ba2542ae9e847b5f8234d855ace669c38ea3161134eeb39cfc1c8cdccc96ec99b2aa1dfc9ec9cd6468a9bcd2cecd599dfae16e420410abc500510c9f8e1d715050ce44eaaedc93cf9a4f9604600beb763f89b5c1174505b5e8534d5fe9fd7cc2a0cf57d471f718cc5fe2b36490158d447190ab1e0eb53a58854185e54fe7229acb5900abb977a0eb17684f529151517d6c9a82b0920d65bd6d23e5851d33b1b19f1c2ba06ed120af97db3f7e2ed63903b0e68559180a25c4250e56ab584d0dde110367ae6513dfbcb9545f81c3ebbd013be216943ebee3d85e4274fdff10a34f531d7a05df5a3747af2a93fc2a600e42ec66983501f8d2d99db925cfee43b503e6dca96d6cbba1938818f0d8a5598d17e34ecf455aef3eb566007763a04938354cc917bd607659d6ac3a85fc10feb0a30f6fd19b6d23db1ae569164d1fce13f30560dd49b211799677f4510f952baac7d0193c2d000e8ce8666924f83dedc1a3f02963e1d5794aa1f0a77a6754fd315cfbaa3b121fc0ba3edd1c2e2324244ed5194a2fa19f94e455573eca46c222ef40d59e8e8f9cdb39f651c14207678920a90820022333c3a047269cc178226bdedac3c7a52d78c5b815da4313176ed3e195f4c0253a23e463cd89566672d6d195e8d9f50e5e8bba5d7487e052439dea9072dc12854ef5f37cdd9d753ca8b81e4452020ea3e13e4c40e4d0b3375781b637aca0159c2ed6959e0939ad0c0fd53ecd43e5d77316b325e6bccd046d2ff2daad826d3fe75f8ce042f92bc2df0e9131cfccbda1b4234263a90b2a4641962cba4d330f226c6a2ac82d0ceca3efb9f85ad04d9b0b6f387084c894c0a88cf78af90d64fd22b7daa17b5e1f2d3ebec1de97a14047064a98c0891636ce8d84470e4196e40719a6d9dbdd2522d899eeece07db239b6878c33c24b69f4b663ce58543373400f1a892d5c30aad445f7c5b21352ff6032bdf119783989889a63ecbb75af2e7faa2bac1714818218088db7a33cfc2853269fee33ff6e4ce90f0f3bb659f96c6141ea90c7c63c9564ecc732e394ff680d1d6ed3175c5ba0e9f1830a59dc69cfd36e3dbf12b26efbd8c00021562dbac9e883257ea438fc59b3179058544cd31cee474d75d82a92d2a0011c86211bbfebe96483c4160e70c8913ba0c0ce1f447112ea37b7937d89bb5825ce426bf63afd29a9a7677e630da1cab60273cdfdbd6ec72a3468cbe4122840adb17122410810f0a3bc7802c9d020c42fa4926f1b16ccee196ec3bb0f1a6fb2615479a545bee4a643d8b503fda6f80a8beed6feab0470c7aa83c14e553bd1e1f9076363740f0b53694b37893be929013d6aeff39fe4f6ef9996afc692b2eb8a3014db41a8a70c2a19d54dbbe7deb05f2426b0dbd77bc1419d56417dd8e3b3a427c945fdd9493a41ffd06a3d930022f7363edeaa6cc598603d1f9206eafca2d776c2fb2cb5ab44939b135b27d87a74c62bd327903a0f50beb8b86f92989cc9d3097e032f35d2cbe6d355ac018288175a806350241bbc32c7fbf9c2ca198b5e6616784978ec63a683218e18e5efbe6e8c0b6d15c4222dd7ad4f35d63e03f106eb67c202490cbaf154ae9d4b2bf1dadee5451ae1740cfe8a8e308b1bf4f30cd94c86fea333a0dad38a8fdd82062eb8259a08b2eaa65f82f1f3c8b032dfdc2ab3d4be7b98df598b420bc319cc41d31dd0a29a760eee6c8163f8861115e8f49a08464ffc3cce8b31254df5d43f605fb8f9ba07c45bd9834f8b0343b0bf29890cf198e90313a15999b587c9298a03b942d87a07f6219a314c99495c790dc66e4de468fefbe0f1fd6c35db2e2e390a4074854d3b537e60dbd41aeecf373a7fb96a828d53d386548c6262874ea6ec6f00e585c8d245246d28a2441dc1642d724e27fcf421b356f51383b95026cf111f15ca654fe910c215e2bc3704b0e0a0db44db973e9c2cb3338eec165ad2bdea0f3a5da41e7bb0265f2c19994892146575cec47ae001db4bfd23e8d7ff01f4912a75cb9e14fd47ccc27821fdbdb237610f8fda004b585b1ee0d15cbc9b9b202ea5dd8de569e73239968cb8526c403be5a063fb5e7e540ba85ff68d8207b4fe23efc9255e27fad26b47d5582f3ebcc98f4e8acf6b6b0e7169919877e5dedbf8c4acd071178d77c001cea5da51601b9a67df4f9b24c1716b5995993caff284940239af974f11d3eeff70d6f45bcf61cdf4dbcd2bfeb55206a52707d80e24c40cf3125e69b9a6b404af5dd04da3ffdd9024b542b489ad9228330da652e433ee2b91c072611f2323006dc3cabbf3e66fb8d60c1bc891dc12d44d77b1375fd2281c088945b9a1b301b3bcfd42df9adf134250829bf430bd9c8eef5c31f7f07cae4e25f7fdd61efb53620f57a956a0d3f8d4beaaa5c421b48d36c0a9261ea51f4bdb2d40cdfe560bb86e1f311ea8f9fbd1616e2296e4695d3bf98b46518e0cf1099b67d78b32e0a399457fa54e710bb292c0f316eca261e516ae060c12b8d2bf0c4ecfadf6a059741df917c9248a6bbe8f1ed890c78455d5f9109f5b59f7e62479d7dc4aed103dbf378059b6270d252603aa7cf6d3a7ed8f1e00ad8ab1fc3241a3a13e4484b6e5f679ade0287692eb41e573367c2f4ff2a2b9d7b608e785d57d195793edf81b2e8193b3c2744a4fac30bcfbe2000e56da0e2f13f25b2ff0871214a8c316709105cd3f9135195bdc161f09529bc1e3d846f5869808395fa556e975ffa1516821bd02f2c0fc07fe7615b1d0cbb0641feaca40beaa5712db62b6d79309f3d4651b140ac55f5cb3556d23660feca6622c552cf2387ba1ae2d3503dcb9bb7098804b02e50d5248a75ffac6af056f01269bf622e28ed532a39e26701db733fb68e28ab76f3cd3608e2e107694f67d4e5f8806fba1cf3ce9f915d125f6eeadb4b61ebcee3d0832a71c13ac5426505f8830364b9e91cadfd04033a904ea24378a462c31dfd861795882e2e13aef0b22efb913f011e477e34f88a05c61c74aaa2006fd46dd7a62bb965bd348e5e1078136e3792cdcaffcfd596ba0fa3220d4bf2591975d78adfd2e94c95f7bcff8e0098480426f4657d3e4c84cf169f0ea2bfc64ea2bad7efb0a35f5d88703a524799ab4f415f1cf4f3b35cea26ad2b9f3ed728c32c53f0dfd412c6e11cecf49168079060f9d06f736df02d70deab53f4b721875fc2bce083ea5e568f47db814171f1a3e1c8cb1089f73fcae8aaf406764ed3b66fefcbaf176448e2cec0a4efa68f265eea13d043f34960d8c96acd32fb26013ce0c5dde12b41fee6e08921fdcf7684cd05b9a880a1a268378f89a209d6db1b827037326ff27d74a852ec14f5ba7ab175e66e88e26f67677857b3bc590473ddad0e6696d742fed8fac64130c1ae0d6134ae78b531cc68b0206f043b96d6fb8d3cc23f3b6ec143046b37068d61045db41b6094974dc96be9aa946c581bd639a1e5e09372865c005c40d3edfecabe66d6278942a2e5028c2b04eed6e5c70ce8c1d78bd0f44836302fdaa18e2071376efdf728a99af3d3d0133878e1245e15dcf538f86a0a2c436c8142c22da00d448ae0dda59c462c39ed6be2ec8a9c4918a16b06ba63e49c3fb606ff4acf0b5023830ad9f76e9b6fbb010ab91084eb1169d72e64a53bc410f0493e2b0e1f3d0393faf1675ea517ad04b2fb18c8b3da5ec96b2d8e550a6ad6d177c7f3ac8e360dfa2dcc2dec30996097e0d19ee1345416d02dba68030f19fed63c9e705a38bb25a86b47c3a68ed651f335cc778c2353902f98e9ac9599479802509321e2a9ca7efcdbf3114026f9248a6e40096f7197db0347d5597d23b194d4e10172d8c380070c89689d76209591cddb3454cbd9b41a3e6808d6975db07a8c2e4691c1236544d785fc2f0f1d9ebf470605c595b032437e836157109d8024d2a5ba60cd6f9d24ec16743d3c1e5e6faa81b90612d8cdafb004512e805f7336dcdd4cc96b5cc4ef91b24cbb481980d88ff312f025f8fbab8ffaabcd064a5f7b43cdc7ecd6fc797d7a70678f5e75aa377ee076af0ab97331bab48150291b869b9863098a5fa4341bd0ba0e0e56201af4cd1042af9ea194ad5ccde33c1db7e0b0c5e0c2a05e8524faa5f78ba47bd3530d48361568da286bb64baaa82888846f0192f21cad01ae212306b466ef663e1ae93b6b8723ab84b3a159185e64487296eca2fe1793f583675156b5bdbcc8060620fc3b595826941c847aea3776040df7d88fa6d5fa95fb9a62289f9cb64e4c8f7ce23c4fb596fdb93b3f65c2be6f4a8b5f024c713ccb231136a0339fc2eba8eb4a90bc4f4ecd268b745d8efb55d1aea5bb6f06c18cf410a38b15862bda71224476c208e13ba05123d1d7528ad78b3c61b708becdb37f4669321a8cf2d376a03e324c560640cdfa5b8f596fa960f968a1eda4002339ddabc6b7bc9b9127ec7047c0880346f514fcee4dbc3bc1c9723abd59aad40f8c7fa9f1b83066a7daaab8269bb2cf9ad3244a978dd1d35c30df3fe4435786622388172bfeb13c1107cd9f3173b48e0be560db0dea8e3442bbf9d114eb60025f34b1e292adce26454a94e1d32ecc749cf9c74999387e111dc0cce205dc5d9babb491e1bac5f0c2addd04db5eeb0e5c1e621ee98bcafb124c325095e591cc765d315f617bb617337602e5696f16ce4255e0ae62ff157e768d1ce69d3dbf2b912e28124d2d98fdc52c7276673f7296a45a8c66a82be1f41d5cc337219cd1a40999a35e0595fb56d48299f52afba9bd0e846363b189e8b57be30271f6c511d706b7d3b06b1f48a5ceade57f58d84c6e5d063512aa5a77bb0dc9118760a6249dd5cdb151d9eb7f0009f609e2f2134c4cbcc535847a5480b3dc33ad25093469697abb70d09ec711fe3962baa58a776224cd366dddfb49e6b2338d3b22543bc9d7bd196a8a95f7dda49d4398dc13c5e2fba2b1fdd5468fee7bb16262027492990e8f15fb7eec443e2f09b598931ff04e12730386dcfc97066f98ea356174dcf1de2a091f113f0c927e6101b3716b7e20fd549909b61202d5ce7698", 0x1000, 0x8, 0x0, 0x3, r5}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000001440)="818afdf52e4a4f8675e82a1b543ecfab5c4156ce275584f93be07cd6a0247f942413485230eafb46b5366ffde7e83b34ccd6692c7e106d0275aac3d28ae1824644aa1c0b1a70447ceead6f0da5b0a94e633c80c06fba896b2b2d2181a7995c2347771b6347061318a4b20581445a79ab6a14c3cd1db22d6778e2b3196566b5d3996d70b60b2f30a6c7ffc054228c0c1b28104568a9623945167a16128b3a94d8786247d575968b9e07fb4942819fb8d592e8907fe9106afb1e2a9ac6c01cfb858556df225c894beb48c0d0fb14c12ca149a92286b1df9d95fd4d3267e7fcfe3729c81cd5", 0xe4, 0x10000, 0x0, 0x2, r1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000001580)="4b0ef8b2868a67a0a871246ce81c6ce7fd5067d127d4dd4202139ae6d496aaecadbd50a371972b8d5aab1f5cd09d7b72c6226f73987001975424d7ad42ed672a", 0x40, 0x0, 0x0, 0x1, r6}]) 16:00:37 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:00:37 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) fork() r2 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:00:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:00:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 6) [ 2206.803087] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2206.804037] 9pnet: Insufficient options for proto=fd [ 2206.852812] FAULT_INJECTION: forcing a failure. [ 2206.852812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2206.856048] CPU: 1 PID: 15656 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2206.857580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2206.859269] Call Trace: [ 2206.859814] dump_stack+0x107/0x167 [ 2206.860747] should_fail.cold+0x5/0xa [ 2206.861631] _copy_from_user+0x2e/0x1b0 [ 2206.862641] __copy_msghdr_from_user+0x91/0x4b0 [ 2206.863567] ? __ia32_sys_shutdown+0x80/0x80 [ 2206.864480] ? __lock_acquire+0x1657/0x5b00 [ 2206.865518] ___sys_recvmsg+0xd5/0x200 [ 2206.866402] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2206.867480] ? __lockdep_reset_lock+0x180/0x180 [ 2206.868594] ? lock_downgrade+0x6d0/0x6d0 [ 2206.869434] ? lock_acquire+0x197/0x470 [ 2206.870235] ? find_held_lock+0x2c/0x110 [ 2206.871071] ? __might_fault+0xd3/0x180 [ 2206.871874] ? lock_downgrade+0x6d0/0x6d0 [ 2206.872919] do_recvmmsg+0x24c/0x6d0 [ 2206.873796] ? ___sys_recvmsg+0x200/0x200 [ 2206.874716] ? lock_downgrade+0x6d0/0x6d0 [ 2206.875561] ? ksys_write+0x12d/0x260 [ 2206.876469] ? wait_for_completion_io+0x270/0x270 [ 2206.877498] ? rcu_read_lock_any_held+0x75/0xa0 [ 2206.878430] ? vfs_write+0x354/0xa70 [ 2206.879187] __x64_sys_recvmmsg+0x20f/0x260 [ 2206.880046] ? ksys_write+0x1a9/0x260 [ 2206.880827] ? __do_sys_socketcall+0x600/0x600 [ 2206.881133] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2206.881742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2206.881760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2206.881786] do_syscall_64+0x33/0x40 [ 2206.881806] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2206.881820] RIP: 0033:0x7f3f9ef17b19 [ 2206.881850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2206.892522] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2206.894181] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2206.895609] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2206.897157] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2206.898807] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2206.900356] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2206.943911] FAULT_INJECTION: forcing a failure. [ 2206.943911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2206.946799] CPU: 1 PID: 15659 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2206.948230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2206.949918] Call Trace: [ 2206.950461] dump_stack+0x107/0x167 [ 2206.951213] should_fail.cold+0x5/0xa [ 2206.952001] _copy_from_user+0x2e/0x1b0 [ 2206.952826] __copy_msghdr_from_user+0x91/0x4b0 [ 2206.953804] ? __ia32_sys_shutdown+0x80/0x80 [ 2206.954709] ? __lock_acquire+0x1657/0x5b00 [ 2206.955633] ___sys_recvmsg+0xd5/0x200 [ 2206.956450] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2206.957449] ? __lockdep_reset_lock+0x180/0x180 [ 2206.958401] ? _raw_spin_unlock_irq+0x27/0x30 [ 2206.959364] ? lock_acquire+0x197/0x470 [ 2206.960170] ? find_held_lock+0x2c/0x110 [ 2206.961007] ? __might_fault+0xd3/0x180 [ 2206.961797] ? lock_downgrade+0x6d0/0x6d0 [ 2206.962623] ? io_schedule_timeout+0x140/0x140 [ 2206.963545] do_recvmmsg+0x24c/0x6d0 16:00:37 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2206.964295] ? ___sys_recvmsg+0x200/0x200 [ 2206.965287] ? lock_downgrade+0x6d0/0x6d0 [ 2206.966130] ? ksys_write+0x12d/0x260 [ 2206.966923] ? wait_for_completion_io+0x270/0x270 [ 2206.967878] ? rcu_read_lock_any_held+0x75/0xa0 [ 2206.968851] ? vfs_write+0x354/0xa70 [ 2206.969601] __x64_sys_recvmmsg+0x20f/0x260 [ 2206.970477] ? ksys_write+0x1a9/0x260 [ 2206.971255] ? __do_sys_socketcall+0x600/0x600 [ 2206.972181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2206.973258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2206.974308] do_syscall_64+0x33/0x40 [ 2206.975076] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2206.976115] RIP: 0033:0x7f08503ffb19 [ 2206.976887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2206.980591] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2206.982113] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2206.983539] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2206.984968] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2206.986394] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2206.987818] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 16:00:37 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11050, 0x4002, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33de, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/373], 0x174}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) [ 2207.057869] 9pnet: Insufficient options for proto=fd 16:00:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:00:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 7) 16:00:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 26) 16:00:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xb3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 16:00:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:00:37 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, 0x0, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2207.241184] FAULT_INJECTION: forcing a failure. [ 2207.241184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2207.243983] CPU: 0 PID: 15774 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2207.245359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.246995] Call Trace: [ 2207.247523] dump_stack+0x107/0x167 [ 2207.248279] should_fail.cold+0x5/0xa [ 2207.249041] _copy_from_user+0x2e/0x1b0 [ 2207.249841] __copy_msghdr_from_user+0x91/0x4b0 [ 2207.250780] ? __ia32_sys_shutdown+0x80/0x80 [ 2207.251776] ? __lock_acquire+0x1657/0x5b00 [ 2207.252770] ___sys_recvmsg+0xd5/0x200 [ 2207.253645] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2207.254737] ? __lockdep_reset_lock+0x180/0x180 [ 2207.255778] ? lock_downgrade+0x6d0/0x6d0 [ 2207.256730] ? lock_acquire+0x197/0x470 [ 2207.257621] ? find_held_lock+0x2c/0x110 [ 2207.258538] ? __might_fault+0xd3/0x180 [ 2207.259428] ? lock_downgrade+0x6d0/0x6d0 [ 2207.260394] do_recvmmsg+0x24c/0x6d0 [ 2207.261196] ? ___sys_recvmsg+0x200/0x200 [ 2207.262026] ? lock_downgrade+0x6d0/0x6d0 [ 2207.262860] ? ksys_write+0x12d/0x260 [ 2207.263640] ? wait_for_completion_io+0x270/0x270 [ 2207.264601] ? rcu_read_lock_any_held+0x75/0xa0 [ 2207.265520] ? vfs_write+0x354/0xa70 [ 2207.266262] __x64_sys_recvmmsg+0x20f/0x260 [ 2207.267117] ? ksys_write+0x1a9/0x260 [ 2207.267869] ? __do_sys_socketcall+0x600/0x600 [ 2207.268803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.269841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.270872] do_syscall_64+0x33/0x40 [ 2207.271611] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2207.272631] RIP: 0033:0x7f3f9ef17b19 [ 2207.273372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2207.277024] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2207.278036] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2207.278530] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2207.278542] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2207.278553] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2207.278565] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2207.278577] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2207.289098] FAULT_INJECTION: forcing a failure. [ 2207.289098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2207.292041] CPU: 0 PID: 15776 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2207.293436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.295082] Call Trace: [ 2207.295608] dump_stack+0x107/0x167 [ 2207.296351] should_fail.cold+0x5/0xa [ 2207.297116] _copy_from_user+0x2e/0x1b0 [ 2207.297917] __copy_msghdr_from_user+0x91/0x4b0 [ 2207.298841] ? __ia32_sys_shutdown+0x80/0x80 [ 2207.299722] ? __lock_acquire+0x1657/0x5b00 [ 2207.300618] ___sys_recvmsg+0xd5/0x200 [ 2207.301404] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2207.302375] ? __lockdep_reset_lock+0x180/0x180 [ 2207.303298] ? lock_downgrade+0x6d0/0x6d0 [ 2207.304133] ? lock_acquire+0x197/0x470 [ 2207.304932] ? find_held_lock+0x2c/0x110 [ 2207.305740] ? __might_fault+0xd3/0x180 [ 2207.306528] ? lock_downgrade+0x6d0/0x6d0 [ 2207.307376] do_recvmmsg+0x24c/0x6d0 [ 2207.308126] ? ___sys_recvmsg+0x200/0x200 [ 2207.308960] ? lock_downgrade+0x6d0/0x6d0 [ 2207.309798] ? ksys_write+0x12d/0x260 [ 2207.310579] ? wait_for_completion_io+0x270/0x270 [ 2207.311532] ? rcu_read_lock_any_held+0x75/0xa0 [ 2207.312462] ? vfs_write+0x354/0xa70 [ 2207.313237] __x64_sys_recvmmsg+0x20f/0x260 [ 2207.314197] ? ksys_write+0x1a9/0x260 [ 2207.315050] ? __do_sys_socketcall+0x600/0x600 [ 2207.316070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.317239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.318393] do_syscall_64+0x33/0x40 [ 2207.319221] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2207.320383] RIP: 0033:0x7f08503ffb19 [ 2207.321192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2207.324817] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2207.326327] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2207.327728] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2207.329158] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2207.330577] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2207.331996] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2207.341997] 9pnet: Insufficient options for proto=fd [ 2207.834289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2207.835424] print_req_error: 22 callbacks suppressed [ 2207.835443] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.838739] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.840851] buffer_io_error: 6 callbacks suppressed [ 2207.840863] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2207.843616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2207.844843] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.847215] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.849586] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2207.851459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2207.852727] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.855204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2207.856469] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.858938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2207.860170] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.862651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2207.863884] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.866400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2207.867627] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.870091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2207.871322] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2207.876305] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2207.878047] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2207.879758] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2207.881489] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2207.883071] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2207.884601] Buffer I/O error on dev loop7, logical block 2096903, async page read 16:00:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="83909011842a72cf8a7163ae92d759a8e863888a7f78cd23a3686a0b845430797320ec83624273fbb6c58f35f8a1d18fb4d8399da5ba24f4bacef1f2a61241e5401b65ae16e2efabdf58b1f1388ba45039bb13e0e2e5bb6d9d99e312812e7e461f53f2b768957f778249e2acde1ed0033ee708e4", 0x74) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001900310b000000050000000000000000"], 0x14}}, 0x0) 16:00:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/255) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) fcntl$dupfd(r1, 0x0, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x402000, 0x0) write$bt_hci(r5, &(0x7f0000000340)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x1, 0x8}}}, 0x8) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40086607, &(0x7f0000000040)={0x80000}) 16:00:53 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:00:53 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 27) 16:00:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 8) 16:00:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:00:53 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, 0x0, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:00:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2222.748135] 9pnet: Insufficient options for proto=fd [ 2222.762226] FAULT_INJECTION: forcing a failure. [ 2222.762226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2222.765174] CPU: 0 PID: 15798 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2222.766627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2222.768337] Call Trace: [ 2222.768894] dump_stack+0x107/0x167 [ 2222.769654] should_fail.cold+0x5/0xa [ 2222.770443] _copy_from_user+0x2e/0x1b0 [ 2222.771263] __copy_msghdr_from_user+0x91/0x4b0 [ 2222.772229] ? __ia32_sys_shutdown+0x80/0x80 [ 2222.773166] ? __lock_acquire+0x1657/0x5b00 [ 2222.774066] ___sys_recvmsg+0xd5/0x200 [ 2222.774855] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2222.775891] ? __lockdep_reset_lock+0x180/0x180 [ 2222.776873] ? lock_downgrade+0x6d0/0x6d0 [ 2222.777722] ? lock_acquire+0x197/0x470 [ 2222.778560] ? find_held_lock+0x2c/0x110 [ 2222.779432] ? __might_fault+0xd3/0x180 [ 2222.780240] ? lock_downgrade+0x6d0/0x6d0 [ 2222.781116] do_recvmmsg+0x24c/0x6d0 [ 2222.781877] ? ___sys_recvmsg+0x200/0x200 [ 2222.782716] ? lock_downgrade+0x6d0/0x6d0 [ 2222.783097] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2222.783556] ? ksys_write+0x12d/0x260 [ 2222.783595] ? wait_for_completion_io+0x270/0x270 [ 2222.783627] ? rcu_read_lock_any_held+0x75/0xa0 [ 2222.788346] ? vfs_write+0x354/0xa70 [ 2222.789119] __x64_sys_recvmmsg+0x20f/0x260 [ 2222.789992] ? ksys_write+0x1a9/0x260 [ 2222.790779] ? __do_sys_socketcall+0x600/0x600 [ 2222.791743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2222.792863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2222.793915] do_syscall_64+0x33/0x40 [ 2222.794685] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2222.795709] RIP: 0033:0x7f08503ffb19 [ 2222.796470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2222.800219] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2222.801766] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2222.803250] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2222.804788] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2222.806288] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2222.807805] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2222.824102] FAULT_INJECTION: forcing a failure. 16:00:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0xb8, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x1c, r4, 0xc0b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x8, 0x100, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x48}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10000) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) [ 2222.824102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2222.827671] CPU: 0 PID: 15808 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2222.829163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2222.830919] Call Trace: [ 2222.831475] dump_stack+0x107/0x167 [ 2222.832249] should_fail.cold+0x5/0xa [ 2222.833076] _copy_from_user+0x2e/0x1b0 [ 2222.833905] __copy_msghdr_from_user+0x91/0x4b0 [ 2222.834872] ? __ia32_sys_shutdown+0x80/0x80 [ 2222.835780] ? __lock_acquire+0x1657/0x5b00 [ 2222.836748] ___sys_recvmsg+0xd5/0x200 [ 2222.837555] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2222.838574] ? __lockdep_reset_lock+0x180/0x180 [ 2222.839509] ? lock_downgrade+0x6d0/0x6d0 [ 2222.840363] ? lock_acquire+0x197/0x470 [ 2222.841177] ? find_held_lock+0x2c/0x110 [ 2222.842011] ? __might_fault+0xd3/0x180 [ 2222.842807] ? lock_downgrade+0x6d0/0x6d0 [ 2222.843665] do_recvmmsg+0x24c/0x6d0 [ 2222.844444] ? ___sys_recvmsg+0x200/0x200 [ 2222.845282] ? lock_downgrade+0x6d0/0x6d0 [ 2222.846129] ? ksys_write+0x12d/0x260 [ 2222.846919] ? wait_for_completion_io+0x270/0x270 [ 2222.847895] ? rcu_read_lock_any_held+0x75/0xa0 [ 2222.848851] ? vfs_write+0x354/0xa70 [ 2222.849602] __x64_sys_recvmmsg+0x20f/0x260 [ 2222.850469] ? ksys_write+0x1a9/0x260 [ 2222.851234] ? __do_sys_socketcall+0x600/0x600 [ 2222.852163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2222.853457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2222.854697] do_syscall_64+0x33/0x40 [ 2222.855593] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2222.856844] RIP: 0033:0x7f3f9ef17b19 [ 2222.857735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2222.862173] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2222.864057] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2222.865760] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2222.867484] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2222.869230] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2222.870670] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 16:00:53 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, 0x0, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:00:53 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:00:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 9) [ 2223.100876] 9pnet: Insufficient options for proto=fd [ 2223.188075] FAULT_INJECTION: forcing a failure. [ 2223.188075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2223.191016] CPU: 0 PID: 15930 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2223.192447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2223.194138] Call Trace: [ 2223.194681] dump_stack+0x107/0x167 [ 2223.195432] should_fail.cold+0x5/0xa [ 2223.196215] _copy_from_user+0x2e/0x1b0 [ 2223.197035] __copy_msghdr_from_user+0x91/0x4b0 [ 2223.197975] ? __ia32_sys_shutdown+0x80/0x80 [ 2223.198872] ? __lock_acquire+0x1657/0x5b00 [ 2223.199776] ___sys_recvmsg+0xd5/0x200 [ 2223.200588] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2223.201590] ? __lockdep_reset_lock+0x180/0x180 [ 2223.202538] ? lock_downgrade+0x6d0/0x6d0 [ 2223.203394] ? lock_acquire+0x197/0x470 [ 2223.204206] ? find_held_lock+0x2c/0x110 [ 2223.205057] ? __might_fault+0xd3/0x180 [ 2223.205867] ? lock_downgrade+0x6d0/0x6d0 [ 2223.206738] do_recvmmsg+0x24c/0x6d0 [ 2223.207507] ? ___sys_recvmsg+0x200/0x200 [ 2223.208354] ? lock_downgrade+0x6d0/0x6d0 [ 2223.209217] ? ksys_write+0x12d/0x260 [ 2223.210013] ? wait_for_completion_io+0x270/0x270 [ 2223.211015] ? rcu_read_lock_any_held+0x75/0xa0 [ 2223.211966] ? vfs_write+0x354/0xa70 [ 2223.212739] __x64_sys_recvmmsg+0x20f/0x260 [ 2223.213621] ? ksys_write+0x1a9/0x260 [ 2223.214395] ? __do_sys_socketcall+0x600/0x600 [ 2223.215337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2223.216420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2223.217483] do_syscall_64+0x33/0x40 [ 2223.218244] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2223.219287] RIP: 0033:0x7f3f9ef17b19 [ 2223.220047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2223.223842] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2223.225423] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2223.226876] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2223.228333] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2223.229792] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 2223.231241] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2223.441865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.443054] print_req_error: 6 callbacks suppressed [ 2223.443071] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2223.446367] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2223.448543] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2223.454400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.455549] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2223.457721] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2223.459904] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2223.461651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.462800] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2223.466737] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2223.468893] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2223.470723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.471856] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2223.474110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.475260] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2223.477526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.478662] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2223.480939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.482086] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2223.484352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.488273] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2223.489872] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2223.491446] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2223.493022] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2223.494596] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2223.634758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.636014] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2223.650412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.651601] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2223.657394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.658733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.660020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.661339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.662660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2223.663952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:01:11 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:01:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:01:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 10) 16:01:12 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff6000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0xa000) r2 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)=""/180) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x7000) 16:01:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 28) 16:01:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:01:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/255) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) fcntl$dupfd(r1, 0x0, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x402000, 0x0) write$bt_hci(r5, &(0x7f0000000340)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x1, 0x8}}}, 0x8) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40086607, &(0x7f0000000040)={0x80000}) 16:01:12 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2241.731379] 9pnet: Insufficient options for proto=fd [ 2241.734766] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2241.747206] FAULT_INJECTION: forcing a failure. [ 2241.747206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2241.749415] CPU: 0 PID: 16045 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2241.750388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2241.751615] Call Trace: [ 2241.751990] dump_stack+0x107/0x167 [ 2241.752528] should_fail.cold+0x5/0xa [ 2241.753079] _copy_from_user+0x2e/0x1b0 [ 2241.753644] __copy_msghdr_from_user+0x91/0x4b0 [ 2241.754311] ? __ia32_sys_shutdown+0x80/0x80 [ 2241.754928] ? __lock_acquire+0x1657/0x5b00 [ 2241.755547] ___sys_recvmsg+0xd5/0x200 [ 2241.756099] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2241.756791] ? __lockdep_reset_lock+0x180/0x180 [ 2241.757431] ? lock_downgrade+0x6d0/0x6d0 [ 2241.758008] ? lock_acquire+0x197/0x470 [ 2241.758560] ? find_held_lock+0x2c/0x110 [ 2241.759125] ? __might_fault+0xd3/0x180 [ 2241.759674] ? lock_downgrade+0x6d0/0x6d0 [ 2241.760273] do_recvmmsg+0x24c/0x6d0 [ 2241.760822] ? ___sys_recvmsg+0x200/0x200 [ 2241.761069] FAULT_INJECTION: forcing a failure. [ 2241.761069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2241.761397] ? lock_downgrade+0x6d0/0x6d0 [ 2241.761419] ? ksys_write+0x12d/0x260 [ 2241.761446] ? wait_for_completion_io+0x270/0x270 [ 2241.761462] ? rcu_read_lock_any_held+0x75/0xa0 [ 2241.761473] ? vfs_write+0x354/0xa70 [ 2241.761491] __x64_sys_recvmmsg+0x20f/0x260 [ 2241.761504] ? ksys_write+0x1a9/0x260 [ 2241.761517] ? __do_sys_socketcall+0x600/0x600 [ 2241.761533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2241.761546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2241.761564] do_syscall_64+0x33/0x40 [ 2241.761580] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2241.761589] RIP: 0033:0x7f08503ffb19 [ 2241.761604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2241.761611] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2241.761626] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2241.761633] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2241.761641] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2241.761649] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2241.761656] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2241.791470] CPU: 1 PID: 16052 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2241.792902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2241.794593] Call Trace: [ 2241.795138] dump_stack+0x107/0x167 [ 2241.795888] should_fail.cold+0x5/0xa [ 2241.796687] _copy_from_user+0x2e/0x1b0 [ 2241.797510] __copy_msghdr_from_user+0x91/0x4b0 [ 2241.798468] ? __ia32_sys_shutdown+0x80/0x80 [ 2241.799370] ? __lock_acquire+0x1657/0x5b00 [ 2241.800266] ___sys_recvmsg+0xd5/0x200 [ 2241.801080] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2241.802079] ? __lockdep_reset_lock+0x180/0x180 [ 2241.803021] ? lock_downgrade+0x6d0/0x6d0 [ 2241.803876] ? lock_acquire+0x197/0x470 [ 2241.804692] ? find_held_lock+0x2c/0x110 [ 2241.805523] ? __might_fault+0xd3/0x180 [ 2241.806331] ? lock_downgrade+0x6d0/0x6d0 [ 2241.807195] do_recvmmsg+0x24c/0x6d0 [ 2241.807959] ? ___sys_recvmsg+0x200/0x200 [ 2241.808815] ? lock_downgrade+0x6d0/0x6d0 [ 2241.809669] ? ksys_write+0x12d/0x260 [ 2241.810460] ? wait_for_completion_io+0x270/0x270 [ 2241.811441] ? rcu_read_lock_any_held+0x75/0xa0 [ 2241.812383] ? vfs_write+0x354/0xa70 [ 2241.813152] __x64_sys_recvmmsg+0x20f/0x260 [ 2241.814029] ? ksys_write+0x1a9/0x260 [ 2241.814803] ? __do_sys_socketcall+0x600/0x600 [ 2241.815736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2241.816811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2241.817884] do_syscall_64+0x33/0x40 [ 2241.818643] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2241.819692] RIP: 0033:0x7f3f9ef17b19 [ 2241.820447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2241.824224] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2241.825775] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2241.827229] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2241.828681] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2241.830122] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2241.831565] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 16:01:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:01:12 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:01:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 29) [ 2241.889700] 9pnet: Insufficient options for proto=fd 16:01:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:01:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x10a) lseek(r2, 0x300000000000, 0x4) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x40, 0x40) sendfile(r0, r1, 0x0, 0x20d315) syz_io_uring_setup(0x5af2, &(0x7f00000003c0)={0x0, 0x0, 0x10, 0x1, 0x327, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000480)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) 16:01:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 11) [ 2242.036103] FAULT_INJECTION: forcing a failure. [ 2242.036103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2242.039042] CPU: 1 PID: 16155 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2242.040444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2242.042233] Call Trace: [ 2242.042771] dump_stack+0x107/0x167 [ 2242.043534] should_fail.cold+0x5/0xa [ 2242.044320] _copy_from_user+0x2e/0x1b0 [ 2242.045160] __copy_msghdr_from_user+0x91/0x4b0 [ 2242.046096] ? __ia32_sys_shutdown+0x80/0x80 [ 2242.046989] ? __lock_acquire+0x1657/0x5b00 [ 2242.047880] ___sys_recvmsg+0xd5/0x200 [ 2242.048676] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2242.049666] ? __lockdep_reset_lock+0x180/0x180 [ 2242.050611] ? lock_downgrade+0x6d0/0x6d0 [ 2242.051456] ? lock_acquire+0x197/0x470 [ 2242.052270] ? find_held_lock+0x2c/0x110 [ 2242.053123] ? __might_fault+0xd3/0x180 [ 2242.053941] ? lock_downgrade+0x6d0/0x6d0 [ 2242.054801] do_recvmmsg+0x24c/0x6d0 [ 2242.055559] ? ___sys_recvmsg+0x200/0x200 [ 2242.056397] ? lock_downgrade+0x6d0/0x6d0 [ 2242.057265] ? ksys_write+0x12d/0x260 [ 2242.058059] ? wait_for_completion_io+0x270/0x270 [ 2242.059047] ? rcu_read_lock_any_held+0x75/0xa0 [ 2242.059986] ? vfs_write+0x354/0xa70 [ 2242.060754] __x64_sys_recvmmsg+0x20f/0x260 [ 2242.061628] ? ksys_write+0x1a9/0x260 [ 2242.062409] ? __do_sys_socketcall+0x600/0x600 [ 2242.063341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2242.064403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2242.065482] do_syscall_64+0x33/0x40 [ 2242.066251] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2242.067295] RIP: 0033:0x7f08503ffb19 [ 2242.068055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.071772] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2242.073339] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2242.074780] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2242.076222] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.077706] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2242.079144] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2242.083161] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2242.107060] FAULT_INJECTION: forcing a failure. [ 2242.107060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2242.108516] CPU: 0 PID: 16171 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2242.109330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2242.110198] Call Trace: [ 2242.110490] dump_stack+0x107/0x167 [ 2242.110913] should_fail.cold+0x5/0xa [ 2242.111343] _copy_from_user+0x2e/0x1b0 [ 2242.111789] __copy_msghdr_from_user+0x91/0x4b0 [ 2242.112311] ? __ia32_sys_shutdown+0x80/0x80 [ 2242.112821] ? __lock_acquire+0x1657/0x5b00 [ 2242.113316] ___sys_recvmsg+0xd5/0x200 [ 2242.113757] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2242.114302] ? __lockdep_reset_lock+0x180/0x180 [ 2242.114815] ? lock_downgrade+0x6d0/0x6d0 [ 2242.115281] ? lock_acquire+0x197/0x470 [ 2242.115727] ? find_held_lock+0x2c/0x110 [ 2242.116213] ? __might_fault+0xd3/0x180 [ 2242.116684] ? lock_downgrade+0x6d0/0x6d0 [ 2242.117181] do_recvmmsg+0x24c/0x6d0 [ 2242.117633] ? ___sys_recvmsg+0x200/0x200 [ 2242.118145] ? lock_downgrade+0x6d0/0x6d0 [ 2242.118638] ? ksys_write+0x12d/0x260 [ 2242.119095] ? wait_for_completion_io+0x270/0x270 [ 2242.119663] ? rcu_read_lock_any_held+0x75/0xa0 [ 2242.120203] ? vfs_write+0x354/0xa70 [ 2242.120655] __x64_sys_recvmmsg+0x20f/0x260 [ 2242.121163] ? ksys_write+0x1a9/0x260 [ 2242.121612] ? __do_sys_socketcall+0x600/0x600 [ 2242.122154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2242.122769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2242.123357] do_syscall_64+0x33/0x40 [ 2242.123792] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2242.124403] RIP: 0033:0x7f3f9ef17b19 [ 2242.124850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.126987] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2242.127872] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2242.128693] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2242.129485] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.130279] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2242.131074] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2242.327380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2242.328012] print_req_error: 22 callbacks suppressed [ 2242.328025] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2242.329761] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2242.330898] buffer_io_error: 6 callbacks suppressed [ 2242.330905] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2242.335302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2242.335881] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2242.337033] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2242.338216] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2242.339121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2242.339741] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2242.340936] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2242.342092] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2242.343016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2242.343628] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2242.344837] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2242.346002] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2242.346925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2242.347548] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2242.348746] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2242.349902] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2242.350831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2242.351527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2242.352198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2242.355240] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2242.356094] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2242.356945] Buffer I/O error on dev loop7, logical block 2096903, async page read 16:01:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 12) 16:01:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:01:26 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:01:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8be}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="d65bbdd4b49c05", 0x7}, {&(0x7f0000000740)='0', 0x1}], 0x2) perf_event_open(&(0x7f0000000940)={0x5, 0x80, 0x40, 0x9, 0x4, 0x0, 0x0, 0x10000, 0xb, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000900), 0x3}, 0x40400, 0x81, 0x1ff, 0x0, 0x80000001, 0x8, 0x800, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0xd, r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001bc0)={@in6={{0xa, 0x4e22, 0x1, @mcast1, 0x6}}, 0x0, 0x0, 0xb, 0x0, "e410401ee989bfe54fffaaa19d4ae4fa50dc56cb6e415ea3efe5ea17dffbb1fb96bf972c48ffb32807af374caa23c78cc1edc5b8758cdc00bf064d416793a5f9d8dfbe5947e1ea0846a477f728605bd9"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8, 0x80, 0x3, 0x0, 0x3, r2}) r3 = gettid() process_vm_readv(r3, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/30, 0x1e}, {0x0}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000000340)=""/192, 0xc0}, {0x0}, {&(0x7f0000001c40)=""/159, 0x9f}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) r4 = syz_open_dev$usbmon(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000a00)={@in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x0, 0x0, 0x37, 0x0, "8c09d7ed1eec12d8a7256864237172eeab3f2d032b3509d6c4dbd6ff52394af72b77c07d49da17de29b206406b35b7c602c5c26fb9fe56866800e9a4af06cc9177127acc6c337ac0c171fd648c028178"}, 0xd8) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x124d63) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000009c0)={0x0, 0x3, 0x8, 0xffffffff}) unshare(0x48020200) r5 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) readv(r5, &(0x7f0000000880)=[{&(0x7f00000000c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/251, 0xfb}, {&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000180)=""/25, 0x19}], 0x7) 16:01:26 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:01:26 executing program 6: msgsnd(0x0, 0x0, 0x3f9, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0x0, 0x8, 0x0, 0x5, 0x800000, 0xfffffffc}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/40}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0xfffffffc, @loopback, 0x2}, 0xe) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/89}, 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x12001, &(0x7f0000001c40)={0x0, 0x989680}) getpgrp(0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 16:01:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:01:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 30) [ 2256.298031] FAULT_INJECTION: forcing a failure. [ 2256.298031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2256.299966] CPU: 1 PID: 16186 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2256.299973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 16:01:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 31) [ 2256.299977] Call Trace: [ 2256.299995] dump_stack+0x107/0x167 [ 2256.300014] should_fail.cold+0x5/0xa [ 2256.300034] _copy_from_user+0x2e/0x1b0 [ 2256.300052] __copy_msghdr_from_user+0x91/0x4b0 [ 2256.300065] ? __ia32_sys_shutdown+0x80/0x80 [ 2256.300079] ? __lock_acquire+0x1657/0x5b00 [ 2256.300104] ___sys_recvmsg+0xd5/0x200 [ 2256.300117] ? __copy_msghdr_from_user+0x4b0/0x4b0 16:01:26 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2256.300129] ? __lockdep_reset_lock+0x180/0x180 [ 2256.300140] ? lock_downgrade+0x6d0/0x6d0 16:01:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 13) 16:01:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:01:26 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2256.300156] ? lock_acquire+0x197/0x470 [ 2256.300167] ? find_held_lock+0x2c/0x110 [ 2256.300184] ? __might_fault+0xd3/0x180 16:01:26 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ftruncate(r1, 0x800) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)) pread64(r3, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) syz_io_uring_setup(0x6c58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000140)) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r3, 0x20) sendfile(0xffffffffffffffff, r1, 0x0, 0x4000007ffffffc) openat(r2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x100) [ 2256.300198] ? lock_downgrade+0x6d0/0x6d0 [ 2256.300224] do_recvmmsg+0x24c/0x6d0 [ 2256.300245] ? ___sys_recvmsg+0x200/0x200 16:01:26 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) [ 2256.300257] ? lock_downgrade+0x6d0/0x6d0 [ 2256.300275] ? ksys_write+0x12d/0x260 [ 2256.300299] ? wait_for_completion_io+0x270/0x270 16:01:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 32) 16:01:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2256.300314] ? rcu_read_lock_any_held+0x75/0xa0 [ 2256.300324] ? vfs_write+0x354/0xa70 [ 2256.300339] __x64_sys_recvmmsg+0x20f/0x260 [ 2256.300351] ? ksys_write+0x1a9/0x260 16:01:26 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2256.300363] ? __do_sys_socketcall+0x600/0x600 [ 2256.300378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2256.300389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2256.300406] do_syscall_64+0x33/0x40 16:01:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2256.300419] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2256.300428] RIP: 0033:0x7f08503ffb19 [ 2256.300440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.300446] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2256.300460] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2256.300467] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2256.300473] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2256.300480] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2256.300487] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2256.343893] FAULT_INJECTION: forcing a failure. [ 2256.343893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2256.343916] CPU: 0 PID: 16187 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2256.343927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.343933] Call Trace: [ 2256.343962] dump_stack+0x107/0x167 [ 2256.343987] should_fail.cold+0x5/0xa [ 2256.344016] _copy_from_user+0x2e/0x1b0 [ 2256.344043] __copy_msghdr_from_user+0x91/0x4b0 [ 2256.344064] ? __ia32_sys_shutdown+0x80/0x80 [ 2256.344084] ? __lock_acquire+0x1657/0x5b00 [ 2256.344125] ___sys_recvmsg+0xd5/0x200 [ 2256.344146] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2256.344165] ? __lockdep_reset_lock+0x180/0x180 [ 2256.344185] ? _raw_spin_unlock_irq+0x27/0x30 [ 2256.344212] ? lock_acquire+0x197/0x470 [ 2256.344228] ? find_held_lock+0x2c/0x110 [ 2256.344255] ? __might_fault+0xd3/0x180 [ 2256.344275] ? lock_downgrade+0x6d0/0x6d0 [ 2256.344296] ? io_schedule_timeout+0x140/0x140 [ 2256.344331] do_recvmmsg+0x24c/0x6d0 [ 2256.344358] ? ___sys_recvmsg+0x200/0x200 [ 2256.344377] ? lock_downgrade+0x6d0/0x6d0 [ 2256.344405] ? ksys_write+0x12d/0x260 [ 2256.344441] ? wait_for_completion_io+0x270/0x270 [ 2256.344463] ? rcu_read_lock_any_held+0x75/0xa0 [ 2256.344480] ? vfs_write+0x354/0xa70 [ 2256.344504] __x64_sys_recvmmsg+0x20f/0x260 [ 2256.344522] ? ksys_write+0x1a9/0x260 [ 2256.344542] ? __do_sys_socketcall+0x600/0x600 [ 2256.344566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2256.344584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2256.344610] do_syscall_64+0x33/0x40 [ 2256.344631] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2256.344644] RIP: 0033:0x7f3f9ef17b19 [ 2256.344662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.344672] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2256.344693] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2256.344704] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2256.344714] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2256.344724] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2256.344736] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2256.350742] 9pnet: Insufficient options for proto=fd [ 2256.422762] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2256.422893] ext4 filesystem being mounted at /syzkaller-testdir532514822/syzkaller.GQraMp/301/file0 supports timestamps until 2038 (0x7fffffff) [ 2256.430849] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2256.470717] FAULT_INJECTION: forcing a failure. [ 2256.470717] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2256.470862] CPU: 1 PID: 16201 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2256.470870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.470874] Call Trace: [ 2256.470894] dump_stack+0x107/0x167 [ 2256.470912] should_fail.cold+0x5/0xa [ 2256.470931] __alloc_pages_nodemask+0x182/0x600 [ 2256.470945] ? lock_chain_count+0x20/0x20 [ 2256.470959] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2256.470979] ? perf_trace_lock+0xac/0x490 [ 2256.470995] alloc_pages_vma+0xbb/0x410 [ 2256.471011] wp_page_copy+0xee7/0x1f00 [ 2256.471031] ? print_bad_pte+0x5a0/0x5a0 [ 2256.471042] ? lock_downgrade+0x6d0/0x6d0 [ 2256.471052] ? vm_normal_page+0x162/0x2e0 [ 2256.471067] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2256.471085] do_wp_page+0x27b/0x1390 [ 2256.471102] handle_mm_fault+0x1cc7/0x3500 [ 2256.471118] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2256.471130] ? __skb_checksum_complete+0x1b0/0x3a0 [ 2256.471142] ? __skb_checksum_complete_head+0x2d0/0x2d0 [ 2256.471153] ? __pmd_alloc+0x5e0/0x5e0 [ 2256.471171] ? vmacache_find+0x55/0x2a0 [ 2256.471191] do_user_addr_fault+0x56e/0xc60 [ 2256.471213] exc_page_fault+0xa2/0x1a0 [ 2256.471227] asm_exc_page_fault+0x1e/0x30 [ 2256.471241] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2256.471253] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 f1 2c 1e 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d2 2c 1e 02 66 90 48 bb f9 ef ff ff ff 7f [ 2256.471260] RSP: 0018:ffff88804ce1f9c8 EFLAGS: 00050202 [ 2256.471271] RAX: 0000000000000020 RBX: ffffffff834ff190 RCX: 0000000020007030 [ 2256.471278] RDX: 1ffff110099c3fc3 RSI: ffffffff830f236a RDI: 0000000000000005 [ 2256.471285] RBP: ffff88804ce1fdc8 R08: 0000000000000001 R09: ffff88804e1b799f [ 2256.471292] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000020007030 [ 2256.471299] R13: 0000000020007000 R14: 0000000000000102 R15: 0000000000000000 [ 2256.471313] ? inet_sendpage+0x130/0x130 [ 2256.471329] ? ____sys_recvmsg+0x2aa/0x590 [ 2256.471344] ____sys_recvmsg+0x2dd/0x590 [ 2256.471361] ? kernel_recvmsg+0x80/0x80 [ 2256.471374] ? __import_iovec+0x458/0x590 [ 2256.471393] ? import_iovec+0x83/0xb0 [ 2256.471409] ___sys_recvmsg+0x127/0x200 [ 2256.471422] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2256.471434] ? __lockdep_reset_lock+0x180/0x180 [ 2256.471451] ? lock_acquire+0x197/0x470 [ 2256.471462] ? find_held_lock+0x2c/0x110 [ 2256.471477] ? __might_fault+0xd3/0x180 [ 2256.471488] ? lock_downgrade+0x6d0/0x6d0 [ 2256.471514] do_recvmmsg+0x24c/0x6d0 [ 2256.471530] ? ___sys_recvmsg+0x200/0x200 [ 2256.471542] ? lock_downgrade+0x6d0/0x6d0 [ 2256.471560] ? ksys_write+0x12d/0x260 [ 2256.471582] ? wait_for_completion_io+0x270/0x270 [ 2256.471597] ? rcu_read_lock_any_held+0x75/0xa0 [ 2256.471607] ? vfs_write+0x354/0xa70 [ 2256.471622] __x64_sys_recvmmsg+0x20f/0x260 [ 2256.471634] ? ksys_write+0x1a9/0x260 [ 2256.471646] ? __do_sys_socketcall+0x600/0x600 [ 2256.471660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2256.471671] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2256.471689] do_syscall_64+0x33/0x40 [ 2256.471702] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2256.471710] RIP: 0033:0x7f08503ffb19 [ 2256.471722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.471728] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2256.471739] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2256.471746] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2256.471752] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2256.471759] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2256.471765] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2256.551783] 9pnet: Insufficient options for proto=fd [ 2256.589857] FAULT_INJECTION: forcing a failure. [ 2256.589857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2256.589879] CPU: 0 PID: 16213 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2256.589890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.589896] Call Trace: [ 2256.589921] dump_stack+0x107/0x167 [ 2256.589946] should_fail.cold+0x5/0xa [ 2256.589979] _copy_from_user+0x2e/0x1b0 [ 2256.590011] __copy_msghdr_from_user+0x91/0x4b0 [ 2256.590040] ? __ia32_sys_shutdown+0x80/0x80 [ 2256.590068] ? __lock_acquire+0x1657/0x5b00 [ 2256.590126] ___sys_recvmsg+0xd5/0x200 [ 2256.590153] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2256.590179] ? __lockdep_reset_lock+0x180/0x180 [ 2256.590210] ? _raw_spin_unlock_irq+0x27/0x30 [ 2256.590245] ? lock_acquire+0x197/0x470 [ 2256.590267] ? find_held_lock+0x2c/0x110 [ 2256.590301] ? __might_fault+0xd3/0x180 [ 2256.590327] ? lock_downgrade+0x6d0/0x6d0 [ 2256.590358] ? io_schedule_timeout+0x140/0x140 [ 2256.590404] do_recvmmsg+0x24c/0x6d0 [ 2256.590442] ? ___sys_recvmsg+0x200/0x200 [ 2256.590465] ? lock_downgrade+0x6d0/0x6d0 [ 2256.590502] ? ksys_write+0x12d/0x260 [ 2256.590551] ? wait_for_completion_io+0x270/0x270 [ 2256.590580] ? rcu_read_lock_any_held+0x75/0xa0 [ 2256.590601] ? vfs_write+0x354/0xa70 [ 2256.590633] __x64_sys_recvmmsg+0x20f/0x260 [ 2256.590658] ? ksys_write+0x1a9/0x260 [ 2256.590686] ? __do_sys_socketcall+0x600/0x600 [ 2256.590718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2256.590743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2256.590779] do_syscall_64+0x33/0x40 [ 2256.590806] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2256.590821] RIP: 0033:0x7f3f9ef17b19 [ 2256.590849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.590865] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2256.590894] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2256.590910] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2256.590927] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2256.590943] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2256.590960] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2256.650549] 9pnet: Insufficient options for proto=fd [ 2256.652754] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2256.685905] FAULT_INJECTION: forcing a failure. [ 2256.685905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2256.685927] CPU: 0 PID: 16288 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2256.685937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.685943] Call Trace: [ 2256.685968] dump_stack+0x107/0x167 [ 2256.685992] should_fail.cold+0x5/0xa [ 2256.686020] _copy_from_user+0x2e/0x1b0 [ 2256.686047] __copy_msghdr_from_user+0x91/0x4b0 [ 2256.686067] ? __ia32_sys_shutdown+0x80/0x80 [ 2256.686087] ? __lock_acquire+0x1657/0x5b00 [ 2256.686127] ___sys_recvmsg+0xd5/0x200 [ 2256.686148] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2256.686167] ? __lockdep_reset_lock+0x180/0x180 [ 2256.686185] ? lock_downgrade+0x6d0/0x6d0 [ 2256.686216] ? lock_acquire+0x197/0x470 [ 2256.686233] ? find_held_lock+0x2c/0x110 [ 2256.686260] ? __might_fault+0xd3/0x180 [ 2256.686279] ? lock_downgrade+0x6d0/0x6d0 [ 2256.686321] do_recvmmsg+0x24c/0x6d0 [ 2256.686348] ? ___sys_recvmsg+0x200/0x200 [ 2256.686367] ? lock_downgrade+0x6d0/0x6d0 [ 2256.686395] ? ksys_write+0x12d/0x260 [ 2256.686432] ? wait_for_completion_io+0x270/0x270 [ 2256.686454] ? rcu_read_lock_any_held+0x75/0xa0 [ 2256.686471] ? vfs_write+0x354/0xa70 [ 2256.686495] __x64_sys_recvmmsg+0x20f/0x260 [ 2256.686514] ? ksys_write+0x1a9/0x260 [ 2256.686532] ? __do_sys_socketcall+0x600/0x600 [ 2256.686557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2256.686575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2256.686601] do_syscall_64+0x33/0x40 [ 2256.686621] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2256.686634] RIP: 0033:0x7f08503ffb19 [ 2256.686653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.686663] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2256.686684] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2256.686695] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2256.686706] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2256.686717] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2256.686728] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2256.737783] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2257.296116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.297470] print_req_error: 6 callbacks suppressed [ 2257.297488] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.300714] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.300774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.301937] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2257.304856] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.307254] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.307330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.308446] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2257.311507] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.313914] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.314807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.315121] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2257.316323] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.319494] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.319566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.320672] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2257.323595] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.326009] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2257.326085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.327186] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2257.330165] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2257.330489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.332382] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2257.332453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.334533] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2257.390074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.391298] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2257.391364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.393503] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2257.393567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.395612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.396901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.398307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.399669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.401061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.445170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.446612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.447863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.449104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.450340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.451555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.452958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2257.454349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:01:42 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:01:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:01:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000007000000000000000003003e0000000000000000000000000040000000000000000000000200000000000000000000380002000000000000000300"], 0xaf2) close(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0, 0x0, @perf_config_ext={0xfff, 0x8001}, 0x24, 0x7, 0x10000, 0x1, 0x8, 0xb695, 0x400, 0x0, 0xfffff800, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000240)=')\x01)$]--\x00', &(0x7f0000000300)='\x00'], 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0/file0\x00'}) dup2(0xffffffffffffffff, r3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) epoll_create1(0x80000) 16:01:42 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:01:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 33) 16:01:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:01:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:01:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 14) [ 2272.601125] FAULT_INJECTION: forcing a failure. [ 2272.601125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2272.603640] CPU: 1 PID: 16446 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2272.604567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2272.605681] Call Trace: [ 2272.606037] dump_stack+0x107/0x167 [ 2272.606540] should_fail.cold+0x5/0xa [ 2272.607067] _copy_from_user+0x2e/0x1b0 [ 2272.607620] __copy_msghdr_from_user+0x91/0x4b0 [ 2272.608258] ? __ia32_sys_shutdown+0x80/0x80 [ 2272.608877] ? __lock_acquire+0x1657/0x5b00 [ 2272.609482] ___sys_recvmsg+0xd5/0x200 [ 2272.610002] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2272.610653] ? __lockdep_reset_lock+0x180/0x180 [ 2272.611292] ? lock_downgrade+0x6d0/0x6d0 [ 2272.611838] ? lock_acquire+0x197/0x470 [ 2272.612384] ? find_held_lock+0x2c/0x110 [ 2272.612953] ? __might_fault+0xd3/0x180 [ 2272.613485] ? lock_downgrade+0x6d0/0x6d0 [ 2272.614051] do_recvmmsg+0x24c/0x6d0 [ 2272.614547] ? ___sys_recvmsg+0x200/0x200 [ 2272.615097] ? lock_downgrade+0x6d0/0x6d0 [ 2272.615655] ? ksys_write+0x12d/0x260 [ 2272.616163] ? wait_for_completion_io+0x270/0x270 [ 2272.616799] ? rcu_read_lock_any_held+0x75/0xa0 [ 2272.617414] ? vfs_write+0x354/0xa70 [ 2272.617903] __x64_sys_recvmmsg+0x20f/0x260 [ 2272.618467] ? ksys_write+0x1a9/0x260 [ 2272.618964] ? __do_sys_socketcall+0x600/0x600 [ 2272.619579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2272.620274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2272.620960] do_syscall_64+0x33/0x40 [ 2272.621466] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2272.622134] RIP: 0033:0x7f08503ffb19 [ 2272.622628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2272.624994] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2272.626006] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2272.626935] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2272.627857] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2272.628792] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2272.629740] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2272.645412] 9pnet: Insufficient options for proto=fd [ 2272.647988] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2272.653919] FAULT_INJECTION: forcing a failure. [ 2272.653919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2272.655673] CPU: 1 PID: 16455 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2272.656086] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2272.656627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2272.656632] Call Trace: [ 2272.656645] dump_stack+0x107/0x167 [ 2272.656661] should_fail.cold+0x5/0xa [ 2272.656677] _copy_from_user+0x2e/0x1b0 [ 2272.656693] __copy_msghdr_from_user+0x91/0x4b0 [ 2272.656706] ? __ia32_sys_shutdown+0x80/0x80 [ 2272.656717] ? __lock_acquire+0x1657/0x5b00 [ 2272.656743] ___sys_recvmsg+0xd5/0x200 [ 2272.656757] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2272.656769] ? __lockdep_reset_lock+0x180/0x180 [ 2272.656781] ? lock_downgrade+0x6d0/0x6d0 [ 2272.656797] ? lock_acquire+0x197/0x470 [ 2272.656808] ? find_held_lock+0x2c/0x110 [ 2272.656828] ? __might_fault+0xd3/0x180 [ 2272.667584] ? lock_downgrade+0x6d0/0x6d0 [ 2272.668161] do_recvmmsg+0x24c/0x6d0 [ 2272.668640] ? ___sys_recvmsg+0x200/0x200 [ 2272.669212] ? lock_downgrade+0x6d0/0x6d0 [ 2272.669798] ? ksys_write+0x12d/0x260 [ 2272.670335] ? wait_for_completion_io+0x270/0x270 [ 2272.671006] ? rcu_read_lock_any_held+0x75/0xa0 [ 2272.671643] ? vfs_write+0x354/0xa70 [ 2272.672169] __x64_sys_recvmmsg+0x20f/0x260 [ 2272.672772] ? ksys_write+0x1a9/0x260 [ 2272.673310] ? __do_sys_socketcall+0x600/0x600 [ 2272.673949] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2272.674662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2272.675391] do_syscall_64+0x33/0x40 [ 2272.675908] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2272.676622] RIP: 0033:0x7f3f9ef17b19 [ 2272.677132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2272.679678] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2272.680736] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2272.681722] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2272.682717] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2272.683650] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2272.684587] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 16:01:43 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:01:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 34) 16:01:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2272.805124] FAULT_INJECTION: forcing a failure. [ 2272.805124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2272.806781] CPU: 1 PID: 16568 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2272.807682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2272.808811] Call Trace: [ 2272.809139] dump_stack+0x107/0x167 [ 2272.809633] should_fail.cold+0x5/0xa [ 2272.810157] _copy_from_user+0x2e/0x1b0 [ 2272.810687] __copy_msghdr_from_user+0x91/0x4b0 [ 2272.811319] ? __ia32_sys_shutdown+0x80/0x80 [ 2272.811915] ? __lock_acquire+0x1657/0x5b00 [ 2272.812505] ___sys_recvmsg+0xd5/0x200 [ 2272.813029] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2272.813671] ? __lockdep_reset_lock+0x180/0x180 [ 2272.814263] ? lock_downgrade+0x6d0/0x6d0 [ 2272.814788] ? lock_acquire+0x197/0x470 [ 2272.815309] ? find_held_lock+0x2c/0x110 [ 2272.815839] ? __might_fault+0xd3/0x180 [ 2272.816366] ? lock_downgrade+0x6d0/0x6d0 [ 2272.816950] do_recvmmsg+0x24c/0x6d0 [ 2272.817481] ? ___sys_recvmsg+0x200/0x200 [ 2272.818051] ? lock_downgrade+0x6d0/0x6d0 [ 2272.818630] ? ksys_write+0x12d/0x260 [ 2272.819139] ? wait_for_completion_io+0x270/0x270 [ 2272.819799] ? rcu_read_lock_any_held+0x75/0xa0 [ 2272.820426] ? vfs_write+0x354/0xa70 [ 2272.820924] __x64_sys_recvmmsg+0x20f/0x260 [ 2272.821496] ? ksys_write+0x1a9/0x260 [ 2272.821980] ? __do_sys_socketcall+0x600/0x600 [ 2272.822566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2272.823217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2272.823878] do_syscall_64+0x33/0x40 [ 2272.824320] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2272.824969] RIP: 0033:0x7f08503ffb19 [ 2272.825453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2272.827751] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2272.828760] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2272.829743] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2272.830629] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2272.831528] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2272.832428] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2272.843605] 9pnet: Insufficient options for proto=fd 16:01:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:01:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', 0x0, 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:01:43 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001e00)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x6, 0x1, 0x3e, 0x3, 0x2, 0x6, 0xed, 0x1da, 0x38, 0x3c8, 0x1, 0x5, 0x20, 0x2, 0xec, 0x9, 0x8}, [{0x6, 0x1000, 0x5, 0xffffffff, 0x7, 0x9, 0x0, 0xfffffff8}, {0x2, 0x7, 0x200, 0x7, 0x5, 0x63, 0x3}], "c6284c6db5710817f41c78dfa98f7e7c9f146f764199caf877d5fecc3f400030fc68c17ded716e3a0ffc321556559fa833df203812f1bb7b6350a708a1ede0b7d0eb760f7f171c8b38df6618e25ccfb8573795808d1d2c94a9c779133f3f90dea33ff8ca2a33f3da83d26e57d9605d4bc22bc74ba3b8d6a92cce71c9a397620f52b42bd719b3307fcceeebbe4a8aeef58596324d501b55ae630f2bf86bbf8bc765aff309428b2227fdcf3015dacc23c95f354b100f7543b5df61bea54c14eef2f6aac9f6f700755ed2e44dd960fb38291696cb5bec9ba2e93f506a4c963b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa56) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x110, r0, 0x6c1ba000) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x75) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001880)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x4, @perf_bp={&(0x7f0000001840), 0xc}, 0x0, 0x10000, 0x401, 0x7, 0x2000000, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={0x0, "a66cb98e93196a8dc998d8ebfe459ed0"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10010, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x6, 0xa, &(0x7f00000016c0)=[{&(0x7f00000012c0)="02f19b01258e3ef342fb49abe4013bf100f4433fe529b33b92105e716f84bbd2c69963c3ef7644167d5e2a1f566cd56a5244fccf8c7c4d16bf3a49b620f72022fa869811aa072e1c5e8afa709f634fee1e5cffbf519f5695ccbc19d9ec046ed074b8861749a8096df904f58b67a278f5a5de4d135198213742c5f1a638c20953187ac903261f1f8a2828d1d08bdded8a19e096dd2f825dc969f339709955fa955f0cbb6c7201b984e10d93b82548ca2f5dfdd287bea423a5479d1edf10025c7c7445f60e5dba4015c7a300e2ab26d0618514afd22b1aef9af88b", 0xda, 0xb1}, {&(0x7f0000000140)="c66738016b4829", 0x7, 0x1}, {&(0x7f00000013c0)="23fe8cdac8750b5286649646f73dc937a14183c3c8d6f69cb122c2cf23fe68e9eaa089d9934cc9a237f1c4ba895af3111b5f98b2da656e82a15cb43f586c999897ee83086cca893e7250c6671a822eb21354371e10bedeb9e20db5ec908ad15ae2983496f72967a791af0d7f7e13637727ee26eaa78311c118be4b1ab04df9cc3c081bffa98f8827943616b2d2482b7cc5845cc2b9cfadcc4223830147485e1ac0fa38e2be4545faa55f94bb865a999d07c91cbcdc69ce1018798ca577e0c9fc5bd26603ea1efa7a", 0xc8, 0x81b4}, {&(0x7f0000000180)="a05b14c40d98bbe376f1710412087da9b2edad", 0x13, 0xfffffffffffffffd}, {&(0x7f0000000200)="ec2c1044fe517d5d1b66a9a8", 0xc, 0x4}, {&(0x7f00000014c0)="be64f345bb259883cba571c7204fd5e0a1cbaa36ec70060c1ea3a239380c10c9cc33cde852fad5bc5503b255a4efd6cf1870d46c5906fec483ec1253789915595326576a39aa1ddd703d", 0x4a, 0x4}, {&(0x7f0000001540)="682fbb879cc3b24bddb9651a3bcd67a317811c09410d8c138b90ee8225d28070d627d9f272128b92eaff807357a35c50a2617db8e182309d791de14ab1bcbcb24d327d07b9a77e000b81041745fb0842d27282f31963", 0x56, 0xffffffffffff8dc9}, {&(0x7f00000015c0)="41483fb69908af82d9e35959eea720b2889982a7fd1ce75d192f67e14603dcd4fdee1485e15b55b169599be829857d4be221066a455ac4368f6c3a0738279d34da157ebf5a3439e36e83a3ca5c92a2c8ba70978c00", 0x55, 0x3b4}, {&(0x7f0000001640)="e9d5524eddbecc96d5cfc5f2d79485c571f2d40a50160f7b1f177e2f1a6d840c48958b53dc80e32564376954c202ea080acdf72a985db10769d7ad7f5f7d925591a093efeeef0c092851c89f2803263131a4c6d923274992d4f72f52dc0eea66e05713a6f2304ee2af8f576b1073094a6a73a295a90450", 0x77, 0x9}, {&(0x7f0000000240)="f502", 0x2, 0x8}], 0x8800, &(0x7f00000017c0)={[{'*\xf8$\'+[\'({}\''}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@uid_gt={'uid>', 0xee00}}, {@pcr={'pcr', 0x3d, 0x19}}]}) [ 2272.912879] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2273.036536] nfs4: Unknown parameter '*ø$'+['({}'' [ 2273.098624] nfs4: Unknown parameter '*ø$'+['({}'' [ 2273.448171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2273.449357] print_req_error: 38 callbacks suppressed [ 2273.449375] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2273.452614] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2273.454789] buffer_io_error: 14 callbacks suppressed [ 2273.454801] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2273.469500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2273.470647] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2273.472794] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2273.474949] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2273.479142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2273.480292] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2273.482483] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2273.484611] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2273.486500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2273.487624] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2273.489797] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2273.491925] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2273.493760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2273.494901] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2273.497343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2273.498465] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2273.500817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2273.502211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2273.506288] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2273.507869] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2273.509437] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2273.510989] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2288.152858] FAULT_INJECTION: forcing a failure. [ 2288.152858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2288.154609] CPU: 1 PID: 16602 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2288.155471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2288.156500] Call Trace: [ 2288.156839] dump_stack+0x107/0x167 [ 2288.157325] should_fail.cold+0x5/0xa [ 2288.157808] _copy_from_user+0x2e/0x1b0 [ 2288.158317] __copy_msghdr_from_user+0x91/0x4b0 [ 2288.158878] ? __ia32_sys_shutdown+0x80/0x80 [ 2288.159425] ? __lock_acquire+0x1657/0x5b00 [ 2288.159972] ___sys_recvmsg+0xd5/0x200 [ 2288.160451] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2288.161057] ? __lockdep_reset_lock+0x180/0x180 [ 2288.161640] ? lock_acquire+0x197/0x470 [ 2288.162150] ? find_held_lock+0x2c/0x110 [ 2288.162671] ? __might_fault+0xd3/0x180 [ 2288.163176] ? lock_downgrade+0x6d0/0x6d0 [ 2288.163726] ? io_schedule_timeout+0x140/0x140 [ 2288.164341] do_recvmmsg+0x24c/0x6d0 [ 2288.164844] ? ___sys_recvmsg+0x200/0x200 [ 2288.165402] ? lock_downgrade+0x6d0/0x6d0 [ 2288.165964] ? ksys_write+0x12d/0x260 [ 2288.166472] ? wait_for_completion_io+0x270/0x270 [ 2288.167115] ? rcu_read_lock_any_held+0x75/0xa0 [ 2288.167673] ? vfs_write+0x354/0xa70 [ 2288.168166] __x64_sys_recvmmsg+0x20f/0x260 [ 2288.168702] ? ksys_write+0x1a9/0x260 [ 2288.169208] ? __do_sys_socketcall+0x600/0x600 [ 2288.169795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2288.170479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2288.171164] do_syscall_64+0x33/0x40 16:01:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}], 0x0, &(0x7f0000012900)=ANY=[]) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x22100, 0x142, 0x1}, 0x18) 16:01:58 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:01:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', 0x0, 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:01:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 15) 16:01:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 35) [ 2288.171666] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2288.172451] RIP: 0033:0x7f08503ffb19 16:01:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:01:58 executing program 6: msgrcv(0x0, 0x0, 0x61, 0x0, 0x0) r0 = msgget(0x1, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) getpgrp(0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x26f01180cc6af141, &(0x7f00000000c0)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40010020, &(0x7f0000001c40)={0x0, 0x989680}) r1 = msgget(0x1, 0x0) msgsnd(r1, &(0x7f0000000340)={0x2, "3bababd725c4286ebc9d3185fd01053716fc631caec32df91cfb541027a3a8d34067c06821660d308b20f2d7193e25fa14d611a957e157bc7c3348b0d0a386c5aca1135b73f3fd7292aefb09d686cc62fb3ce2cee0eb5a615fec102ab7846fa9022ef80f92046f3d7be19b33971d603726c17c2df0725a744cecd479fe59f8b3d79c9aaa24d4573fa63ad21f472b126f0e12217aa5a83141a7c5c983f108003da26d2ca74f6c4de357780cbd126ebf68b6882b41ca57d4d1191dd0c6a2d60190ec4c00db"}, 0xcc, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/19) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x0, 0xa33b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 16:01:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x1) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2288.173074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2288.175604] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2288.176608] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2288.177530] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2288.178464] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2288.178529] 9pnet: Insufficient options for proto=fd [ 2288.179407] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2288.179416] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2288.216887] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 16:01:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 36) [ 2288.228892] FAULT_INJECTION: forcing a failure. [ 2288.228892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2288.231460] CPU: 0 PID: 16598 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2288.232851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2288.234534] Call Trace: [ 2288.235068] dump_stack+0x107/0x167 [ 2288.235812] should_fail.cold+0x5/0xa [ 2288.236590] _copy_from_user+0x2e/0x1b0 [ 2288.237403] __copy_msghdr_from_user+0x91/0x4b0 [ 2288.238336] ? __ia32_sys_shutdown+0x80/0x80 [ 2288.239212] ? __lock_acquire+0x1657/0x5b00 [ 2288.240092] ___sys_recvmsg+0xd5/0x200 [ 2288.240106] FAULT_INJECTION: forcing a failure. [ 2288.240106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2288.243138] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2288.244118] ? __lockdep_reset_lock+0x180/0x180 [ 2288.245047] ? _raw_spin_unlock_irq+0x27/0x30 [ 2288.245960] ? lock_acquire+0x197/0x470 [ 2288.246754] ? find_held_lock+0x2c/0x110 [ 2288.247573] ? __might_fault+0xd3/0x180 [ 2288.248367] ? lock_downgrade+0x6d0/0x6d0 [ 2288.249197] ? io_schedule_timeout+0x140/0x140 [ 2288.250134] do_recvmmsg+0x24c/0x6d0 [ 2288.250887] ? ___sys_recvmsg+0x200/0x200 [ 2288.251715] ? lock_downgrade+0x6d0/0x6d0 [ 2288.252555] ? ksys_write+0x12d/0x260 [ 2288.253346] ? wait_for_completion_io+0x270/0x270 [ 2288.254313] ? rcu_read_lock_any_held+0x75/0xa0 [ 2288.255238] ? vfs_write+0x354/0xa70 [ 2288.255987] __x64_sys_recvmmsg+0x20f/0x260 [ 2288.256848] ? ksys_write+0x1a9/0x260 [ 2288.257619] ? __do_sys_socketcall+0x600/0x600 [ 2288.258531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2288.259570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2288.260602] do_syscall_64+0x33/0x40 [ 2288.261364] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2288.262382] RIP: 0033:0x7f3f9ef17b19 [ 2288.263129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2288.266779] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2288.268295] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2288.269717] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2288.271125] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2288.272543] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2288.273973] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2288.275430] CPU: 1 PID: 16614 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2288.276346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2288.277395] Call Trace: [ 2288.277721] dump_stack+0x107/0x167 [ 2288.278184] should_fail.cold+0x5/0xa [ 2288.278660] _copy_from_user+0x2e/0x1b0 [ 2288.279156] __copy_msghdr_from_user+0x91/0x4b0 [ 2288.279737] ? __ia32_sys_shutdown+0x80/0x80 [ 2288.280291] ? __lock_acquire+0x1657/0x5b00 [ 2288.280836] ___sys_recvmsg+0xd5/0x200 [ 2288.281344] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2288.281962] ? __lockdep_reset_lock+0x180/0x180 [ 2288.282538] ? _raw_spin_unlock_irq+0x27/0x30 [ 2288.283096] ? lock_acquire+0x197/0x470 [ 2288.283586] ? find_held_lock+0x2c/0x110 [ 2288.284096] ? __might_fault+0xd3/0x180 [ 2288.284582] ? lock_downgrade+0x6d0/0x6d0 [ 2288.285116] do_recvmmsg+0x24c/0x6d0 [ 2288.285596] ? ___sys_recvmsg+0x200/0x200 [ 2288.286112] ? lock_downgrade+0x6d0/0x6d0 [ 2288.286629] ? ksys_write+0x12d/0x260 [ 2288.287117] ? wait_for_completion_io+0x270/0x270 [ 2288.287712] ? rcu_read_lock_any_held+0x75/0xa0 [ 2288.288292] ? vfs_write+0x354/0xa70 [ 2288.288766] __x64_sys_recvmmsg+0x20f/0x260 [ 2288.289311] ? ksys_write+0x1a9/0x260 [ 2288.289785] ? __do_sys_socketcall+0x600/0x600 [ 2288.290352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2288.290999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2288.291649] do_syscall_64+0x33/0x40 [ 2288.292102] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2288.292742] RIP: 0033:0x7f08503ffb19 [ 2288.293201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2288.295503] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2288.296442] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2288.297312] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2288.298188] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2288.299074] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2288.299956] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 16:01:58 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000e882000000000300000000d08b922e8ceb"], 0x61, 0x0, 0x0) r0 = msgget(0x1, 0x0) msgsnd(r0, &(0x7f0000000340)={0x2, "3bababd725c4286ebc9d3185fd01053716fc631caec32df91cfb541027a3a8d34067c06821660d308b20f2d7193e25fa14d611a957e157bc7c3348b0d0a386c5aca1135b73f3fd7292aefb09d686cc62fb3ce2cee0eb5a615fec102ab7846fa9022ef80f92046f3d7be19b33971d603726c17c2df0725a744cecd479fe59f8b3d79c9aaa24d4573fa63ad21f472b126f0e12217aa5a83141a7c5c983f108003da26d2ca74f6c4de357780cbd126ebf68b6882b41ca57d4d1191dd0c6a2d60190ec4c00db"}, 0xcc, 0x0) getpgrp(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x12001, &(0x7f0000001c40)={0x0, 0x989680}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 16:01:58 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:01:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', 0x0, 0x1, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:01:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:01:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 16) [ 2288.445090] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2288.451861] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2288.459755] 9pnet: Insufficient options for proto=fd 16:01:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 37) [ 2288.484196] ext4 filesystem being mounted at /syzkaller-testdir532514822/syzkaller.GQraMp/305/file0 supports timestamps until 2038 (0x7fffffff) [ 2288.494307] FAULT_INJECTION: forcing a failure. [ 2288.494307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2288.495924] CPU: 1 PID: 16704 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2288.496684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2288.497573] Call Trace: [ 2288.497865] dump_stack+0x107/0x167 [ 2288.498258] should_fail.cold+0x5/0xa [ 2288.498674] _copy_from_user+0x2e/0x1b0 [ 2288.499109] __copy_msghdr_from_user+0x91/0x4b0 [ 2288.499601] ? __ia32_sys_shutdown+0x80/0x80 [ 2288.500080] ? __lock_acquire+0x1657/0x5b00 [ 2288.500550] ___sys_recvmsg+0xd5/0x200 [ 2288.500967] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2288.501510] ? __lockdep_reset_lock+0x180/0x180 [ 2288.502018] ? lock_acquire+0x197/0x470 [ 2288.502443] ? find_held_lock+0x2c/0x110 [ 2288.502888] ? __might_fault+0xd3/0x180 [ 2288.503313] ? lock_downgrade+0x6d0/0x6d0 [ 2288.503765] do_recvmmsg+0x24c/0x6d0 [ 2288.504160] ? ___sys_recvmsg+0x200/0x200 [ 2288.504602] ? lock_downgrade+0x6d0/0x6d0 [ 2288.505056] ? ksys_write+0x12d/0x260 [ 2288.505491] ? wait_for_completion_io+0x270/0x270 [ 2288.506026] ? rcu_read_lock_any_held+0x75/0xa0 [ 2288.506539] ? vfs_write+0x354/0xa70 [ 2288.506955] __x64_sys_recvmmsg+0x20f/0x260 [ 2288.507433] ? ksys_write+0x1a9/0x260 [ 2288.507857] ? __do_sys_socketcall+0x600/0x600 [ 2288.508366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2288.508941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2288.509522] do_syscall_64+0x33/0x40 [ 2288.509930] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2288.510490] RIP: 0033:0x7f08503ffb19 [ 2288.510904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2288.512935] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2288.513775] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2288.514567] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2288.515343] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2288.516123] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2288.516877] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 16:01:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38373635383433343000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000a4d0099b099d46eeb5a6d2ef5e9d5ded010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02002000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000000040)="ed41000000080000e0f4655fe1f4655fe1f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020e0f4655fe0f4655fe0f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x64, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffe1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) 16:01:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 38) [ 2288.551204] FAULT_INJECTION: forcing a failure. [ 2288.551204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2288.552661] CPU: 1 PID: 16726 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2288.553410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2288.554307] Call Trace: [ 2288.554593] dump_stack+0x107/0x167 [ 2288.554984] should_fail.cold+0x5/0xa [ 2288.555399] _copy_from_user+0x2e/0x1b0 [ 2288.555819] __copy_msghdr_from_user+0x91/0x4b0 [ 2288.556314] ? __ia32_sys_shutdown+0x80/0x80 [ 2288.556790] ? __lock_acquire+0x1657/0x5b00 [ 2288.557275] ___sys_recvmsg+0xd5/0x200 [ 2288.557682] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2288.558201] ? __lockdep_reset_lock+0x180/0x180 [ 2288.558688] ? trace_hardirqs_on+0x5b/0x180 [ 2288.559149] ? lock_acquire+0x197/0x470 [ 2288.559567] ? find_held_lock+0x2c/0x110 [ 2288.560010] ? __might_fault+0xd3/0x180 [ 2288.560446] ? lock_downgrade+0x6d0/0x6d0 [ 2288.560910] ? io_schedule_timeout+0x140/0x140 [ 2288.561444] do_recvmmsg+0x24c/0x6d0 [ 2288.561864] ? ___sys_recvmsg+0x200/0x200 [ 2288.562321] ? lock_downgrade+0x6d0/0x6d0 [ 2288.562783] ? ksys_write+0x12d/0x260 [ 2288.563224] ? wait_for_completion_io+0x270/0x270 [ 2288.563767] ? rcu_read_lock_any_held+0x75/0xa0 [ 2288.564274] ? vfs_write+0x354/0xa70 [ 2288.564692] __x64_sys_recvmmsg+0x20f/0x260 [ 2288.565174] ? ksys_write+0x1a9/0x260 [ 2288.565610] ? __do_sys_socketcall+0x600/0x600 [ 2288.566119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2288.566694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2288.567270] do_syscall_64+0x33/0x40 [ 2288.567680] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2288.568246] RIP: 0033:0x7f08503ffb19 [ 2288.568656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2288.570695] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2288.571559] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2288.572345] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2288.573133] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2288.573930] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2288.574722] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 16:01:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2288.600108] FAULT_INJECTION: forcing a failure. [ 2288.600108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2288.601541] CPU: 1 PID: 16737 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2288.602306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2288.603226] Call Trace: [ 2288.603516] dump_stack+0x107/0x167 [ 2288.603922] should_fail.cold+0x5/0xa [ 2288.604348] _copy_from_user+0x2e/0x1b0 [ 2288.604793] __copy_msghdr_from_user+0x91/0x4b0 [ 2288.605322] ? __ia32_sys_shutdown+0x80/0x80 [ 2288.605801] ? __lock_acquire+0x1657/0x5b00 [ 2288.606299] ___sys_recvmsg+0xd5/0x200 [ 2288.606731] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2288.607278] ? __lockdep_reset_lock+0x180/0x180 [ 2288.607795] ? lock_downgrade+0x6d0/0x6d0 [ 2288.608259] ? lock_acquire+0x197/0x470 [ 2288.608693] ? find_held_lock+0x2c/0x110 [ 2288.609151] ? __might_fault+0xd3/0x180 [ 2288.609609] ? lock_downgrade+0x6d0/0x6d0 [ 2288.610062] do_recvmmsg+0x24c/0x6d0 [ 2288.610472] ? ___sys_recvmsg+0x200/0x200 [ 2288.610929] ? lock_downgrade+0x6d0/0x6d0 [ 2288.611395] ? ksys_write+0x12d/0x260 [ 2288.611828] ? wait_for_completion_io+0x270/0x270 [ 2288.612367] ? rcu_read_lock_any_held+0x75/0xa0 [ 2288.612877] ? vfs_write+0x354/0xa70 [ 2288.613297] __x64_sys_recvmmsg+0x20f/0x260 [ 2288.613772] ? ksys_write+0x1a9/0x260 [ 2288.614195] ? __do_sys_socketcall+0x600/0x600 [ 2288.614708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2288.615292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2288.615849] do_syscall_64+0x33/0x40 [ 2288.616259] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2288.616822] RIP: 0033:0x7f3f9ef17b19 [ 2288.617226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2288.619260] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2288.620064] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2288.620850] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2288.621628] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2288.622410] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2288.623158] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2289.077017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2289.079281] print_req_error: 6 callbacks suppressed [ 2289.079299] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.082534] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.082595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2289.083740] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2289.086376] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.088502] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.088851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2289.089711] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2289.093351] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.095499] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.095563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2289.096687] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2289.099288] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.101616] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.102973] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2289.105523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2289.106792] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.109257] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2289.109344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2289.110502] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2289.113409] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2289.113480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2289.115451] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2289.115522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2289.117403] Buffer I/O error on dev loop7, logical block 2096903, async page read 16:02:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:02:14 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:02:14 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@flushpolicy={0x38, 0x12, 0xc9b8ebb5536361cd, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@loopback, @in6=@remote, 0xa}}]}, 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)=@getpolicy={0x108, 0x15, 0x2, 0x70bd27, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x87, r3, r4}, 0x6e6bb9, 0x2}, [@algo_aead={0x8c, 0x12, {{'rfc7539esp(cbc-aes-ce,sha224-ce)\x00'}, 0x200, 0x60, "a3f5e69e83c849545068c65e8c08ba2cf68cc0d1cad9a68aea4dea38ab91bac99be493041d0aaa8671adcb31f510f7adb3f57611cf1a30e3d9564f44757ee210"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e21, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @tfcpad={0x8, 0x16, 0x5}, @extra_flags={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x40, 0x700, 0x900, 0x8, {{0x13, 0x4, 0x3, 0x8, 0x4c, 0x65, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ssrr={0x89, 0x13, 0x4, [@multicast1, @broadcast, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x14, 0x2e, 0x0, 0x0, [0x5, 0x4, 0x200, 0x5]}, @rr={0x7, 0xf, 0x9b, [@multicast2, @rand_addr=0x64010102, @local]}]}}}}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)=@getpolicy={0x108, 0x15, 0x2, 0x70bd27, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x87, r7, r8}, 0x6e6bb9, 0x2}, [@algo_aead={0x8c, 0x12, {{'rfc7539esp(cbc-aes-ce,sha224-ce)\x00'}, 0x200, 0x60, "a3f5e69e83c849545068c65e8c08ba2cf68cc0d1cad9a68aea4dea38ab91bac99be493041d0aaa8671adcb31f510f7adb3f57611cf1a30e3d9564f44757ee210"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e21, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @tfcpad={0x8, 0x16, 0x5}, @extra_flags={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r11 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)=@getpolicy={0x108, 0x15, 0x2, 0x70bd27, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x87, r10, r11}, 0x6e6bb9, 0x2}, [@algo_aead={0x8c, 0x12, {{'rfc7539esp(cbc-aes-ce,sha224-ce)\x00'}, 0x200, 0x60, "a3f5e69e83c849545068c65e8c08ba2cf68cc0d1cad9a68aea4dea38ab91bac99be493041d0aaa8671adcb31f510f7adb3f57611cf1a30e3d9564f44757ee210"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e21, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @tfcpad={0x8, 0x16, 0x5}, @extra_flags={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@flushsa={0x2cc, 0x1c, 0x200, 0x70bd29, 0x25dfdbfe, {0x32}, [@address_filter={0x28, 0x1a, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x2, 0x1f, 0x2}}, @migrate={0x50, 0x11, [{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010100, @in=@empty, 0x6c, 0x4, 0x0, 0x3505, 0x3caa5bbe396df5cd, 0x2}]}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in=@local, 0x4e20, 0x4, 0x4e21, 0x6, 0xfa64d4e024d94d17, 0x80, 0x80, 0x67, 0x0, r4}, {@in6=@mcast1, 0x4d2, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x800000000, 0x0, 0x4, 0x0, 0xffffffff80000001, 0x3, 0x9, 0x3ff}, {0xb, 0x3, 0xffffffffffffffff, 0x8}, {0x6, 0xe2a, 0x1}, 0x70bd2c, 0x3503, 0x2, 0x4, 0x1, 0x10}}, @replay_thresh={0x8, 0xb, 0xb298}, @sa={0xe4, 0x6, {{@in6=@private0, @in6=@mcast1, 0x4e20, 0xffff, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x3b, r5, r8}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x33}, @in=@rand_addr=0x64010101, {0x7, 0x1, 0x2, 0x7, 0xfb, 0xd2, 0x9, 0x6}, {0x80000001, 0x8, 0x0, 0x9f}, {0xfffff000, 0xc6, 0x6}, 0x70bd26, 0x3507, 0xa, 0x1, 0x1, 0xa8}}, @extra_flags={0x8, 0x18, 0x7}, @migrate={0x50, 0x11, [{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@broadcast, @in6=@private1, 0x6c, 0x7, 0x0, 0x3504, 0x1e, 0xa}]}, @XFRMA_SET_MARK_MASK={0x8}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x24040040}, 0x4000001) 16:02:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 39) 16:02:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:02:14 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x1) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:02:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x84303, 0x100c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x5f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r6, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x1, 0x1, 0x1}, 0x2) syz_io_uring_submit(r5, r7, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/99, 0x63}], 0x1, &(0x7f0000000380)=""/60, 0x3c}, 0x0, 0x2001, 0x0, {0x2, r4}}, 0x3) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r11}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) syz_io_uring_submit(r9, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000140)=@phonet={0x23, 0x92, 0x1, 0x3f}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x3) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 16:02:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 17) [ 2303.986064] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2303.992178] FAULT_INJECTION: forcing a failure. [ 2303.992178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2303.995075] CPU: 1 PID: 16751 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2303.996476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2303.998179] Call Trace: [ 2303.998724] dump_stack+0x107/0x167 [ 2303.999472] should_fail.cold+0x5/0xa [ 2304.000250] _copy_from_user+0x2e/0x1b0 [ 2304.001072] __copy_msghdr_from_user+0x91/0x4b0 [ 2304.002027] ? __ia32_sys_shutdown+0x80/0x80 [ 2304.002923] ? __lock_acquire+0x1657/0x5b00 [ 2304.003825] ___sys_recvmsg+0xd5/0x200 [ 2304.004635] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2304.005637] ? __lockdep_reset_lock+0x180/0x180 [ 2304.006579] ? lock_downgrade+0x6d0/0x6d0 [ 2304.007422] ? lock_acquire+0x197/0x470 [ 2304.008221] ? find_held_lock+0x2c/0x110 [ 2304.009049] ? __might_fault+0xd3/0x180 [ 2304.009877] ? lock_downgrade+0x6d0/0x6d0 [ 2304.010739] do_recvmmsg+0x24c/0x6d0 [ 2304.011500] ? ___sys_recvmsg+0x200/0x200 [ 2304.012336] ? lock_downgrade+0x6d0/0x6d0 [ 2304.013178] ? ksys_write+0x12d/0x260 [ 2304.013977] ? wait_for_completion_io+0x270/0x270 [ 2304.014960] ? rcu_read_lock_any_held+0x75/0xa0 [ 2304.015903] ? vfs_write+0x354/0xa70 [ 2304.016660] __x64_sys_recvmmsg+0x20f/0x260 [ 2304.017553] ? ksys_write+0x1a9/0x260 [ 2304.018322] ? __do_sys_socketcall+0x600/0x600 [ 2304.019264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2304.020326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2304.021390] do_syscall_64+0x33/0x40 [ 2304.022177] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2304.023218] RIP: 0033:0x7f3f9ef17b19 [ 2304.023987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2304.027734] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2304.029274] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2304.030747] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2304.032207] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2304.033681] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2304.035139] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 16:02:14 executing program 6: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000340)='v', 0x1) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x10000, 0x0) copy_file_range(r1, &(0x7f00000001c0), 0xffffffffffffffff, &(0x7f0000000200), 0xdd, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = accept4$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000300)=0x10, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8000}) creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000240)=""/73, &(0x7f0000000180)=0x49) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) copy_file_range(r2, 0x0, r0, 0x0, 0x100000000, 0x0) [ 2304.081987] FAULT_INJECTION: forcing a failure. [ 2304.081987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2304.084822] CPU: 0 PID: 16752 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2304.086216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2304.087859] Call Trace: [ 2304.088396] dump_stack+0x107/0x167 [ 2304.089135] should_fail.cold+0x5/0xa [ 2304.089950] _copy_from_user+0x2e/0x1b0 [ 2304.090756] __copy_msghdr_from_user+0x91/0x4b0 [ 2304.091704] ? __ia32_sys_shutdown+0x80/0x80 [ 2304.092587] ? __lock_acquire+0x1657/0x5b00 [ 2304.093479] ___sys_recvmsg+0xd5/0x200 [ 2304.094285] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2304.095269] ? __lockdep_reset_lock+0x180/0x180 [ 2304.096226] ? _raw_spin_unlock_irq+0x27/0x30 [ 2304.097134] ? lock_acquire+0x197/0x470 [ 2304.097948] ? find_held_lock+0x2c/0x110 [ 2304.098774] ? __might_fault+0xd3/0x180 [ 2304.099574] ? lock_downgrade+0x6d0/0x6d0 [ 2304.100404] ? io_schedule_timeout+0x140/0x140 [ 2304.101335] do_recvmmsg+0x24c/0x6d0 [ 2304.102132] ? ___sys_recvmsg+0x200/0x200 [ 2304.102956] ? lock_downgrade+0x6d0/0x6d0 [ 2304.103789] ? ksys_write+0x12d/0x260 [ 2304.104564] ? wait_for_completion_io+0x270/0x270 [ 2304.105546] ? rcu_read_lock_any_held+0x75/0xa0 [ 2304.106466] ? vfs_write+0x354/0xa70 [ 2304.107211] __x64_sys_recvmmsg+0x20f/0x260 [ 2304.108065] ? ksys_write+0x1a9/0x260 [ 2304.108821] ? __do_sys_socketcall+0x600/0x600 [ 2304.109741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2304.110788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2304.111821] do_syscall_64+0x33/0x40 [ 2304.112593] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2304.113623] RIP: 0033:0x7f08503ffb19 [ 2304.114372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2304.118064] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2304.119584] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2304.121002] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2304.122426] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2304.123838] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2304.125250] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 16:02:14 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:02:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 18) 16:02:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}, {&(0x7f0000000340)="f377b583a2b98bb0f622858657790e4f599ebf3ea5270d5638f4136557a6eb46cb832d4e05e25694cad3", 0x2a, 0x2}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:02:14 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:02:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2304.297117] FAULT_INJECTION: forcing a failure. [ 2304.297117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2304.299823] CPU: 1 PID: 16880 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2304.301235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2304.302961] Call Trace: [ 2304.303506] dump_stack+0x107/0x167 [ 2304.304253] should_fail.cold+0x5/0xa 16:02:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_none}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400300001400010000000200040000000a00000008000000", @ANYBLOB="1d0001"], 0x340}}, 0x0) [ 2304.305037] _copy_from_user+0x2e/0x1b0 [ 2304.306022] __copy_msghdr_from_user+0x91/0x4b0 [ 2304.306977] ? __ia32_sys_shutdown+0x80/0x80 [ 2304.307871] ? __lock_acquire+0x1657/0x5b00 [ 2304.308781] ___sys_recvmsg+0xd5/0x200 [ 2304.309597] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2304.310601] ? __lockdep_reset_lock+0x180/0x180 [ 2304.311553] ? lock_downgrade+0x6d0/0x6d0 [ 2304.312401] ? lock_acquire+0x197/0x470 [ 2304.313220] ? find_held_lock+0x2c/0x110 [ 2304.314065] ? __might_fault+0xd3/0x180 [ 2304.314889] ? lock_downgrade+0x6d0/0x6d0 [ 2304.315738] do_recvmmsg+0x24c/0x6d0 [ 2304.316504] ? ___sys_recvmsg+0x200/0x200 [ 2304.317327] ? lock_downgrade+0x6d0/0x6d0 [ 2304.318196] ? ksys_write+0x12d/0x260 [ 2304.318988] ? wait_for_completion_io+0x270/0x270 [ 2304.319965] ? rcu_read_lock_any_held+0x75/0xa0 [ 2304.320906] ? vfs_write+0x354/0xa70 [ 2304.321672] __x64_sys_recvmmsg+0x20f/0x260 [ 2304.322540] ? ksys_write+0x1a9/0x260 [ 2304.323320] ? __do_sys_socketcall+0x600/0x600 [ 2304.324265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2304.325338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2304.326415] do_syscall_64+0x33/0x40 [ 2304.327283] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2304.328313] RIP: 0033:0x7f3f9ef17b19 [ 2304.329070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2304.332785] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2304.334331] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2304.335767] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2304.337203] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2304.338664] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2304.340123] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2304.376797] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2304.480201] 9pnet: Insufficient options for proto=fd [ 2304.866990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2304.868259] print_req_error: 6 callbacks suppressed [ 2304.868277] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2304.874778] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2304.876966] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2304.878952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2304.880344] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2304.882565] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2304.884775] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2304.886525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2304.889728] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2304.892148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2304.893330] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2304.895724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2304.896886] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2304.899255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2304.900392] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2304.902984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2304.904152] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2304.906382] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2304.908590] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2304.910203] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2304.911828] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2304.913425] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2304.915019] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2304.916927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2304.918156] Buffer I/O error on dev loop7, logical block 2096903, async page read 16:02:27 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:02:27 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x1) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:02:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:02:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x0, 0x0, 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:02:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 40) 16:02:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 19) 16:02:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb50aff352f3e9c2e6bf0c95d5cc2cb586383b504feb79ac12f1e2734ed78", 0x28, 0x10, 0x1}, 0x0) close(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x8, &(0x7f00000009c0)=[{&(0x7f0000000380)="bd2f1e81e87b30ed5743f0eac73edcfc3162788094ebdb74b4c8c71d4cb004e02a7ef40b31dc546667b27e2ee7608d80b24f1ef115b2952517c029a711c010a40e2b9cebd75f31cacda4ec761548a0e6d4d383c9aac220824f71c10e8284e3", 0x5f, 0x400}, {&(0x7f0000000400)="3e823b6e3b4af16113dadb0c4c89a119dbb84d72e3eded5865deb0c685b38b0df8a707f92350b28f23789c2c668f16322d72f3d1c9e6eda7204af0122e76082696c284990ef2616bb66ea81c1a0768856f4d3d9f848221ae24fe7e5979229484d2f135540688f02929f7888bfebcd5036af3b98447ae4ed7189a2e1c7b47", 0x7e, 0x48000}, {&(0x7f0000000480)="cecf226711a8d8b62c9d139b0773f54c546c21a3ca47d85d57a0bee84b5f364b82b62c9f155a7e15fb4bf49f8b7d4c6963daaa22a5e6f566fa333fddb9ace96941e29eaa3309238e05d7de831c19f356b8bf3c20594caa61d447d1691e142ed1f7904f46898178bd9089199c1ceb4bf357f35194c4edf15431de941fe64fa1f3c4b21aab929a52f87038fac3f6214c7ef3b9389230f50cd62b6e3df732bd5f188f52c56154", 0xa5, 0x3ff}, {&(0x7f0000000540)="09cb6af8dc3af06d439ae0905dec25b3090c03e8722e5bd3c87417d0ca30d12caa63f9e54d7f74f8f10ae8c2bb30eabee80dcd0a0136a8ac0ef4cc48da3a83857b355686440f61018eb3c501d716c1a35f28be93315a033f9a298fa7272f2a01a910f382a1e80dda65120434c1ff2184c4f864baea9e7fdedd1fe14d034b6eb2bc9ede4cb4173715df495ecf775f3d778f445ff4b3f7782b6d95736f4b99638af24ea1aab47901dbe959a36c08943a4ecbf491b020e370e1455548be8efc2a9b488e8f27afd02e05b16514d47903645bc74824b96bd229afc86509f9a6b26b9754821d43a725dd6eeeb85f22b729ab56afcc3142d72aa7e28a32eeeb98e5", 0xfe, 0x5}, {&(0x7f0000000640)="b039b438a3a3099d12ecf19fefa03e7ca5e5b38ec5ea52526c6fa99655fd981d781847de46b3990c386c1b1d0c77d3c15acbfd9a0be6a10f2e13d8ac4173acbbc8bc5c381cec7450d45dd3380b58ce237175f018c1e037f5a8e0a8900749088343887947c0bf512cc03d1c6314c6612abd021542eb8251726083a4a6721d62384318a17262f1d2835851f7a2e6c8d6d53f16f3ebe3b35289fba6ecc6675df922cf72bff000f17ac01a3e7d2fc01dc311c522da9215f6b7080f07309b1f60b354eb2a493f9cf506a7d95b60e6cb45bbc6c42aad1badb109730481b1c42a23cfdb11b81f16c39949d7605e54009665bb", 0xef, 0x7fffffff}, {&(0x7f0000000740)="d3429ead688c6d63307751445f7ac054b7fa37c4c59576017931b171c82cbca5bafd37e4f6e3f2d34092d607bfa47e7139bc119c5a081744af126a3f4f7fad5c025ab89a10c5af65f24fd8d4c67a249841eb73f13b94380d10ce96329dcd874bf8d3669fa303350914deb88bf8523e231a5be9b594f0bb37df1750ee5e918982fdece8805cf913e19fb6f4202bad3e815d1f6cb2737d1f99e1f026953fabcc0d06decc2cf8", 0xa5, 0x7}, {&(0x7f0000000800)="b0e58a684b9f061484fa8e53260e0de87fa818aaea1ce88e2342beac1fa087ed974ab8b62994cb28ffd94b52d3c9086820eaf951168c17fec518f9d3feda0af6797c2868b17c11f5241fd6c6533d26b58a32e5e23bea50a3a1401934efb6185aa06099d2e0210d933f18ac51d412bca78d1d08bc7e5242c553ec4447307ee317869ca6c00a16c58009b04ec4fcf05b3c11b94a30dcd01093ba9db03d211e01239f7137d70859", 0xa6, 0xfffffffffffffff7}, {&(0x7f00000008c0)="da0bc3b21309a134b97718f684e847c4073ad5a66a9a37ea73563fe280daeec76d7d754aa4ab93c3f13fb22c0d344f27f697a1f79dc2ee1909f5f82fbb6dad9d510006ccbd6c9536cbae252038e7553d294382b3fba16bda17d785c7907e5a28596687e7da3248f32f0d5e8c7ed2dc9f56cea8d0d4d9e8077ffc54846d7cae34e2726fe8bd193ace3a3e4661128f6a753c6b5af36d51a20d2ffec69bed39e9f1c5eda9cc05240e9d4278531d42a639132d26a604f2ff21b91a10c06552df56ca492e515768a8d910bc2df4f26c987c1d51599c93", 0xd4, 0x7ff}], 0x1000000, &(0x7f0000000a80)={[{@dots}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '))]/$\x8c'}}, {@obj_role}]}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xff}, 0x0, 0x7, 0xffff7ffe, 0x7, 0xb5f, 0x400000, 0x1, 0x0, 0x396}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x11, &(0x7f00000010c0)={@empty}, 0x14) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r6, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0xfa, 0x2, 0x0, 0x96, 0x0, 0x90, 0x40, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x82, 0xffffffff, 0x7, 0x7, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, r6, 0x7, r0, 0x0) finit_module(r5, &(0x7f0000000040)='\'-.:\x00', 0x1) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = getpid() pidfd_open(r7, 0x0) recvmsg$unix(r6, &(0x7f0000000d00)={&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/236, 0xec}, {&(0x7f0000000080)=""/16, 0x10}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x100) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2317.699496] FAULT_INJECTION: forcing a failure. [ 2317.699496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2317.701659] CPU: 0 PID: 16900 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2317.702501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2317.703495] Call Trace: [ 2317.703822] dump_stack+0x107/0x167 [ 2317.704266] should_fail.cold+0x5/0xa [ 2317.704731] _copy_from_user+0x2e/0x1b0 [ 2317.705219] __copy_msghdr_from_user+0x91/0x4b0 [ 2317.705793] ? __ia32_sys_shutdown+0x80/0x80 [ 2317.706334] ? __lock_acquire+0x1657/0x5b00 [ 2317.706860] ___sys_recvmsg+0xd5/0x200 [ 2317.707323] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2317.707894] ? __lockdep_reset_lock+0x180/0x180 [ 2317.708454] ? lock_acquire+0x197/0x470 [ 2317.708924] ? find_held_lock+0x2c/0x110 [ 2317.709430] ? __might_fault+0xd3/0x180 [ 2317.709948] ? lock_downgrade+0x6d0/0x6d0 [ 2317.710467] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2317.711162] do_recvmmsg+0x24c/0x6d0 [ 2317.711632] ? ___sys_recvmsg+0x200/0x200 [ 2317.712169] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2317.712825] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2317.713374] ? trace_hardirqs_on+0x5b/0x180 [ 2317.713909] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2317.714464] ? finish_task_switch+0x126/0x5d0 [ 2317.715020] ? finish_task_switch+0xef/0x5d0 [ 2317.715582] __x64_sys_recvmmsg+0x20f/0x260 [ 2317.716113] ? ksys_write+0x1a9/0x260 [ 2317.716600] ? __do_sys_socketcall+0x600/0x600 [ 2317.717172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2317.717847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.718494] do_syscall_64+0x33/0x40 [ 2317.718953] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2317.719590] RIP: 0033:0x7f3f9ef17b19 [ 2317.720072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.722395] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2317.723347] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2317.723857] FAULT_INJECTION: forcing a failure. [ 2317.723857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2317.724236] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2317.724244] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.724251] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 16:02:28 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x200, 0xffff, 0x4}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000380)="eb3c906d6b66732e66617400020801000470008400f8016bde5eb1509910f9e123e8d17fc5dc3f2d5ec774ac94a0a6202e62a3786b3f3ba30126f6ebc1c76a6361edfddfa1183d280ab4b8e24e3daf0524b0ef964a83a196bcf8867875c7652e80c4d58bdf45e872b2770b2eb275a860651822bc4e9c53c2554320fd8d386a26d788dfda62a478e19f82d69e7cd12b70d66a69224b915a068c8d9453019280666c40da200701676abc5a1632e47a6f24bd85917ae0e2e056d1973a628cbc94e71a1862301f576bb2000e2c5d669fd19cf1ef123f38fc66c71f2949", 0xdb, 0xfffffffffffffffc}, {0x0, 0x0, 0x10010009fc}], 0x3841018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x4, 0x0, 0x0, 0x0, 0xc0000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x2d0d) r1 = syz_open_dev$mouse(&(0x7f0000000500), 0x5, 0x4082) pipe(&(0x7f0000000540)={0xffffffffffffffff}) dup3(r2, r1, 0x0) fallocate(r1, 0x0, 0x1f, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20602, 0x11f) openat$incfs(r5, &(0x7f0000000240)='.pending_reads\x00', 0xd0542, 0x88) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x40, 0x2, 0x1, 0x0, 0x2, 0x10, 0x11, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x3}, 0x19008, 0xfffffffffffffffd, 0x6, 0xe, 0x9, 0xfffffff9, 0x5405, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x301401, 0x0) getdents64(r6, &(0x7f0000000480)=""/119, 0x77) ioctl$int_out(r5, 0x5462, &(0x7f0000000580)) sendfile(r3, r4, 0x0, 0x100000001) [ 2317.724258] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2317.733810] CPU: 1 PID: 16914 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2317.735215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2317.736891] Call Trace: [ 2317.737435] dump_stack+0x107/0x167 [ 2317.738199] should_fail.cold+0x5/0xa [ 2317.738998] _copy_from_user+0x2e/0x1b0 [ 2317.739828] __copy_msghdr_from_user+0x91/0x4b0 [ 2317.740791] ? __ia32_sys_shutdown+0x80/0x80 [ 2317.741708] ? __lock_acquire+0x1657/0x5b00 [ 2317.742627] ___sys_recvmsg+0xd5/0x200 [ 2317.743429] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2317.744437] ? __lockdep_reset_lock+0x180/0x180 [ 2317.745406] ? lock_acquire+0x197/0x470 [ 2317.746234] ? find_held_lock+0x2c/0x110 [ 2317.747080] ? __might_fault+0xd3/0x180 [ 2317.747892] ? lock_downgrade+0x6d0/0x6d0 [ 2317.748757] ? io_schedule_timeout+0x140/0x140 [ 2317.749733] do_recvmmsg+0x24c/0x6d0 [ 2317.750516] ? ___sys_recvmsg+0x200/0x200 [ 2317.751372] ? lock_downgrade+0x6d0/0x6d0 [ 2317.752235] ? ksys_write+0x12d/0x260 [ 2317.753037] ? wait_for_completion_io+0x270/0x270 [ 2317.754040] ? rcu_read_lock_any_held+0x75/0xa0 [ 2317.754997] ? vfs_write+0x354/0xa70 [ 2317.755768] __x64_sys_recvmmsg+0x20f/0x260 [ 2317.756655] ? ksys_write+0x1a9/0x260 [ 2317.757440] ? __do_sys_socketcall+0x600/0x600 [ 2317.758404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2317.759486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.760552] do_syscall_64+0x33/0x40 [ 2317.761321] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2317.762373] RIP: 0033:0x7f08503ffb19 [ 2317.763144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.766928] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2317.768490] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2317.769972] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2317.771441] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.772905] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2317.774366] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 16:02:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x0, 0x0, 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:02:28 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 20) [ 2317.826821] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 16:02:28 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:02:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 41) [ 2317.915071] FAULT_INJECTION: forcing a failure. [ 2317.915071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2317.916838] CPU: 0 PID: 17036 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2317.917585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2317.918513] Call Trace: [ 2317.918810] dump_stack+0x107/0x167 [ 2317.919217] should_fail.cold+0x5/0xa [ 2317.919631] _copy_from_user+0x2e/0x1b0 [ 2317.920073] __copy_msghdr_from_user+0x91/0x4b0 [ 2317.920578] ? __ia32_sys_shutdown+0x80/0x80 [ 2317.921057] ? __lock_acquire+0x1657/0x5b00 [ 2317.921534] ___sys_recvmsg+0xd5/0x200 [ 2317.921966] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2317.922501] ? __lockdep_reset_lock+0x180/0x180 [ 2317.923003] ? lock_downgrade+0x6d0/0x6d0 [ 2317.923160] FAULT_INJECTION: forcing a failure. [ 2317.923160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2317.923450] ? lock_acquire+0x197/0x470 [ 2317.923460] ? find_held_lock+0x2c/0x110 [ 2317.923476] ? __might_fault+0xd3/0x180 [ 2317.923487] ? lock_downgrade+0x6d0/0x6d0 [ 2317.923510] do_recvmmsg+0x24c/0x6d0 [ 2317.923529] ? ___sys_recvmsg+0x200/0x200 [ 2317.928482] ? lock_downgrade+0x6d0/0x6d0 [ 2317.928954] ? ksys_write+0x12d/0x260 [ 2317.929392] ? wait_for_completion_io+0x270/0x270 [ 2317.929936] ? rcu_read_lock_any_held+0x75/0xa0 [ 2317.930453] ? vfs_write+0x354/0xa70 [ 2317.930861] __x64_sys_recvmmsg+0x20f/0x260 [ 2317.931345] ? ksys_write+0x1a9/0x260 [ 2317.931774] ? __do_sys_socketcall+0x600/0x600 [ 2317.932279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2317.932867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.933433] do_syscall_64+0x33/0x40 [ 2317.933863] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2317.934435] RIP: 0033:0x7f08503ffb19 [ 2317.934852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.936897] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2317.937757] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2317.938548] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2317.939341] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.940131] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2317.940939] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2317.941770] CPU: 1 PID: 16976 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2317.943183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2317.944861] Call Trace: 16:02:28 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2317.945402] dump_stack+0x107/0x167 [ 2317.946307] should_fail.cold+0x5/0xa [ 2317.947089] _copy_from_user+0x2e/0x1b0 [ 2317.947909] __copy_msghdr_from_user+0x91/0x4b0 [ 2317.948851] ? __ia32_sys_shutdown+0x80/0x80 [ 2317.949754] ? __lock_acquire+0x1657/0x5b00 [ 2317.950663] ___sys_recvmsg+0xd5/0x200 [ 2317.951454] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2317.952446] ? __lockdep_reset_lock+0x180/0x180 [ 2317.953386] ? lock_downgrade+0x6d0/0x6d0 [ 2317.954249] ? lock_acquire+0x197/0x470 [ 2317.955053] ? find_held_lock+0x2c/0x110 [ 2317.955879] ? __might_fault+0xd3/0x180 [ 2317.956690] ? lock_downgrade+0x6d0/0x6d0 [ 2317.957549] do_recvmmsg+0x24c/0x6d0 [ 2317.958324] ? ___sys_recvmsg+0x200/0x200 [ 2317.959157] ? lock_downgrade+0x6d0/0x6d0 [ 2317.960009] ? ksys_write+0x12d/0x260 [ 2317.960817] ? wait_for_completion_io+0x270/0x270 16:02:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 42) [ 2317.961816] ? rcu_read_lock_any_held+0x75/0xa0 [ 2317.962813] ? vfs_write+0x354/0xa70 [ 2317.963590] __x64_sys_recvmmsg+0x20f/0x260 [ 2317.964478] ? ksys_write+0x1a9/0x260 [ 2317.965251] ? __do_sys_socketcall+0x600/0x600 [ 2317.966198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2317.967261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2317.968315] do_syscall_64+0x33/0x40 [ 2317.969076] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2317.970124] RIP: 0033:0x7f3f9ef17b19 [ 2317.970882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.974614] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2317.976245] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2317.977701] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2317.979151] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.980596] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2317.982275] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2318.023590] FAULT_INJECTION: forcing a failure. [ 2318.023590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2318.025335] CPU: 0 PID: 17038 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2318.026101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.027009] Call Trace: [ 2318.027297] dump_stack+0x107/0x167 [ 2318.027690] should_fail.cold+0x5/0xa [ 2318.028102] _copy_from_user+0x2e/0x1b0 [ 2318.028530] __copy_msghdr_from_user+0x91/0x4b0 [ 2318.029033] ? __ia32_sys_shutdown+0x80/0x80 [ 2318.029502] ? __lock_acquire+0x1657/0x5b00 [ 2318.029986] ___sys_recvmsg+0xd5/0x200 [ 2318.030402] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2318.030922] ? __lockdep_reset_lock+0x180/0x180 [ 2318.031417] ? lock_acquire+0x197/0x470 [ 2318.031839] ? find_held_lock+0x2c/0x110 [ 2318.032297] ? __might_fault+0xd3/0x180 [ 2318.032718] ? lock_downgrade+0x6d0/0x6d0 [ 2318.033197] do_recvmmsg+0x24c/0x6d0 [ 2318.033619] ? ___sys_recvmsg+0x200/0x200 [ 2318.034082] ? lock_downgrade+0x6d0/0x6d0 [ 2318.034546] ? ksys_write+0x12d/0x260 [ 2318.034976] ? wait_for_completion_io+0x270/0x270 [ 2318.035513] ? rcu_read_lock_any_held+0x75/0xa0 [ 2318.036025] ? vfs_write+0x354/0xa70 [ 2318.036443] __x64_sys_recvmmsg+0x20f/0x260 [ 2318.036920] ? ksys_write+0x1a9/0x260 [ 2318.037349] ? __do_sys_socketcall+0x600/0x600 [ 2318.037868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.038452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2318.039035] do_syscall_64+0x33/0x40 [ 2318.039448] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2318.040022] RIP: 0033:0x7f08503ffb19 [ 2318.040435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.042484] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2318.043326] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2318.044099] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2318.044895] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.045685] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2318.046479] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 16:02:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x0, 0x0, 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:02:28 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x800000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:02:28 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) [ 2318.093942] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 16:02:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 43) 16:02:28 executing program 0: syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) syz_io_uring_setup(0x6c58, &(0x7f0000000640)={0x0, 0xcd74, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000140)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0xba, 0x0, 0x2001d, "33a3540e1fad7a1a38a781aebb65fbf480910b7b16270074306f39286bd380257a8e9875d2333450c314b2c672e17168b546fcadcebfaf92db49de05b64e265cf9dd1c09473d537f11727fdeb7e078090e923da539bc073f4440628486724395e5db6e2fdefe2504e2b1e27cd3130cf151ba3dcc95dfd471e712ab7b42847dbb564daef62b2739468abe8a8be00d05a6578e3f851d469f4b6c50d6287cfd10bb6c0c53573b5defd81a88f6b200"/186}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r2, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000000c0)=r0, 0x1) 16:02:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2318.241070] FAULT_INJECTION: forcing a failure. [ 2318.241070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2318.242597] CPU: 0 PID: 17051 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2318.243374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.244265] Call Trace: [ 2318.244564] dump_stack+0x107/0x167 [ 2318.244971] should_fail.cold+0x5/0xa [ 2318.245404] _copy_from_user+0x2e/0x1b0 [ 2318.245862] __copy_msghdr_from_user+0x91/0x4b0 [ 2318.246362] ? __ia32_sys_shutdown+0x80/0x80 [ 2318.246840] ? __lock_acquire+0x1657/0x5b00 [ 2318.247315] ___sys_recvmsg+0xd5/0x200 [ 2318.247732] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2318.248259] ? __lockdep_reset_lock+0x180/0x180 [ 2318.248761] ? trace_hardirqs_on+0x5b/0x180 [ 2318.249231] ? lock_acquire+0x197/0x470 [ 2318.249669] ? find_held_lock+0x2c/0x110 [ 2318.250117] ? __might_fault+0xd3/0x180 [ 2318.250570] ? lock_downgrade+0x6d0/0x6d0 [ 2318.251034] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2318.251645] do_recvmmsg+0x24c/0x6d0 [ 2318.252062] ? ___sys_recvmsg+0x200/0x200 [ 2318.252534] ? lock_downgrade+0x6d0/0x6d0 [ 2318.253008] ? ksys_write+0x12d/0x260 [ 2318.253445] ? wait_for_completion_io+0x270/0x270 [ 2318.254010] ? rcu_read_lock_any_held+0x75/0xa0 [ 2318.254530] ? vfs_write+0x354/0xa70 [ 2318.254956] __x64_sys_recvmmsg+0x20f/0x260 [ 2318.255438] ? ksys_write+0x1a9/0x260 [ 2318.255868] ? __do_sys_socketcall+0x600/0x600 [ 2318.256394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.256975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2318.257562] do_syscall_64+0x33/0x40 [ 2318.257980] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2318.258563] RIP: 0033:0x7f08503ffb19 [ 2318.258961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.261022] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2318.261898] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2318.262670] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2318.263473] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.264281] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2318.265057] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2318.866742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.867375] print_req_error: 6 callbacks suppressed [ 2318.867386] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2318.869126] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2318.870280] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2318.875326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.875918] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2318.877304] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2318.878465] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2318.879761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.880387] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2318.881553] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2318.882732] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2318.884251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.884862] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2318.886081] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2318.887242] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2318.888585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.889190] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2318.890526] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2318.891703] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2318.892902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.893915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.894569] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2318.895431] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2318.896642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.900239] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2318.948229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.948893] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2318.948899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.948968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.950578] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2318.953775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.954713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.955640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.956577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2318.957507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:02:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 21) 16:02:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 44) 16:02:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x124d63) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) syz_mount_image$nfs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[]) 16:02:45 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:02:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x109b02, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="e8", 0x1}], 0x1) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000003, 0x12, r2, 0x2000000) 16:02:45 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@loose}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x400}}, {@cache_none}, {@fscache}, {@msize={'msize', 0x3d, 0xffff}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure}]}}) 16:02:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:02:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) [ 2335.041172] FAULT_INJECTION: forcing a failure. [ 2335.041172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2335.044148] CPU: 1 PID: 17166 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2335.045535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2335.047243] Call Trace: [ 2335.047774] dump_stack+0x107/0x167 [ 2335.048826] should_fail.cold+0x5/0xa [ 2335.049596] _copy_from_user+0x2e/0x1b0 [ 2335.050404] __copy_msghdr_from_user+0x91/0x4b0 [ 2335.051341] ? __ia32_sys_shutdown+0x80/0x80 [ 2335.052217] ? __lock_acquire+0x1657/0x5b00 [ 2335.053089] ___sys_recvmsg+0xd5/0x200 [ 2335.053785] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2335.053884] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2335.056277] ? __lockdep_reset_lock+0x180/0x180 [ 2335.057204] ? lock_downgrade+0x6d0/0x6d0 [ 2335.058079] ? lock_acquire+0x197/0x470 [ 2335.058874] ? find_held_lock+0x2c/0x110 [ 2335.059714] ? __might_fault+0xd3/0x180 [ 2335.060505] ? lock_downgrade+0x6d0/0x6d0 [ 2335.061375] do_recvmmsg+0x24c/0x6d0 [ 2335.062140] ? ___sys_recvmsg+0x200/0x200 [ 2335.062997] ? lock_downgrade+0x6d0/0x6d0 [ 2335.063824] ? ksys_write+0x12d/0x260 [ 2335.064621] ? wait_for_completion_io+0x270/0x270 [ 2335.065587] ? rcu_read_lock_any_held+0x75/0xa0 [ 2335.066551] ? vfs_write+0x354/0xa70 [ 2335.067299] __x64_sys_recvmmsg+0x20f/0x260 [ 2335.068178] ? ksys_write+0x1a9/0x260 [ 2335.068938] ? __do_sys_socketcall+0x600/0x600 [ 2335.069882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2335.070913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2335.071974] do_syscall_64+0x33/0x40 [ 2335.072729] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2335.073772] RIP: 0033:0x7f3f9ef17b19 [ 2335.074568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2335.078320] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2335.079899] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2335.081351] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2335.082812] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2335.084259] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2335.085712] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2335.103981] FAULT_INJECTION: forcing a failure. [ 2335.103981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2335.106111] CPU: 0 PID: 17169 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2335.107103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2335.108281] Call Trace: [ 2335.108664] dump_stack+0x107/0x167 [ 2335.109185] should_fail.cold+0x5/0xa [ 2335.109730] _copy_from_user+0x2e/0x1b0 [ 2335.110300] __copy_msghdr_from_user+0x91/0x4b0 [ 2335.110959] ? __ia32_sys_shutdown+0x80/0x80 [ 2335.111584] ? __lock_acquire+0x1657/0x5b00 [ 2335.112208] ___sys_recvmsg+0xd5/0x200 [ 2335.112756] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2335.113446] ? __lockdep_reset_lock+0x180/0x180 [ 2335.114110] ? trace_hardirqs_on+0x5b/0x180 [ 2335.114716] ? lock_acquire+0x197/0x470 [ 2335.115272] ? find_held_lock+0x2c/0x110 [ 2335.115839] ? __might_fault+0xd3/0x180 [ 2335.116388] ? lock_downgrade+0x6d0/0x6d0 [ 2335.116961] ? io_schedule_timeout+0x140/0x140 [ 2335.117601] do_recvmmsg+0x24c/0x6d0 [ 2335.118127] ? ___sys_recvmsg+0x200/0x200 [ 2335.118699] ? lock_downgrade+0x6d0/0x6d0 [ 2335.119282] ? ksys_write+0x12d/0x260 [ 2335.119817] ? wait_for_completion_io+0x270/0x270 [ 2335.120490] ? rcu_read_lock_any_held+0x75/0xa0 [ 2335.121126] ? vfs_write+0x354/0xa70 [ 2335.121645] __x64_sys_recvmmsg+0x20f/0x260 [ 2335.122249] ? ksys_write+0x1a9/0x260 [ 2335.122780] ? __do_sys_socketcall+0x600/0x600 [ 2335.123408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2335.124131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2335.124852] do_syscall_64+0x33/0x40 [ 2335.125370] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2335.126096] RIP: 0033:0x7f08503ffb19 [ 2335.126613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2335.129136] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2335.130192] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2335.131172] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2335.132152] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2335.133133] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2335.134128] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2335.155904] FAT-fs (loop6): Directory bread(block 6) failed [ 2335.204502] FAT-fs (loop6): Directory bread(block 6) failed [ 2335.532419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2335.533069] print_req_error: 22 callbacks suppressed [ 2335.533080] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2335.534912] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2335.536062] buffer_io_error: 6 callbacks suppressed [ 2335.536069] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2335.537992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2335.538938] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2335.540089] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2335.541230] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2335.542570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2335.543156] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2335.544310] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2335.545447] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2335.546692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2335.547349] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2335.548495] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2335.549634] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2335.550927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2335.551550] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2335.552694] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2335.553829] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2335.555087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2335.556088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2335.557037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2335.557667] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2335.558517] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2335.559342] Buffer I/O error on dev loop7, logical block 2096903, async page read 16:03:00 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)=@getpolicy={0x108, 0x15, 0x2, 0x70bd27, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x87, r3, r4}, 0x6e6bb9, 0x2}, [@algo_aead={0x8c, 0x12, {{'rfc7539esp(cbc-aes-ce,sha224-ce)\x00'}, 0x200, 0x60, "a3f5e69e83c849545068c65e8c08ba2cf68cc0d1cad9a68aea4dea38ab91bac99be493041d0aaa8671adcb31f510f7adb3f57611cf1a30e3d9564f44757ee210"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e21, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @tfcpad={0x8, 0x16, 0x5}, @extra_flags={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb4, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x5c}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x44080) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1e}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x548b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r6, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 16:03:00 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) 16:03:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 45) 16:03:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 22) 16:03:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 16:03:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}, {&(0x7f0000000300)="355d511d1d103743d405b1afb9f4cc550ea21bf5", 0x14, 0x5bab}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:03:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:03:00 executing program 0: ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000000580)={0x1, 0x3f, 0x0, 0x0, 0x9, 0x5, @msf={0x0, 0x9, 0x5a}, @lba=0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x420}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x280, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x66be}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x8b0}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7f}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x13e}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x46d3e4af}, {0x6, 0x11, 0xfffb}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xfffd}, {0x8, 0x15, 0x7c1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0xbb}}]}, 0x280}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r1, 0x201, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4084) [ 2350.188976] FAULT_INJECTION: forcing a failure. [ 2350.188976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2350.190767] CPU: 0 PID: 17305 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2350.191647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2350.192695] Call Trace: [ 2350.193039] dump_stack+0x107/0x167 [ 2350.193513] should_fail.cold+0x5/0xa [ 2350.194008] _copy_from_user+0x2e/0x1b0 [ 2350.194538] __copy_msghdr_from_user+0x91/0x4b0 [ 2350.195131] ? __ia32_sys_shutdown+0x80/0x80 [ 2350.195695] ? __lock_acquire+0x1657/0x5b00 [ 2350.196261] ___sys_recvmsg+0xd5/0x200 [ 2350.196756] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2350.197390] ? __lockdep_reset_lock+0x180/0x180 [ 2350.197989] ? trace_hardirqs_on+0x5b/0x180 [ 2350.198557] ? lock_acquire+0x197/0x470 [ 2350.199072] ? find_held_lock+0x2c/0x110 [ 2350.199601] ? __might_fault+0xd3/0x180 [ 2350.200125] ? lock_downgrade+0x6d0/0x6d0 [ 2350.200666] ? io_schedule_timeout+0x140/0x140 [ 2350.201275] do_recvmmsg+0x24c/0x6d0 [ 2350.201757] ? ___sys_recvmsg+0x200/0x200 [ 2350.202310] ? lock_downgrade+0x6d0/0x6d0 [ 2350.202857] ? ksys_write+0x12d/0x260 [ 2350.203361] ? wait_for_completion_io+0x270/0x270 [ 2350.203717] [ 2350.203995] ? rcu_read_lock_any_held+0x75/0xa0 [ 2350.204355] ====================================================== [ 2350.204944] ? vfs_write+0x354/0xa70 [ 2350.204963] __x64_sys_recvmmsg+0x20f/0x260 [ 2350.206242] WARNING: possible circular locking dependency detected [ 2350.206722] ? ksys_write+0x1a9/0x260 [ 2350.207577] 5.10.199 #1 Not tainted [ 2350.208382] ? __do_sys_socketcall+0x600/0x600 [ 2350.209135] ------------------------------------------------------ [ 2350.209148] syz-executor.6/17296 is trying to acquire lock: [ 2350.209610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2350.210535] ffff88800eac4b78 ( [ 2350.211337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2350.212479] (work_completion)(&hdev->bg_scan_update) [ 2350.213144] do_syscall_64+0x33/0x40 [ 2350.213777] ){+.+.}-{0:0} [ 2350.214437] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2350.215460] , at: __flush_work+0xdd/0xa90 [ 2350.215925] RIP: 0033:0x7f3f9ef17b19 [ 2350.216468] [ 2350.216468] but task is already holding lock: [ 2350.216479] ffffffff85619468 [ 2350.217157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2350.217967] (rfkill_global_mutex [ 2350.218463] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2350.219657] ){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2350.220058] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2350.220073] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2350.227329] [ 2350.227329] which lock already depends on the new lock. [ 2350.227329] [ 2350.227774] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2350.229263] [ 2350.229263] the existing dependency chain (in reverse order) is: [ 2350.229958] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2350.229973] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2350.231382] [ 2350.231382] -> #4 [ 2350.233665] FAULT_INJECTION: forcing a failure. [ 2350.233665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2350.233911] ( [ 2350.236804] CPU: 0 PID: 17307 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2350.237760] rfkill_global_mutex [ 2350.238677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2350.238686] Call Trace: [ 2350.239391] ){+.+.}-{3:3} [ 2350.240800] dump_stack+0x107/0x167 [ 2350.241160] : [ 2350.242042] should_fail.cold+0x5/0xa [ 2350.242694] __mutex_lock+0x13d/0x10b0 [ 2350.243725] _copy_from_user+0x2e/0x1b0 [ 2350.244249] rfkill_register+0x36/0xa10 [ 2350.244600] __copy_msghdr_from_user+0x91/0x4b0 [ 2350.245329] hci_register_dev+0x42e/0xc00 [ 2350.245547] ? __ia32_sys_shutdown+0x80/0x80 [ 2350.246334] __vhci_create_device+0x2c8/0x5c0 [ 2350.246889] ? perf_trace_lock_acquire+0xbc/0x590 [ 2350.247699] vhci_open_timeout+0x38/0x50 [ 2350.248276] ? import_iovec+0x83/0xb0 [ 2350.249218] process_one_work+0x9a9/0x14b0 [ 2350.249236] worker_thread+0x61d/0x1310 [ 2350.249826] ___sys_recvmsg+0xd5/0x200 [ 2350.250714] kthread+0x38f/0x470 [ 2350.250733] ret_from_fork+0x22/0x30 [ 2350.251363] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2350.252327] [ 2350.252327] -> #3 [ 2350.252912] ? __lockdep_reset_lock+0x180/0x180 [ 2350.253679] ( [ 2350.254285] ? lock_release+0x4d1/0x680 [ 2350.255182] &data->open_mutex [ 2350.255677] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2350.255694] ? __might_fault+0xd3/0x180 [ 2350.256478] ){+.+.}-{3:3} [ 2350.257019] ? lock_downgrade+0x6d0/0x6d0 [ 2350.258008] : [ 2350.258464] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2350.258483] do_recvmmsg+0x24c/0x6d0 [ 2350.259420] __mutex_lock+0x13d/0x10b0 [ 2350.259645] ? ___sys_recvmsg+0x200/0x200 [ 2350.260452] vhci_send_frame+0x63/0xa0 [ 2350.260824] ? lock_downgrade+0x6d0/0x6d0 [ 2350.261917] hci_send_frame+0x1b9/0x320 [ 2350.262390] ? lock_release+0x4d1/0x680 [ 2350.262947] hci_tx_work+0x10af/0x1660 [ 2350.263435] ? fsnotify+0xf50/0xf50 [ 2350.263452] ? ksys_write+0x12d/0x260 [ 2350.263796] process_one_work+0x9a9/0x14b0 [ 2350.263815] worker_thread+0x61d/0x1310 [ 2350.264466] ? wait_for_completion_io+0x270/0x270 [ 2350.265209] kthread+0x38f/0x470 [ 2350.265729] ? vfs_write+0x354/0xa70 [ 2350.266557] ret_from_fork+0x22/0x30 [ 2350.267076] __x64_sys_recvmmsg+0x20f/0x260 [ 2350.267890] [ 2350.267890] -> #2 [ 2350.268432] ? ksys_write+0x1a9/0x260 [ 2350.269208] ( [ 2350.269770] ? __do_sys_socketcall+0x600/0x600 [ 2350.270491] (work_completion)(&hdev->tx_work) [ 2350.270979] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 2350.271915] ){+.+.}-{0:0} [ 2350.272479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2350.273434] : [ 2350.273927] do_syscall_64+0x33/0x40 [ 2350.274677] __flush_work+0x105/0xa90 [ 2350.275197] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2350.276049] hci_dev_do_close+0x131/0x1240 [ 2350.276479] RIP: 0033:0x7f08503ffb19 [ 2350.276496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2350.277242] hci_unregister_dev+0x149/0x430 [ 2350.277262] vhci_release+0x70/0xf0 [ 2350.277472] RSP: 002b:00007f084d975188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2350.278400] __fput+0x285/0x980 [ 2350.278420] task_work_run+0xe2/0x1a0 [ 2350.278968] RAX: ffffffffffffffda RBX: 00007f0850512f60 RCX: 00007f08503ffb19 [ 2350.278981] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2350.280036] do_exit+0xb6f/0x2600 [ 2350.280363] RBP: 00007f084d9751d0 R08: 0000000000000000 R09: 0000000000000000 [ 2350.280376] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2350.281403] do_group_exit+0x125/0x310 [ 2350.281609] R13: 00007fff00db55ef R14: 00007f084d975300 R15: 0000000000022000 [ 2350.303303] get_signal+0x4bc/0x22f0 [ 2350.304157] arch_do_signal_or_restart+0x2b7/0x1990 [ 2350.305263] exit_to_user_mode_prepare+0x10f/0x190 [ 2350.306359] syscall_exit_to_user_mode+0x38/0x1e0 [ 2350.307429] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2350.308553] [ 2350.308553] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2350.309819] __mutex_lock+0x13d/0x10b0 [ 2350.310732] bg_scan_update+0x82/0x500 [ 2350.311631] process_one_work+0x9a9/0x14b0 [ 2350.312597] worker_thread+0x61d/0x1310 [ 2350.313519] kthread+0x38f/0x470 [ 2350.314316] ret_from_fork+0x22/0x30 [ 2350.315171] [ 2350.315171] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2350.316886] __lock_acquire+0x29e7/0x5b00 [ 2350.317835] lock_acquire+0x197/0x470 [ 2350.318728] __flush_work+0x105/0xa90 [ 2350.319603] __cancel_work_timer+0x368/0x4c0 [ 2350.320607] hci_request_cancel_all+0x73/0x230 [ 2350.321643] hci_dev_do_close+0xd9/0x1240 [ 2350.322589] hci_rfkill_set_block+0x166/0x1a0 [ 2350.323597] rfkill_set_block+0x1fd/0x540 [ 2350.324538] rfkill_fop_write+0x253/0x4b0 [ 2350.325481] vfs_write+0x29a/0xa70 [ 2350.326318] ksys_write+0x1f6/0x260 [ 2350.327159] do_syscall_64+0x33/0x40 [ 2350.328017] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2350.329149] [ 2350.329149] other info that might help us debug this: [ 2350.329149] [ 2350.330748] Chain exists of: [ 2350.330748] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2350.330748] [ 2350.333455] Possible unsafe locking scenario: [ 2350.333455] [ 2350.334674] CPU0 CPU1 [ 2350.335606] ---- ---- [ 2350.336539] lock(rfkill_global_mutex); [ 2350.337363] lock(&data->open_mutex); [ 2350.338652] lock(rfkill_global_mutex); [ 2350.339973] lock((work_completion)(&hdev->bg_scan_update)); [ 2350.341159] [ 2350.341159] *** DEADLOCK *** [ 2350.341159] [ 2350.342361] 1 lock held by syz-executor.6/17296: [ 2350.343312] #0: ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2350.345199] [ 2350.345199] stack backtrace: [ 2350.346112] CPU: 1 PID: 17296 Comm: syz-executor.6 Not tainted 5.10.199 #1 [ 2350.347470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2350.349112] Call Trace: [ 2350.349635] dump_stack+0x107/0x167 [ 2350.350372] check_noncircular+0x263/0x2e0 [ 2350.351214] ? register_lock_class+0xbb/0x17b0 [ 2350.352128] ? print_circular_bug+0x470/0x470 [ 2350.353052] ? find_first_zero_bit+0x94/0xb0 [ 2350.353926] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 2350.354837] __lock_acquire+0x29e7/0x5b00 [ 2350.355666] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2350.356708] ? SOFTIRQ_verbose+0x10/0x10 [ 2350.357513] ? __lockdep_reset_lock+0x180/0x180 [ 2350.358439] ? mark_lock+0xf5/0x2df0 [ 2350.359187] lock_acquire+0x197/0x470 [ 2350.359941] ? __flush_work+0xdd/0xa90 [ 2350.360715] ? lock_release+0x680/0x680 [ 2350.361505] ? __flush_work+0x78c/0xa90 [ 2350.362311] ? lock_downgrade+0x6d0/0x6d0 [ 2350.363138] __flush_work+0x105/0xa90 [ 2350.363882] ? __flush_work+0xdd/0xa90 [ 2350.364651] ? lock_chain_count+0x20/0x20 [ 2350.365473] ? queue_delayed_work_on+0xe0/0xe0 [ 2350.366386] ? mark_lock+0xf5/0x2df0 [ 2350.367126] ? mark_lock+0xf5/0x2df0 [ 2350.367864] ? lock_chain_count+0x20/0x20 [ 2350.368683] ? perf_trace_lock+0xac/0x490 [ 2350.369525] ? lock_chain_count+0x20/0x20 [ 2350.370359] ? mark_held_locks+0x9e/0xe0 [ 2350.371167] __cancel_work_timer+0x368/0x4c0 [ 2350.372039] ? try_to_grab_pending+0xe0/0xe0 [ 2350.372912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2350.373942] ? cancel_delayed_work+0x24d/0x2b0 [ 2350.374862] ? trace_hardirqs_on+0x5b/0x180 [ 2350.375715] ? cancel_delayed_work+0x1b8/0x2b0 [ 2350.376636] ? cancel_delayed_work_sync+0x20/0x20 [ 2350.377628] hci_request_cancel_all+0x73/0x230 [ 2350.378553] hci_dev_do_close+0xd9/0x1240 [ 2350.379389] ? rfkill_set_block+0x18f/0x540 [ 2350.380258] ? hci_dev_open+0x350/0x350 [ 2350.381062] ? mark_held_locks+0x9e/0xe0 [ 2350.381889] hci_rfkill_set_block+0x166/0x1a0 [ 2350.382806] ? hci_power_off+0x20/0x20 [ 2350.383593] rfkill_set_block+0x1fd/0x540 [ 2350.384436] rfkill_fop_write+0x253/0x4b0 [ 2350.385272] ? rfkill_sync_work+0xa0/0xa0 [ 2350.386124] ? security_file_permission+0x24e/0x570 [ 2350.387136] ? rfkill_sync_work+0xa0/0xa0 [ 2350.387976] vfs_write+0x29a/0xa70 [ 2350.388701] ksys_write+0x1f6/0x260 [ 2350.389433] ? __ia32_sys_read+0xb0/0xb0 [ 2350.390260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2350.391315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2350.392363] do_syscall_64+0x33/0x40 [ 2350.393121] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2350.394172] RIP: 0033:0x7fcf342d8b19 [ 2350.394930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2350.398664] RSP: 002b:00007fcf3184e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2350.400188] RAX: ffffffffffffffda RBX: 00007fcf343ebf60 RCX: 00007fcf342d8b19 [ 2350.401628] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000006 [ 2350.403072] RBP: 00007fcf34332f6d R08: 0000000000000000 R09: 0000000000000000 [ 2350.404508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2350.405954] R13: 00007ffeb8e702bf R14: 00007fcf3184e300 R15: 0000000000022000 [ 2350.410644] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 16:03:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 46) 16:03:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x800, 0xe8}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "6bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a500", "7d60fa6d1c0779e6cb3d5656f3959461", {"9e6946ecbd671680e02dce79b473ee4c", "ea9e52a8c1613f41ebf64e747375bc12"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) (fail_nth: 23) 16:03:00 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) [ 2350.499841] FAULT_INJECTION: forcing a failure. [ 2350.499841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2350.502795] CPU: 1 PID: 17326 Comm: syz-executor.2 Not tainted 5.10.199 #1 [ 2350.504188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2350.505837] Call Trace: [ 2350.506376] dump_stack+0x107/0x167 [ 2350.507107] should_fail.cold+0x5/0xa [ 2350.507875] _copy_from_user+0x2e/0x1b0 [ 2350.508678] __copy_msghdr_from_user+0x91/0x4b0 [ 2350.509615] ? __ia32_sys_shutdown+0x80/0x80 [ 2350.510506] ? SOFTIRQ_verbose+0x10/0x10 [ 2350.511333] ? perf_trace_lock_acquire+0xbc/0x590 [ 2350.512307] ? import_iovec+0x83/0xb0 [ 2350.513078] ___sys_recvmsg+0xd5/0x200 [ 2350.513869] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2350.514884] ? __lockdep_reset_lock+0x180/0x180 [ 2350.515825] ? lock_downgrade+0x6d0/0x6d0 [ 2350.516673] ? lock_release+0x4d1/0x680 [ 2350.517468] ? __might_fault+0xd3/0x180 [ 2350.518280] ? lock_downgrade+0x6d0/0x6d0 [ 2350.519130] do_recvmmsg+0x24c/0x6d0 [ 2350.519891] ? ___sys_recvmsg+0x200/0x200 [ 2350.520720] ? lock_downgrade+0x6d0/0x6d0 [ 2350.521561] ? lock_release+0x4d1/0x680 [ 2350.522381] ? fsnotify+0xf50/0xf50 [ 2350.523121] ? ksys_write+0x12d/0x260 [ 2350.523912] ? wait_for_completion_io+0x270/0x270 [ 2350.524330] 9pnet: p9_fd_create_unix (17378): problem connecting socket: ./file0: -111 [ 2350.524880] ? vfs_write+0x354/0xa70 [ 2350.524903] __x64_sys_recvmmsg+0x20f/0x260 [ 2350.527414] ? ksys_write+0x1a9/0x260 [ 2350.528186] ? __do_sys_socketcall+0x600/0x600 [ 2350.529108] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 2350.530195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2350.531243] do_syscall_64+0x33/0x40 [ 2350.531998] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2350.533032] RIP: 0033:0x7f3f9ef17b19 [ 2350.533793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2350.537520] RSP: 002b:00007f3f9c48d188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2350.539055] RAX: ffffffffffffffda RBX: 00007f3f9f02af60 RCX: 00007f3f9ef17b19 [ 2350.540488] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2350.541932] RBP: 00007f3f9c48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2350.543378] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2350.544827] R13: 00007fff7d3cc8df R14: 00007f3f9c48d300 R15: 0000000000022000 [ 2350.546380] 9pnet: p9_fd_create_unix (17378): problem connecting socket: ./file0: -111 [ 2350.551344] FAULT_INJECTION: forcing a failure. [ 2350.551344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2350.553695] CPU: 1 PID: 17434 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2350.555124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2350.556791] Call Trace: [ 2350.557323] dump_stack+0x107/0x167 [ 2350.558062] should_fail.cold+0x5/0xa [ 2350.558832] _copy_from_user+0x2e/0x1b0 [ 2350.559642] __copy_msghdr_from_user+0x91/0x4b0 [ 2350.560584] ? __ia32_sys_shutdown+0x80/0x80 [ 2350.561471] ? perf_trace_lock_acquire+0xbc/0x590 [ 2350.562454] ? import_iovec+0x83/0xb0 [ 2350.563225] ___sys_recvmsg+0xd5/0x200 [ 2350.564014] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 2350.565004] ? __lockdep_reset_lock+0x180/0x180 [ 2350.565942] ? lock_downgrade+0x6d0/0x6d0 [ 2350.566793] ? lock_release+0x4d1/0x680 [ 2350.567596] ? __might_fault+0xd3/0x180 [ 2350.568397] ? lock_downgrade+0x6d0/0x6d0 [ 2350.569245] do_recvmmsg+0x24c/0x6d0 [ 2350.570003] ? ___sys_recvmsg+0x200/0x200 [ 2350.570847] ? lock_downgrade+0x6d0/0x6d0 [ 2350.571692] ? lock_release+0x4d1/0x680 [ 2350.572498] ? fsnotify+0xf50/0xf50 [ 2350.573242] ? ksys_write+0x12d/0x260 [ 2350.574025] ? wait_for_completion_io+0x270/0x270 [ 2350.575025] ? vfs_write+0x354/0xa70 [ 2350.575778] __x64_sys_recvmmsg+0x20f/0x260 [ 2350.576649] ? ksys_write+0x1a9/0x260 [ 2350.577418] ? __do_sys_socketcall+0x600/0x600 [ 2350.578354] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 2350.579431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2350.580479] do_syscall_64+0x33/0x40 [ 2350.581233] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2350.582274] RIP: 0033:0x7f08503ffb19 [ 2350.583032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2350.586757] RSP: 002b:00007f084d954188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2350.588291] RAX: ffffffffffffffda RBX: 00007f0850513020 RCX: 00007f08503ffb19 [ 2350.589734] RDX: 0000000000000300 RSI: 00000000200068c0 RDI: 0000000000000004 [ 2350.591178] RBP: 00007f084d9541d0 R08: 0000000000000000 R09: 0000000000000000 [ 2350.592621] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 2350.594074] R13: 00007fff00db55ef R14: 00007f084d954300 R15: 0000000000022000 16:03:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x1, &(0x7f0000000380)=[{&(0x7f00000002c0)="cf5c7d50c3b964807621c8a59223ba56343eca3b095b4b62b5bd4ff2cc00e1edeae3b03f", 0x24, 0x5}], 0x1002, &(0x7f0000000400)={[{@test_dummy_encryption}], [{@subj_user}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) 16:03:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x7e) r3 = getpgrp(0x0) syz_open_procfs(r3, &(0x7f00000001c0)='net/psched\x00') r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) mknodat$loop(r4, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0) fallocate(r4, 0x40, 0x0, 0x1f) r5 = gettid() setpriority(0x0, r5, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180), 0x800040, &(0x7f00000003c0)={'trans=unix,', {[{@dfltgid}, {@version_L}], [{@audit}, {@euid_lt}, {@subj_type={'subj_type', 0x3d, 'attr/fscreate\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}, {@dont_hash}, {@subj_user}, {@euid_lt={'euid<', 0xee00}}, {@euid_gt={'euid>', 0xee01}}, {@permit_directio}]}}) syz_open_procfs(r5, &(0x7f0000000000)='attr/fscreate\x00') write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x20, 0x2, 0x5, 0x4, 0x2, 0x6, 0x1389, 0x29e, 0x40, 0xff, 0xd7, 0x4, 0x38, 0x1, 0xfff, 0x20, 0x1}, [{0x2, 0x9, 0x1000, 0x5, 0x6, 0x10000, 0xfff, 0xb6f1}], "a591deb40ef87251d3611869df340f82295196218ccdb0cd831db27115e35348754fec3c08d38a4e95536bcdcd57ad99bda4003abd676fa53139c8d2237e431e0e96a926d6217071edda7edb1f9f1fb17b7bdde92427eb22788b56b26ff07a33bbbd7bdf18a05c8a8cdf09aca969f638aa4519f059cfe8de3ff6ec8fd32f4136230252b5dcbb6a2d49771a3a6fcdeb1a8d807229391f2acb1f27e6e9830c5c0f8f8ad3dc1acc8a273d3c11978098bdfeb2796e260313badc4dc2b4a781"}, 0x135) sendfile(r2, r1, 0x0, 0xffffffff000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getpgrp(r3) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 16:03:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) fork() r1 = fork() r2 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:03:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x17, &(0x7f0000000040), 0x4) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') epoll_create(0x1) fork() r2 = fork() r3 = fork() pidfd_open(0x0, 0x0) ptrace(0x8, 0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000000)={&(0x7f00000002c0)=""/250, 0xfa}) getpgrp(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 16:03:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000002dd6bf1abca8d8116079c64429610052f0bae53b5baf1a2f3194c3733ae4c3faaf86cc78bd1bdd9b1c084aa6100cc675f75c1e5bc4ba4d9862a11e55410100000001000000ef62ea1cba657e79b346c8986c5d7204b88f4e329631eb44b4ce61971e891e5861abf54d63aba044390011e8d216f4289d749718a61d811c112a700b", @ANYRES16, @ANYBLOB="000326bd7000ffdbdf25010000000000000009c1000000140018000006007564703a73797a3000000000"], 0x30}}, 0x8880) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x640902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="fea938b90809674fed8078dac3b08baa1700eed0f07f4eca5e41c29bada9256ed1a70000000000000000c626c85c133534688ad43807555ed6b1467212d703d5e7f4d88924dd0427fed53232c706"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10002011) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) [ 2350.657870] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2350.992970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2350.993602] print_req_error: 6 callbacks suppressed [ 2350.993612] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2350.995318] blk_update_request: I/O error, dev loop7, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2350.996456] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2351.001175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.001768] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.002894] blk_update_request: I/O error, dev loop7, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.004009] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2351.007548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.008127] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.009266] blk_update_request: I/O error, dev loop7, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.010400] Buffer I/O error on dev loop7, logical block 2096898, async page read [ 2351.011489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.012064] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.013197] blk_update_request: I/O error, dev loop7, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.014314] Buffer I/O error on dev loop7, logical block 2096899, async page read [ 2351.015419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.015987] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.017121] blk_update_request: I/O error, dev loop7, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.018238] Buffer I/O error on dev loop7, logical block 2096900, async page read [ 2351.019351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.019942] Buffer I/O error on dev loop7, logical block 2096901, async page read [ 2351.021025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.021632] Buffer I/O error on dev loop7, logical block 2096902, async page read [ 2351.022713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.023327] Buffer I/O error on dev loop7, logical block 2096903, async page read [ 2351.150607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.151286] Buffer I/O error on dev loop7, logical block 2096896, async page read [ 2351.152158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.152815] Buffer I/O error on dev loop7, logical block 2096897, async page read [ 2351.154059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.156055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.156742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.157643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.158714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2351.159666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer VM DIAGNOSIS: 16:03:01 Registers: info registers vcpu 0 RAX=0000000000040000 RBX=0000000000000001 RCX=ffffc90001007000 RDX=0000000000040000 RSI=ffffffff81299e01 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff88804e087730 R8 =0000000000000000 R9 =ffffffff856725cf R10=0000000000000000 R11=0000000000000001 R12=0000000000000041 R13=0000000000000012 R14=ffff8880439d4ec0 R15=0000000000000000 RIP=ffffffff81299e03 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3f9c48d700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcdc6e14260 CR3=0000000043724000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822ca14c RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff88804d69f170 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d088 R14=fffffbfff0f3d03e R15=dffffc0000000000 RIP=ffffffff822ca1a0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcf3184e700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c6e8152960 CR3=000000003e84e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000